diff --git a/STABLE2/changelog.txt b/STABLE2/changelog.txt index 5f15550f2..5ab89b4a7 100644 --- a/STABLE2/changelog.txt +++ b/STABLE2/changelog.txt @@ -34,3 +34,5 @@ Changes since 2.0.2 comments in the rules file WRT "all" in SOURCE or DEST. 16) Pass INVALID icmp packets through the blacklisting chains. + +17) Fix bogus code in process_tc_rule() diff --git a/STABLE2/firewall b/STABLE2/firewall index d684f0d4b..26b5296ce 100755 --- a/STABLE2/firewall +++ b/STABLE2/firewall @@ -2052,11 +2052,7 @@ process_tc_rule() esac fi - if [ "x$dest" != "x-" ]; then - verify_interface $dest || fatal_error "Unknown interface $dest in rule \"$rule\"" - r="${r}$(match_dest_dev $dest) " - fi - + [ "x$dest" = "x-" ] || r="${r}-d $dest " [ "$proto" = "all" ] || r="${r}-p $proto " [ "x$port" = "x-" ] || r="${r}--dport $port " [ "x$sport" = "x-" ] || r="${r}--sport $sport " diff --git a/STABLE2/releasenotes.txt b/STABLE2/releasenotes.txt index 71755621f..0df160bb5 100644 --- a/STABLE2/releasenotes.txt +++ b/STABLE2/releasenotes.txt @@ -44,6 +44,11 @@ Problems Corrected since 2.0.2 not possible to blacklist hosts that are mounting certain types of ICMP-based DOS attacks. +Problems corrected since 2.0.3: + +1) Non-empty entries in the /etc/shorewall/tcrules DEST column + generated an error message and Shorewall failed to start. + ----------------------------------------------------------------------- Issues when migrating from Shorewall 2.0.2 to Shorewall 2.0.3: