extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-20 09:47:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

More LOG_MARTIANS update

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8187 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-02-13 20:22:33 +00:00
parent 1c8a0e0eb0
commit dd7155a537
3 changed files with 36 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
Shorewall-common/releasenotes.txt
View File

@ -34,13 +34,32 @@ Migration Issues.
REDIRECT- REDIRECT-
DNAT- DNAT-
4) The default value for LOG_MARTIANS is now 'On'. Previously, the 4) The default value for LOG_MARTIANS has been changed. Previously,
default value was 'Keep'. You can either: the defaults were:
Shorewall-perl - 'Off'
Shorewall-shell - 'No'
The new default values are:
Shorewall-perl - 'On'
Shorewall-shell - 'Yes'.
Shorewall-perl users may:
a) Accept the new default -- martians will be logged from all a) Accept the new default -- martians will be logged from all
interfaces except those with log_martians=0 in shorewall.conf. interfaces with route filtering except those with log_martians=0
in /etc/shorewall/interfaces.
b) Explicitly set LOG_MARTIANS=keep to maintain compatibility with b) Explicitly set LOG_MARTIANS=Off to maintain compatibility with
prior versions of Shorewall.
Shorewall-shell users may:
a) Accept the new default -- martians will be logged from all
interfaces with the route filtering enabled.
b) Explicitly set LOG_MARTIONS=No to maintain compatibility with
prior versions of Shorewall. prior versions of Shorewall.
Problems corrected in 4.1.5. Problems corrected in 4.1.5.
@ -54,9 +73,11 @@ New Features in 4.1.5.
the effect of reducing the average number of rules that each packet the effect of reducing the average number of rules that each packet
must traverse. must traverse.
4) The default value for LOG_MARTIANS is now 'On'. Previously, the 2) The default value for LOG_MARTIANS is now 'Yes' ('On' in
default value was 'Keep'. The shorewall.conf file has also been Shorewall-perl). Previously, the default value was 'No' ('Off' in
updated to specify a value of 'On'. Shorewall-perl). The shorewall.conf file has also been
updated to specify a value of 'Yes' (which is interpreted as 'On'
by Shorewall-perl).
New Features in Shorewall 4.1. New Features in Shorewall 4.1.

2
Shorewall-common/shorewall.conf
View File

@ -62,7 +62,7 @@ RFC1918_LOG_LEVEL=info
SMURF_LOG_LEVEL=info SMURF_LOG_LEVEL=info
LOG_MARTIANS=On LOG_MARTIANS=Yes
############################################################################### ###############################################################################
# L O C A T I O N O F F I L E S A N D D I R E C T O R I E S # L O C A T I O N O F F I L E S A N D D I R E C T O R I E S

11
manpages/shorewall.conf.xml
View File

@ -717,10 +717,13 @@ net all DROP info</programlisting>then the chain name is 'net2all'
<para>If set to <emphasis role="bold">Yes</emphasis> or <emphasis <para>If set to <emphasis role="bold">Yes</emphasis> or <emphasis
role="bold">yes</emphasis>, sets role="bold">yes</emphasis>, sets
/proc/sys/net/ipv4/conf/all/log_martians and /proc/sys/net/ipv4/conf/all/log_martians and
/proc/sys/net/ipv4/conf/default/log_martians to 1. Default is /proc/sys/net/ipv4/conf/default/log_martians to 1. In Shorewall
<emphasis role="bold">No</emphasis> which sets both of the above to versions prior to 4.1.5, the default is <emphasis
zero. If you do not enable martian logging for all interfaces, you role="bold">No</emphasis> which sets both of the above to zero. In
may still enable it for individual interfaces using the <emphasis Shorewall 4.1.5, the default value was chaned to <emphasis
role="bold">Yes</emphasis> which sets both of the above to one. If
you do not enable martian logging for all interfaces, you may still
enable it for individual interfaces using the <emphasis
role="bold">logmartians</emphasis> interface option in <ulink role="bold">logmartians</emphasis> interface option in <ulink
url="shorewall-interfaces.html">shorewall-interfaces</ulink>(5).</para> url="shorewall-interfaces.html">shorewall-interfaces</ulink>(5).</para>