From f49848bd5bba5dd6c5d7c7ddb7e35c1768dab222 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Mon, 26 Apr 2010 16:32:53 -0700 Subject: [PATCH] Document rare optimization fix. Signed-off-by: Tom Eastep --- Shorewall/changelog.txt | 2 ++ Shorewall/releasenotes.txt | 16 ++++++++++++++++ 2 files changed, 18 insertions(+) diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 1380d128c..841b6285a 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -36,6 +36,8 @@ Changes in Shorewall 4.4.9 17) Set IP before sourcing the params file. +18) Fix rare optimization bug. + Changes in Shorewall 4.4.8 1) Correct handling of RATE LIMIT on NAT rules. diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 51b4cd7e2..2d5133ada 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -278,6 +278,22 @@ I I I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E 11) If find_first_interface_address() was called in the params file, a fatal error occured on start/restart. +12) The following valid configuration produced invalid + iptables-restore input: + + /etc/shorewall/shorewall.conf: OPTIMIZE=8 + + /etc/shorewall/interfaces: + + #ZONE INTERFACE BROADCAST OPTIONS + vpn TUN+ - tun+ + + /etc/shorewall/netmap: + + #TYPE NET1 INTEFACE NET2 + SNAT 1.2.3.0/24 TUN0 3.4.5.0/24 + DNAT 3.4.5.0/24 TUN0 1.2.3.0/24 + ---------------------------------------------------------------------------- I V. K N O W N P R O B L E M S R E M A I N I N G ----------------------------------------------------------------------------