Go to file
teastep b66929a65e Large merge of function from EXPERIMENTAL to HEAD.
1) Elimination of the "shorewall monitor" command.

2) The /etc/shorewall/ipsec and /etc/shorewall/zones file are combined into
a single /etc/shorewall/zones file. This is done in an upwardly-compatible
way so that current users can continue to use their existing files.

3) Support has been added for the arp_ignore interface option.

4) DROPINVALID has been removed from shorewall.conf. Behavior is as if
DROPINVALID=No was specified.

5) The 'nobogons' option and BOGON_LOG_LEVEL are removed.

6) Error and warning messages have been made easier to spot by using
capitalization (e.g., ERROR: and WARNING:).

7) The /etc/shorewall/policy file now contains a new connection policy and a
policy for ESTABLISHED packets. Useful for users of snort-inline who want to
pass all packets to the QUEUE target.

8) A new 'critical' option has been added to /etc/shorewall/routestopped.
Shorewall insures communication between the firewall and 'critical' hosts
throughout start, restart, stop and clear. Useful for diskless firewall's
with NFS-mounted file systems, LDAP servers, Crossbow, etc.

9) Macros. Macros are very similar to actions but are easier to use, allow
parameter substitution and are more efficient. Almost all of the standard
actions have been converted to macros in the EXPERIMENTAL branch.

10) The default value of ADD_IP_ALIASES in shorewall.conf is changed to No.

11) If you have 'make' installed on your firewall, then when you use
the '-f' option to 'shorewall start' (as happens when you reboot),
if your /etc/shorewall/ directory contains files that were modified
after Shorewall was last restarted then Shorewall is started using
the config files rather than using the saved configuration.


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2409 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
2005-07-25 23:08:09 +00:00
contrib/iana_reserved My original idea here was stupid - we have to maintain different 2005-07-04 12:38:04 +00:00
CVSROOT Missed one for Cristian 2005-05-28 04:45:07 +00:00
Lrp Remove usersets file 2005-03-31 23:53:57 +00:00
Lrp2 Update for 2.2.5 2005-05-20 14:10:58 +00:00
LrpN Update LrpN for 2.2.4 - prerelease 2005-04-11 20:22:48 +00:00
Samples Add warning about 'nobogons' 2005-01-26 00:00:44 +00:00
Shorewall Large merge of function from EXPERIMENTAL to HEAD. 2005-07-25 23:08:09 +00:00
Shorewall2 Obsoleting Shorewall2/ tree 2005-07-09 06:14:45 +00:00
Shorewall-docs Just in case 2005-03-31 23:26:45 +00:00
Shorewall-docs2 Some documentation updates 2005-07-20 03:18:23 +00:00
Shorewall-docsN Update from 2.0 2004-07-06 20:47:58 +00:00
Shorewall-Website Announce Shorewall 2.4.2 2005-07-21 16:23:08 +00:00
STABLE Add a note about where to go for code now. 2005-07-09 06:03:11 +00:00
STABLE2 Obsoleting STABLE2/ tree 2005-07-09 06:04:35 +00:00
tools/build Adding fixed version of recent patches by Cristian & Tom 2005-07-22 22:43:08 +00:00