mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-27 01:53:27 +01:00
Clean up release notes, including the removal of a large block of inadvertently pasted text
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4185 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
12e9f50a35
commit
fe221c8d6e
@ -185,22 +185,23 @@ New Features:
|
|||||||
|
|
||||||
The value specified in the 3.2 shorewall.conf is 1. So you can make
|
The value specified in the 3.2 shorewall.conf is 1. So you can make
|
||||||
Shorewall as verbose as previously using a single -v and you can make it
|
Shorewall as verbose as previously using a single -v and you can make it
|
||||||
silent by using a single -q.
|
almost silent by using a single -q.
|
||||||
|
|
||||||
If the default is set at 2, you can still make a command silent by using
|
If VERBOSITY is set at 2, you can still make a command nearly
|
||||||
two "q"s (e.g., shorewall -qq restart).
|
silent by using two "q"s (e.g., shorewall -qq restart).
|
||||||
|
|
||||||
In summary, each "q" subtracts one from VERBOSITY while each "v" adds one
|
In summary, each "q" subtracts one from VERBOSITY while each "v" adds one
|
||||||
to VERBOSITY.
|
to VERBOSITY.
|
||||||
|
|
||||||
The "shorewall show log", "shorewall logwatch" and "shorewall dump"
|
The "shorewall show log", "shorewall logwatch" and "shorewall dump"
|
||||||
commands require VERBOSITY to be greater than or equal to 3 to display MAC
|
commands require VERBOSITY to be greater than or equal to 3 to
|
||||||
addresses.This is consistent with the previous implementation which
|
display MAC addresses.This is consistent with the previous
|
||||||
required a single -v to enable MAC display but means that if you set
|
implementation which required a single -v to enable MAC display but
|
||||||
VERBOSITY=0 in shorewall.conf, then you will need to include -vvv in
|
means that if you set VERBOSITY=0 in shorewall.conf, then you will
|
||||||
commands that display log records in order to have MACs displayed.
|
need to include -vvv in commands that display log records in order
|
||||||
|
to have MACs displayed.
|
||||||
|
|
||||||
To make the display of MAC addresses let cumbersome, a '-m' option has
|
To make the display of MAC addresses less cumbersome, a '-m' option has
|
||||||
been added to the "show" and logwatch commands:
|
been added to the "show" and logwatch commands:
|
||||||
|
|
||||||
shorewall show -m log
|
shorewall show -m log
|
||||||
@ -247,7 +248,10 @@ New Features:
|
|||||||
on another system under Shorewall Lite, there are certain limitations.
|
on another system under Shorewall Lite, there are certain limitations.
|
||||||
|
|
||||||
1) A compatible version of Shorewall Lite must be running on the remote
|
1) A compatible version of Shorewall Lite must be running on the remote
|
||||||
system.
|
system. Going forward, the goal is that any minor version of
|
||||||
|
the current major version will be compatible. So if the
|
||||||
|
program is compiled using Shorewall 3.2.x, any 3.2.y version
|
||||||
|
or 3.p.q version (where p > 2) of Shorewall Lite will be compatible.
|
||||||
2) The 'detectnets' interface option is not allowed.
|
2) The 'detectnets' interface option is not allowed.
|
||||||
3) DYNAMIC_ZONES=Yes is not allowed.
|
3) DYNAMIC_ZONES=Yes is not allowed.
|
||||||
4) You must supply the file /etc/shorewall/capabilities to provide
|
4) You must supply the file /etc/shorewall/capabilities to provide
|
||||||
@ -339,42 +343,7 @@ New Features:
|
|||||||
4) In macro files, you can now use the reserved words SOURCE and DEST
|
4) In macro files, you can now use the reserved words SOURCE and DEST
|
||||||
in the columns of the same names. When Shorewall expands the
|
in the columns of the same names. When Shorewall expands the
|
||||||
macro, it will substitute the SOURCE from the macro invocation for
|
macro, it will substitute the SOURCE from the macro invocation for
|
||||||
SOURCE and the DEST from the invocation for DEST. This allows you2) "load" and "reload" commands have been added. These commands allow
|
SOURCE and the DEST from the invocation for DEST. This allows you
|
||||||
a non-root user with ssh access to a remote system to compile a
|
|
||||||
firewall script on the local system and to install that script on
|
|
||||||
the remote system.
|
|
||||||
|
|
||||||
Syntax is:
|
|
||||||
|
|
||||||
shorewall [re]load [ <directory> ] <system>
|
|
||||||
|
|
||||||
If <directory> is omitted, the current working directory is
|
|
||||||
assumed.
|
|
||||||
|
|
||||||
The command is equivalent to:
|
|
||||||
|
|
||||||
/sbin/shorewall compile -e . firewall &&\
|
|
||||||
scp firewall root@<system>:/var/lib/shorewall-lite/ &&\
|
|
||||||
ssh root@<system> '/sbin/shorewall-lite [re]start' # Note 1
|
|
||||||
|
|
||||||
In other words, the configuration in the specified (or defaulted)
|
|
||||||
directory is compiled to a file called firewall in that
|
|
||||||
directory. If compilation succeeds, then 'firewall' is copied to the
|
|
||||||
(usually remote) <system> using scp. If the copy succeeds,
|
|
||||||
Shorewall Lite on <system> is started or restarted via ssh (
|
|
||||||
load causes Shorewall Lite to be started and 'reload' causes
|
|
||||||
Shorewall Lite to be re-started)
|
|
||||||
|
|
||||||
Note 1: In Shorewall Lite 3.2.0 RC4, the 'firewall' script has moved
|
|
||||||
from /usr/share/shorewall-lite/ to /var/lib/shorewall-lite in
|
|
||||||
packages from shorewall.net. The package maintainers for the
|
|
||||||
various distributions are free to choose the directory where the
|
|
||||||
script will be stored under their distribution by altering the
|
|
||||||
value of LITEDIR in /usr/share/shorewall/configpath. You can run the
|
|
||||||
"shorewall show config" command to see how your distribution
|
|
||||||
defines LITEDIR.
|
|
||||||
|
|
||||||
|
|
||||||
to write macros that act in both directions (from source to destination
|
to write macros that act in both directions (from source to destination
|
||||||
and from destination to source).
|
and from destination to source).
|
||||||
|
|
||||||
@ -614,7 +583,7 @@ New Features:
|
|||||||
|
|
||||||
The command is equivalent to:
|
The command is equivalent to:
|
||||||
|
|
||||||
/sbin/shorewall compile -e . firewall &&\
|
/sbin/shorewall compile -e <directory> firewall &&\
|
||||||
scp firewall root@<system>:/var/lib/shorewall-lite/ &&\
|
scp firewall root@<system>:/var/lib/shorewall-lite/ &&\
|
||||||
ssh root@<system> '/sbin/shorewall-lite [re]start' # Note 1
|
ssh root@<system> '/sbin/shorewall-lite [re]start' # Note 1
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user