More flailing with 'detect'

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6141 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb

Shorewall-common/changelog.txt

@@ -4,6 +4,10 @@ Changes in 3.9.5
 
 2)  Fix LOGALLNEW.
 
+3)  Implement log level, protocol and port validation.
+
+4)  Fix MACLIST log rule generation problem.
+
 Changes in 3.9.4
 
 1)  Fix port 0 problem (again!).

Shorewall-common/lib.base

@@ -103,6 +103,20 @@ list_search() # $1 = element to search for , $2-$n = list
     return 1
 }
 
+#
+# Undo the effect of 'separate_list()'
+#
+combine_list()
+{
+    local f o=
+
+    for f in $* ; do
+        o="${o:+$o,}$f"
+    done
+
+    echo $o
+}
+
 #
 # Suppress all output for a command
 #

Shorewall-common/lib.config

@@ -98,20 +98,6 @@ separate_list() {
     echo "$newlist"
 }
 
-#
-# Undo the effect of 'separate_list()'
-#
-combine_list()
-{
-    local f o=
-
-    for f in $* ; do
-        o="${o:+$o,}$f"
-    done
-
-    echo $o
-}
-
 #
 # Display elements of a list with leading white space
 #

Shorewall-common/releasenotes.txt

@@ -22,9 +22,18 @@ Problems corrected in 3.9.5.
 
 2)  Invalid rules were generated by LOGALLNEW.
 
+3)  Setting MACLIST_LOG_LEVEL="" and MACLIST_DISPOSITION=ACCEPT or
+    MACLIST_DISPOSITION=REJECT resulted in Perl run-time errors.
+    
 Other changes in Shorewall 3.9.4
 
-None.
+1)  The Shorewall-perl compiler now validates all log levels. It also
+    validates all protocol names against /etc/protocols and all service
+    names against /etc/services.
+
+    In all cases, the iptables-restore input will include the numeric
+    values associated with log level, protocols and services so that
+    iptables-restore doesn't have to convert these names.
 
 Migration Considerations: