mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-24 08:33:40 +01:00
0251c3729e
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6805 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
219 lines
4.2 KiB
Plaintext
219 lines
4.2 KiB
Plaintext
Changes in 4.0.0 RC 2
|
|
|
|
1) Fix zone type check in Tunnels File.
|
|
|
|
2) Remove -f as default start OPTIONS.
|
|
|
|
3) Remove 3.4 compatibility hacks.
|
|
|
|
Changes in 4.0.0 RC 1
|
|
|
|
1) shorewall-perl RPM no longer installable under shorewall 3.4.
|
|
|
|
2) Fix limited broadcast and detectnets/routeback interfaces.
|
|
|
|
3) Use optimized 'split' for faster compilation.
|
|
|
|
4) Validate host part in hosts file entry.
|
|
|
|
5) Fix IPSECFILE=ipsec.
|
|
|
|
6) Make ':noah' the default.
|
|
|
|
7) Work around SELinux nonsense.
|
|
|
|
8) Restore the 'refresh' command.
|
|
|
|
9) Allow ipsec zone in GATEWAY ZONE column of the tunnels file.
|
|
|
|
10) Raise error on chmod failure.
|
|
|
|
11) Handle shell variables with zero value correctly.
|
|
|
|
Changes in 4.0.0 Beta 6
|
|
|
|
1) First step to adding compiler debugging facility.
|
|
|
|
2) Assume that iptables-restore is in the same directory as $IPTABLES
|
|
|
|
3) Fix buildports.pm to handle bogus entries in /etc/protocols and
|
|
/etc/services.
|
|
|
|
4) Allow COMMENT in the accounting file.
|
|
|
|
Changes in 4.0.0 Beta 6
|
|
|
|
1) Validate the DISPOSITION in /etc/shorewall/maclist entries.
|
|
|
|
2) Add versioning to capabilities files.
|
|
|
|
3) Improve compiler selection.
|
|
|
|
4) DYNAMIC_ZONES=Yes and bridges.
|
|
|
|
5) Implement port validation.
|
|
|
|
Changes in 4.0.0 Beta 5
|
|
|
|
1) Fix undefined function call when both an input interface and an
|
|
output interface are present.
|
|
|
|
2) Externalize compiler and Compile.pm.
|
|
|
|
Changes in 4.0.0 Beta 4
|
|
|
|
1) Fix the 'Modules' output of 'dump'
|
|
|
|
2) Fix FW=xxx with IPSECFILE=ipsec.
|
|
|
|
3) Fix wildcard-rule/NONE-policy interaction.
|
|
|
|
4) Clean up generation of user-exit jacket functions.
|
|
|
|
5) Add new bridge code.
|
|
|
|
6) Fix bad bug in exclusion.
|
|
|
|
Changes in 4.0.0 Beta 2
|
|
|
|
1) Fix screwup in get_routed_networks().
|
|
|
|
2) Some minor tweaks.
|
|
|
|
3) Fix synflood chain jumps.
|
|
|
|
4) Simplify synflood handling and improve error diagnostics.
|
|
|
|
Changes in 4.0.0 Beta 1
|
|
|
|
1) Fix add/delete <interface>.
|
|
|
|
2) Fix do_proto() and 'use IPConfig' in Providers.pm.
|
|
|
|
3) Implement dynamic host group detection.
|
|
|
|
Changes in 3.9.7
|
|
|
|
1) Clean up release notes.
|
|
|
|
2) Fix several bugs having to do with exclusion in the hosts file.
|
|
|
|
3) Use '-m addrtype' in detectnet interface output rules.
|
|
|
|
4) Fix find_hosts_by_option().
|
|
|
|
5) Fix more hosts file bugs.
|
|
|
|
6) Fix 'detect' in GATEWAY column of providers file.
|
|
|
|
8) Other bug fixes (see release notes).
|
|
|
|
7) Fix action in 'logreject'.
|
|
|
|
8) Allow macros to invoke macros outside of action bodies.
|
|
|
|
|
|
Changes in 3.9.6
|
|
|
|
1) Fix parsing problems in protocol handling.
|
|
|
|
2) Fix bugs in handling of the MARK column.
|
|
|
|
3) Fix bug in routing table copying
|
|
|
|
4) Fix bug in ipset handling.
|
|
|
|
5) Fix bug in handling of CONTINUE in the tcrules file.
|
|
|
|
6) Add RCP_COMMAND and RSH_COMMAND options in shorewall.conf
|
|
|
|
7) Apply Luigi's MARK patch.
|
|
|
|
Changes in 3.9.5
|
|
|
|
1) Fix dynamic zone problem.
|
|
|
|
2) Fix LOGALLNEW.
|
|
|
|
3) Implement log level, protocol and port validation.
|
|
|
|
4) Fix MACLIST log rule generation problem.
|
|
|
|
Changes in 3.9.4
|
|
|
|
1) Fix port 0 problem (again!).
|
|
|
|
2) Fix log_martians.
|
|
|
|
3) Make LOG_MARTIANS and ROUTE_FILTER tri-valued.
|
|
|
|
4) Fix arp_ignore.
|
|
|
|
5) Re-work ROUTE_FILTER and LOG_MARTIANS.
|
|
|
|
6) Fix handling of interface options.
|
|
|
|
7) Fix handling of zone ipsec options.
|
|
|
|
8) Fix 'routeback' on multi-zone interface.
|
|
|
|
9) Fix 'check -d'.
|
|
|
|
10) Fix intra-zone policies.
|
|
|
|
11) Fix typo in maclist validation.
|
|
|
|
12) Allow 'optional' to work with 'maclist'.
|
|
|
|
Changes in 3.9.3
|
|
|
|
1) Apply Steven Springl's patch for port checking.
|
|
|
|
2) Implement 'optional' interface option.
|
|
|
|
3) Fix a couple of bugs in 'owner' handling.
|
|
|
|
4) Fix several bugs in address/network detection.
|
|
|
|
5) Make a number of interface options binary.
|
|
|
|
6) Add wildcard edits in interface processing.
|
|
|
|
7) Fix dropInvalid.
|
|
|
|
8) Fix 'none'.
|
|
|
|
9) Fix SAME with SOURCE $FW
|
|
|
|
10) Fix tcp:syn.
|
|
|
|
11) Fix all->z rules with 'NONE' policy.
|
|
|
|
12) Check for reserved zone names.
|
|
|
|
13) Add check for firewall zone existance.
|
|
|
|
14) Add checks for zone existance in 'all' processing.
|
|
|
|
Changes in 3.9.2
|
|
|
|
1) Implement '-C {shell|perl}'.
|
|
|
|
2) Implement LOCKFILE
|
|
|
|
3) Fix typo in prog.footer.
|
|
|
|
4) Fix Shorewall-perl hosts and tcclasses errors.
|
|
|
|
5) Add IPPserver macro.
|
|
|
|
6) Fix problem with 'stop' and 'clear' when shorewall-shell not
|
|
installed.
|
|
|
|
7) Moved lib.dynamiczones to Shorewall.
|
|
|
|
8) Fix silly bug in lib.base.
|
|
|
|
9) Apply Steven Springl's patch for ICMP.
|
|
|