Changes in 3.1.x. 1) Removal of dynamic zones. 2) Implement 'generate' command. 3) Implement 'super-quiet' mode using multiple -q options (e.g., -qq). 4) Add back dynamic zones. 5) Allow remote compiles. 6) Change output of 'generate' to always be the file name entered (do not prepend /var/lib/shorewall/) 7) Remove some restrictions on remote compiles. 8) Add error checking to generated script. 9) Merge Fabio Longerai's 'length' patch. 10) Add the "-p" option to the compile command. 11) Fix 'check' bug in setup_masq 12) Break compiler/firewall into two files 13) Make Shoreall quiet for a change. 14) Make "Compile-and-go" the only mode of operation. 15) Remove -p 16) Apply Tuomo's patches for IPSEC and Noecho. 17) Fix bridging 18) Fix QUEUE when used in the ESTABLISHED section. 19) Apply Ed Suominen's patch to tcrules. ------------------------------------------------------------------------------- 3.1.5 20) Speed up compilation by rewriting 'fix_bang()'. 21) Correct GATEWAY handling in the providers file. 22) Remove sub-zone exclusion from DNAT/REDIRECT. 23) Add compiled-program/library versioning scheme. ------------------------------------------------------------------------------- 3.1.6 24) Apply Steven Springl's help patch. 25) Fix 'allow/drop/reject' while Shorewall not running. 26) Implement bi-directional macros. 27) Fix TC bridge port handling. 28) Fix/document "check -e" 29) Automatically use capabilities file when non-root. 30) Correct typo in help file ("help drop"). 31) Added 'tcpsyn' ------------------------------------------------------------------------------- 3.1.7 32) Change 'tcpsyn' to 'tcp:syn' 33) Remove superfluous rules in MAC validation. 34) Correct Makefile. 35) Add -t option 36) Restore log messages. 37) Fix "shorewall capabilities" with VERBOSITY < 2. ------------------------------------------------------------------------------- 3.1.8 38) Remove compile-time running of extension scripts. 39) Correctly handle interfaces named 'inet'. 40) SUBSYSLOCK functionality restored. ------------------------------------------------------------------------------- 3.1.9 41) Fix Provider route generation when a specific gateway is specified. 42) Be sure that restore file name is preserved regardless of 'set --' in define_firewall().) 43) Add Simon's redhat prog files. 44) Add 'delete_nat' to compiled program. 45) Move 'shorecap' to /usr/share/shorewall 46) Add debian prog files. 47) Correct syntax error in validate_policy() ------------------------------------------------------------------------------- 3.1.10 48) Streamlined some code in setup_tc1() 49) Process /etc/shorewall/params at run-time. 50) Add new modules to /etc/shorewall/modules.