extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-23 19:21:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

Prepare for 4.4.17

Browse Source
This commit is contained in:
Tom Eastep 2011-02-04 06:44:02 -08:00
parent b61ad28897
commit ea2c72d1b1
18 changed files with 41 additions and 54 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall-init/install.sh
View File

@ -23,7 +23,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall-init/shorewall-init.spec
View File

@ -1,6 +1,6 @@
%define name shorewall-init %define name shorewall-init
%define version 4.4.17 %define version 4.4.17
%define release 0RC1 %define release 0base
Summary: Shorewall-init adds functionality to Shoreline Firewall (Shorewall). Summary: Shorewall-init adds functionality to Shoreline Firewall (Shorewall).
Name: %{name} Name: %{name}
@ -119,6 +119,8 @@ fi
%doc COPYING changelog.txt releasenotes.txt %doc COPYING changelog.txt releasenotes.txt
%changelog %changelog
* Fri Feb 04 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0base
* Sun Jan 30 2011 Tom Eastep tom@shorewall.net * Sun Jan 30 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0RC1 - Updated to 4.4.17-0RC1
* Fri Jan 28 2011 Tom Eastep tom@shorewall.net * Fri Jan 28 2011 Tom Eastep tom@shorewall.net

2
Shorewall-init/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall-lite/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall-lite/shorewall-lite.spec
View File

@ -1,6 +1,6 @@
%define name shorewall-lite %define name shorewall-lite
%define version 4.4.17 %define version 4.4.17
%define release 0RC1 %define release 0base
Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems. Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -102,6 +102,8 @@ fi
%doc COPYING changelog.txt releasenotes.txt %doc COPYING changelog.txt releasenotes.txt
%changelog %changelog
* Fri Feb 04 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0base
* Sun Jan 30 2011 Tom Eastep tom@shorewall.net * Sun Jan 30 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0RC1 - Updated to 4.4.17-0RC1
* Fri Jan 28 2011 Tom Eastep tom@shorewall.net * Fri Jan 28 2011 Tom Eastep tom@shorewall.net

2
Shorewall-lite/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall/Perl/Shorewall/Config.pm
View File

@ -365,7 +365,7 @@ sub initialize( $ ) {
EXPORT => 0, EXPORT => 0,
STATEMATCH => '-m state --state', STATEMATCH => '-m state --state',
UNTRACKED => 0, UNTRACKED => 0,
VERSION => "4.4.17-RC1", VERSION => "4.4.17",
CAPVERSION => 40417 , CAPVERSION => 40417 ,
); );
# #

