diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 081b1204f..171c147be 100755 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -28,6 +28,8 @@ Changes in 3.0.3 14) Change default for CLEAR_TC to "Yes". +15) Added warning to the zones file. + Changes in 3.0.2 1) Typos in the Samples corrected. diff --git a/Shorewall/zones b/Shorewall/zones index c02c74f7a..2a28ec379 100644 --- a/Shorewall/zones +++ b/Shorewall/zones @@ -5,6 +5,16 @@ # # This file determines your network zones. # +# WARNING: The format of this file changed in Shorewall 3.0.0. You can +# continue to use your old records provided that you set +# IPSECFILE=ipsec in /etc/shorewall/shorewall.conf. This will +# signal Shorewall that the IPSEC-related zone options are +# still specified in /etc/shorewall/ipsec rather than in this +# file. +# +# To use records in the format described below, you must have +# IPSECFILE=zones specified in /etc/shorewall/shorewall.conf. +# # Columns are: # # ZONE Short name of the zone (5 Characters or less in length). @@ -90,9 +100,9 @@ # #ZONE TYPE OPTIONS IN OUT # # OPTIONS OPTIONS # fw firewall -# net -# loc -# dmz +# net ipv4 +# loc ipv4 +# dmz ipv4 # # # For more information, see http://www.shorewall.net/Documentation.htm#Zones