diff --git a/Shorewall2/changelog.txt b/Shorewall2/changelog.txt index 3a49cce37..179563c1e 100644 --- a/Shorewall2/changelog.txt +++ b/Shorewall2/changelog.txt @@ -13,3 +13,5 @@ Changes since 2.0.0 6) Fix another _frwd problem. 7) Add -x option to /sbin/shorewall. + +8) Implement Sean Mathews's fix fix Proxy ARP and IPSEC. diff --git a/Shorewall2/firewall b/Shorewall2/firewall index 85b16de98..e98ff2606 100755 --- a/Shorewall2/firewall +++ b/Shorewall2/firewall @@ -1511,7 +1511,7 @@ setup_proxy_arp() { [ -n "$persistent" ] && haveroute=yes fi - run_arp -Ds $address $external pub + run_arp -i $external -Ds $address $external pub echo 1 > /proc/sys/net/ipv4/conf/$interface/proxy_arp echo 0 > /proc/sys/net/ipv4/conf/$external/proxy_arp diff --git a/Shorewall2/releasenotes.txt b/Shorewall2/releasenotes.txt index db25db04c..58ff127af 100755 --- a/Shorewall2/releasenotes.txt +++ b/Shorewall2/releasenotes.txt @@ -10,6 +10,9 @@ Problems Corrected since 2.0.0 /etc/shorewall/hosts, superfluous rules are generated in the _frwd chain. +3) Thanks to Sean Mathews, a long-standing problem with Proxy ARP and + IPSEC has been corrected. Thanks Sean!!! + Problems Corrected since 2.0.1 Beta 1 1) The BOGON_LOG_LEVEL variable is now included in shorewall.conf. It