diff --git a/Samples/one-interface/shorewall.conf b/Samples/one-interface/shorewall.conf index 8fa6612aa..38c1f201c 100644 --- a/Samples/one-interface/shorewall.conf +++ b/Samples/one-interface/shorewall.conf @@ -109,7 +109,7 @@ RCP_COMMAND='scp ${files} ${root}@${system}:${destination}' IP_FORWARDING=Off -ADD_IP_ALIASES=Yes +ADD_IP_ALIASES=No ADD_SNAT_ALIASES=No diff --git a/Samples/three-interfaces/shorewall.conf b/Samples/three-interfaces/shorewall.conf index e0ea467ce..56ef3b23c 100644 --- a/Samples/three-interfaces/shorewall.conf +++ b/Samples/three-interfaces/shorewall.conf @@ -109,7 +109,7 @@ RCP_COMMAND='scp ${files} ${root}@${system}:${destination}' IP_FORWARDING=On -ADD_IP_ALIASES=Yes +ADD_IP_ALIASES=No ADD_SNAT_ALIASES=No diff --git a/Samples/two-interfaces/shorewall.conf b/Samples/two-interfaces/shorewall.conf index 357768829..198832d3b 100644 --- a/Samples/two-interfaces/shorewall.conf +++ b/Samples/two-interfaces/shorewall.conf @@ -116,7 +116,7 @@ RCP_COMMAND='scp ${files} ${root}@${system}:${destination}' IP_FORWARDING=On -ADD_IP_ALIASES=Yes +ADD_IP_ALIASES=No ADD_SNAT_ALIASES=No diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index f95ae9ca7..c96b1b908 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -14,6 +14,8 @@ Changes in Shorewall 4.4.7 7) Fix case where MARK target is unavailable. +8) Change default to ADD_IP_ALIASES=No + Changes in Shorewall 4.4.6 1) Fix for rp_filter and kernel 2.6.31. diff --git a/Shorewall/configfiles/shorewall.conf b/Shorewall/configfiles/shorewall.conf index d3573930f..0d933ed67 100644 --- a/Shorewall/configfiles/shorewall.conf +++ b/Shorewall/configfiles/shorewall.conf @@ -107,7 +107,7 @@ RCP_COMMAND='scp ${files} ${root}@${system}:${destination}' IP_FORWARDING=On -ADD_IP_ALIASES=Yes +ADD_IP_ALIASES=No ADD_SNAT_ALIASES=No diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 5e38c7525..485354c5a 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -178,6 +178,11 @@ Shorewall 4.4.7 RC 1 now, if the zone has :0.0.0.0/0 (even with exclusions), then it may have no additional members in /etc/shorewall/hosts. +13) ADD_IP_ALIASES=No is now the setting in the released shorewall.conf + and in all of the samples. This will not affect you during upgrade + unless you choose to replace your current shorewall.conf with the + one from the release (not recommended). + ---------------------------------------------------------------------------- P R O B L E M S C O R R E C T E D I N 4 . 4 . 7 ----------------------------------------------------------------------------