2
Shorewall/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

51
Shorewall/releasenotes.txt
View File

@ -1,6 +1,5 @@
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
S H O R E W A L L 4 . 4 . 1 7 S H O R E W A L L 4 . 4 . 1 7
R C 1
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
I. PROBLEMS CORRECTED IN THIS RELEASE I. PROBLEMS CORRECTED IN THIS RELEASE
@ -14,8 +13,6 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
RC 1
1) Previously, Shorewall did not check the length of the names of 1) Previously, Shorewall did not check the length of the names of
accounting chains and manual chains. This could result in accounting chains and manual chains. This could result in
errors when loading the resulting ruleset. Now, the compiler issues errors when loading the resulting ruleset. Now, the compiler issues
@ -62,17 +59,7 @@ RC 1
This is now flagged as an error at compile time. This is now flagged as an error at compile time.
Beta 3 4) Two defects in compiler module loading have been corrected:
1) If the SOURCE column in /etc/shorewall6/rules contained an IPv6
address enclosed in [...], a spurious error was generated:
ERROR: Invalid VLSM (0]) : /etc/shorewall6/rules (line 20)
The error did not occur if <...> was used to enclose the IPv6
address.
2) Two defects in compiler module loading have been corrected:
a) Previously, the kernel/net/ipv6/netfilter/ directory was not a) Previously, the kernel/net/ipv6/netfilter/ directory was not
searched. searched.
@ -80,32 +67,28 @@ Beta 3
b) A Perl diagnostic was issued when running on a monolithic kernel b) A Perl diagnostic was issued when running on a monolithic kernel
when the modutils package was installed. when the modutils package was installed.
Beta 2 5) A line containing only 'INCLUDE' appearing in an extension script
1) A line containing only 'INCLUDE' appearing in an extension script
now generates a compile-time diagnostic rather than a run-time now generates a compile-time diagnostic rather than a run-time
diagnostic. diagnostic.
2) Previously, the uninstall.sh scripts used insserv (if installed) on 6) Previously, the uninstall.sh scripts used insserv (if installed) on
Debian-based systems. These scripts now use the preferred tool Debian-based systems. These scripts now use the preferred tool
(updaterc.d). (updaterc.d).
3) Beginning with 4.4.16, compilation would fail if an empty shell 7) Beginning with 4.4.16, compilation would fail if an empty shell
variable was referenced in a config file on a system where /bin/sh variable was referenced in a config file on a system where /bin/sh
is the Bourne Again Shell (bash). is the Bourne Again Shell (bash).
4) In earlier versions. if OPTIMIZE=8 then the ruleset displayed by 8) In earlier versions. if OPTIMIZE=8 then the ruleset displayed by
'check -r' was the same as when OPTIMIZE=0 'check -r' was the same as when OPTIMIZE=0
(unoptimized). Similarly, if OPTIMIZE=9 then the ruleset displayed (unoptimized). Similarly, if OPTIMIZE=9 then the ruleset displayed
was the same as when OPTIMIZE=1. was the same as when OPTIMIZE=1.
5) Startup could previously fail on a system where kernel module 9) Startup could previously fail on a system where kernel module
autoloading was not available and where TC_ENABLED=Simple was autoloading was not available and where TC_ENABLED=Simple was
specified in shorewall.conf. specified in shorewall.conf.
Beta 1 10) Previously, a 'done.' message could be printed at the end of
1) Previously, a 'done.' message could be printed at the end of
command processing even when the command had failed. Now, such a command processing even when the command had failed. Now, such a
message only appears if the command completed successfully. message only appears if the command completed successfully.
@ -120,13 +103,6 @@ Beta 1
I I I. N E W F E A T U R E S I N T H I S R E L E A S E I I I. N E W F E A T U R E S I N T H I S R E L E A S E
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
RC 1
1) A 'show ipa' command has been added to /sbin/shorewall. It
displays each per-IP accounting table.
Beta 3
1) This release adds support for per-IP accounting using the ACCOUNT 1) This release adds support for per-IP accounting using the ACCOUNT
target. That target is only available when xtables-addons is target. That target is only available when xtables-addons is
installed. This support has been successfully tested with installed. This support has been successfully tested with
@ -206,9 +182,10 @@ Beta 3
"shorewall stop; shorewall start" to have a successful restart "shorewall stop; shorewall start" to have a successful restart
(counters will be cleared). (counters will be cleared).
Beta 2 2) A 'show ipa' command has been added to /sbin/shorewall. It
displays each per-IP accounting table.
1) Traditionally, the -lite products have used the modules (or 3) Traditionally, the -lite products have used the modules (or
helpers) file on the firewall system unless there is a modules (or helpers) file on the firewall system unless there is a modules (or
helpers) file in the configuration directory on the administrative helpers) file in the configuration directory on the administrative
system. This release introduces the USE_LOCAL_MODULES option in system. This release introduces the USE_LOCAL_MODULES option in
@ -218,7 +195,7 @@ Beta 2
administrative system will be used to determine the set of modules administrative system will be used to determine the set of modules
loaded. loaded.
2) Given that shell variables are expanded at compile time, there was 4) Given that shell variables are expanded at compile time, there was
previously no way to cause such variables to be expanded at run previously no way to cause such variables to be expanded at run
time. This made it difficult (to impossible) to include dynamic IP time. This made it difficult (to impossible) to include dynamic IP
addresses in a Shorewall-lite configuration. addresses in a Shorewall-lite configuration.
@ -257,16 +234,14 @@ Beta 2
that the firewall starts, the resulting Netfilter rule(s) that the firewall starts, the resulting Netfilter rule(s)
containing the interface address are not added. containing the interface address are not added.
Beta 1 5) The shell variables set in /etc/shorewall/params
1) The shell variables set in /etc/shorewall/params
(/etc/shorewall6/params) are now available in the compiled script (/etc/shorewall6/params) are now available in the compiled script
at run-time with EXPORTPARAMS=No. The EXPORTPARAMS option is now at run-time with EXPORTPARAMS=No. The EXPORTPARAMS option is now
deprecated and the released /etc/shorewall/shorewall.conf and deprecated and the released /etc/shorewall/shorewall.conf and
/etc/shorewall/shorewall6.conf have been modified to specify /etc/shorewall/shorewall6.conf have been modified to specify
EXPORTPARAMS=No. EXPORTPARAMS=No.
2) The INCLUDE directive may now be used in the following extension 6) The INCLUDE directive may now be used in the following extension
scripts: scripts:
clear clear

