Apply bridge fix to 4.4

This commit is contained in:
Tom Eastep 2009-11-22 08:18:23 -08:00
parent ecf6a0ec4a
commit c8209f4ce2
3 changed files with 14 additions and 4 deletions

View File

@ -322,7 +322,7 @@ sub process_routestopped() {
$seq++;
my $rule = do_proto( $proto, $ports, $sports, 1 );
my $rule = do_proto( $proto, $ports, $sports, 0 );
for my $host ( split /,/, $hosts ) {
validate_host $host, 1;
@ -2316,7 +2316,7 @@ EOF
}
} else {
for my $interface ( all_bridges ) {
emit "do_iptables -A FORWARD -p 58 " . match_source_interface( $interface ) . match_dest_interface( $interface ) . "-j ACCEPT";
emit "do_iptables -A FORWARD -p 58 " . match_source_dev( $interface ) . match_dest_dev( $interface ) . "-j ACCEPT";
}
if ( $config{IP_FORWARDING} eq 'on' ) {

View File

@ -1,6 +1,8 @@
Changes in Shorewall 4.4.5
None.
1) Fix 15-port limit removal change.
2) Fix handling of interfaces with the 'bridge' option.
Changes in Shorewall 4.4.4

View File

@ -177,7 +177,15 @@ Shorewall 4.4.5
P R O B L E M S C O R R E C T E D I N 4 . 4 . 5
----------------------------------------------------------------------------
None.
1) The change which removed the 15 port limitation on
/etc/shorewall/routestopped was incomplete. The result was that if
more than 15 ports are listed, an error was generated.
2) If any interfaces have the 'bridge' option specified, compilation
fails with the error:
Undefined subroutine &Shorewall::Rules::match_source_interface called
at /usr/share/shorewall/Shorewall/Rules.pm line 2319.
----------------------------------------------------------------------------
K N O W N P R O B L E M S R E M A I N I N G