4
Shorewall/shorewall.spec
View File

@ -1,6 +1,6 @@
%define name shorewall %define name shorewall
%define version 4.4.17 %define version 4.4.17
%define release 0RC1 %define release 0base
Summary: Shoreline Firewall is an iptables-based firewall for Linux systems. Summary: Shoreline Firewall is an iptables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -109,6 +109,8 @@ fi
%doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples %doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples
%changelog %changelog
* Fri Feb 04 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0base
* Sun Jan 30 2011 Tom Eastep tom@shorewall.net * Sun Jan 30 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0RC1 - Updated to 4.4.17-0RC1
* Fri Jan 28 2011 Tom Eastep tom@shorewall.net * Fri Jan 28 2011 Tom Eastep tom@shorewall.net

2
Shorewall/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6-lite/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall6-lite/shorewall6-lite.spec
View File

@ -1,6 +1,6 @@
%define name shorewall6-lite %define name shorewall6-lite
%define version 4.4.17 %define version 4.4.17
%define release 0RC1 %define release 0base
Summary: Shoreline Firewall 6 Lite is an ip6tables-based firewall for Linux systems. Summary: Shoreline Firewall 6 Lite is an ip6tables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -93,6 +93,8 @@ fi
%doc COPYING changelog.txt releasenotes.txt %doc COPYING changelog.txt releasenotes.txt
%changelog %changelog
* Fri Feb 04 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0base
* Sun Jan 30 2011 Tom Eastep tom@shorewall.net * Sun Jan 30 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0RC1 - Updated to 4.4.17-0RC1
* Fri Jan 28 2011 Tom Eastep tom@shorewall.net * Fri Jan 28 2011 Tom Eastep tom@shorewall.net

2
Shorewall6-lite/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall6/shorewall6.spec
View File

@ -1,6 +1,6 @@
%define name shorewall6 %define name shorewall6
%define version 4.4.17 %define version 4.4.17
%define release 0RC1 %define release 0base
Summary: Shoreline Firewall 6 is an ip6tables-based firewall for Linux systems. Summary: Shoreline Firewall 6 is an ip6tables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -98,6 +98,8 @@ fi
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn ipv6 Samples6 %doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn ipv6 Samples6
%changelog %changelog
* Fri Feb 04 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0base
* Sun Jan 30 2011 Tom Eastep tom@shorewall.net * Sun Jan 30 2011 Tom Eastep tom@shorewall.net
- Updated to 4.4.17-0RC1 - Updated to 4.4.17-0RC1
* Fri Jan 28 2011 Tom Eastep tom@shorewall.net * Fri Jan 28 2011 Tom Eastep tom@shorewall.net

2
Shorewall6/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.17-RC1 VERSION=4.4.17
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
docs/GettingStarted.xml
View File

@ -24,6 +24,8 @@
<year>2010</year> <year>2010</year>
<year>2011</year>
<holder>Thomas M. Eastep</holder> <holder>Thomas M. Eastep</holder>
</copyright> </copyright>