2004-07-01 16:12:29 +02:00
|
|
|
Changes since 2.0.3
|
2004-01-31 17:11:22 +01:00
|
|
|
|
2004-07-01 16:12:29 +02:00
|
|
|
1) Fix security vulnerability involving temporary files/directories.
|
2004-04-10 04:47:04 +02:00
|
|
|
|
2004-07-01 16:12:29 +02:00
|
|
|
2) Hack security fix so that it works under Slackware.
|
2004-05-18 15:56:35 +02:00
|
|
|
|
2004-07-01 16:12:29 +02:00
|
|
|
3) Correct mktempfile() for case where mktemp isn't installed.
|
2004-05-19 19:16:06 +02:00
|
|
|
|
2004-07-01 16:12:29 +02:00
|
|
|
4) Implement 'dropInvalid' builtin action.
|
2004-07-06 22:41:53 +02:00
|
|
|
|
|
|
|
5) Fix logging nat rules.
|
2004-07-10 19:03:31 +02:00
|
|
|
|
2004-07-12 15:01:55 +02:00
|
|
|
6) Fix COMMAND typos.
|
|
|
|
|
|
|
|
7) Add PKTTYPE option.
|
|
|
|
|
2004-07-13 02:33:30 +02:00
|
|
|
8) Enhancements to /etc/shorewall/masq
|
|
|
|
|
2004-07-15 22:29:06 +02:00
|
|
|
8) Allow overriding ADD_IP_ALIASES=Yes
|
|
|
|
|
2004-07-19 15:50:14 +02:00
|
|
|
9) Fix syntax error in setup_nat()
|
|
|
|
|
2004-07-21 20:57:45 +02:00
|
|
|
10) Port "shorewall status" changes from 2.0.7.
|
2004-07-25 00:14:58 +02:00
|
|
|
|
2004-07-26 01:26:52 +02:00
|
|
|
11) All config files are now empty.
|
|
|
|
|
2004-07-26 22:57:02 +02:00
|
|
|
12) Port blacklisting fix from 2.0.7
|
|
|
|
|
|
|
|
13) Pass rule chain and display chain separately to log_rule_limit.
|
|
|
|
Prep work for action logging.
|
2004-08-02 23:48:40 +02:00
|
|
|
|
|
|
|
14) Show the iptables/ip/tc command that failed when failure is fatal.
|
|
|
|
|
|
|
|
15) Implement STARTUP_ENABLED.
|
2004-08-10 22:18:15 +02:00
|
|
|
|
|
|
|
16) Added DNAT ONLY column to /etc/shorewall/nat.
|
2004-08-11 02:17:54 +02:00
|
|
|
|
|
|
|
17) Removed SNAT from ORIGINAL DESTINATION column.
|
2004-08-14 20:39:09 +02:00
|
|
|
|
|
|
|
18) Removed DNAT ONLY column.
|
|
|
|
|
|
|
|
19) Added IPSEC column to /etc/shorewall/masq.
|
2004-08-14 21:03:10 +02:00
|
|
|
|
|
|
|
20) No longer enforce source port 500 for ISAKMP.
|
2004-08-16 18:28:44 +02:00
|
|
|
|
|
|
|
21) Apply policy to interface/host options.
|
2004-08-16 20:00:53 +02:00
|
|
|
|
|
|
|
22) Fix policy and maclist.
|
2004-08-19 00:29:09 +02:00
|
|
|
|
|
|
|
23) Implement additional IPSEC options for zones and masq entries.
|
2004-08-20 00:22:49 +02:00
|
|
|
|
|
|
|
24) Deprecate the -c option in /sbin/shorewall.
|
2004-08-20 17:37:56 +02:00
|
|
|
|
|
|
|
25) Allow distinct input and output IPSEC parameters.
|
2004-08-26 22:59:39 +02:00
|
|
|
|
|
|
|
26) Allow source port remapping in /etc/shorewall/masq.
|
2004-08-27 03:36:07 +02:00
|
|
|
|
|
|
|
27) Include params file on 'restore'
|
2004-08-29 19:21:16 +02:00
|
|
|
|
|
|
|
28) Apply Richard Musil's patch.
|
2004-09-02 19:12:39 +02:00
|
|
|
|
|
|
|
29) Correct parsing of PROTO column in setup_tc1().
|
2004-09-06 01:43:08 +02:00
|
|
|
|
|
|
|
30) Verify Physdev match if BRIDGING=Yes
|
2004-09-06 21:58:10 +02:00
|
|
|
|
|
|
|
31) Don't NAT tunnel traffic.
|
2004-09-07 01:46:26 +02:00
|
|
|
|
|
|
|
32) Fix shorewall.spec to run chkconfig/insserv after initial install.
|
|
|
|
|
2004-09-08 22:40:30 +02:00
|
|
|
33) Add iprange support.
|
|
|
|
|
|
|
|
34) Add CLASSIFY support.
|
|
|
|
|
2004-09-09 22:42:50 +02:00
|
|
|
35) Fix iprange support so that ranges in both source and destination
|
|
|
|
work.
|
|
|
|
|
|
|
|
36) Remove logunclean and dropunclean
|
2004-09-09 22:18:49 +02:00
|
|
|
|
2004-09-10 23:41:10 +02:00
|
|
|
37) Fixed proxy arp flag setting for complex configurations.
|
|
|
|
|
2004-09-11 18:16:34 +02:00
|
|
|
38) Added RETAIN_ALIASES option.
|
2004-09-14 00:16:15 +02:00
|
|
|
|
|
|
|
39) Relax OpenVPN source port restrictions.
|
2004-09-15 22:04:36 +02:00
|
|
|
|
|
|
|
40) Implement DELAYBLACKLISTLOAD.
|
2004-09-16 21:30:54 +02:00
|
|
|
|
|
|
|
41) Avoid double-setting proxy arp flags.
|
2004-09-23 16:30:54 +02:00
|
|
|
|
|
|
|
42) Fix DELAYBLACKLISTLOAD=No.
|
2004-09-24 00:11:10 +02:00
|
|
|
|
|
|
|
43) Merge 'brctl show' change from 2.0.9.
|
2004-09-25 19:18:25 +02:00
|
|
|
|
|
|
|
44) Implememt LOGTAGONLY.
|
2004-09-30 17:30:16 +02:00
|
|
|
|
2004-10-08 00:56:35 +02:00
|
|
|
45) Merge 'tcrules' clarification from 2.0.10.
|
2004-10-03 02:44:12 +02:00
|
|
|
|
|
|
|
46) Implement 'sourceroute' interface option.
|
2004-10-08 00:56:35 +02:00
|
|
|
|
2004-10-08 02:17:55 +02:00
|
|
|
47) Add 'AllowICMPs' action.
|
2004-10-09 02:06:45 +02:00
|
|
|
|
|
|
|
48) Changed 'activate_rules' such that traffic from IPSEC hosts gets
|
|
|
|
handled before traffic from non-IPSEC zones.
|
2004-10-11 23:16:48 +02:00
|
|
|
|
|
|
|
49) Correct logmartians handling.
|
2004-10-12 16:56:15 +02:00
|
|
|
|
|
|
|
50) Add a clarification and fix a typo in the blacklist file.
|
2004-10-13 02:42:26 +02:00
|
|
|
|
|
|
|
51) Allow setting a specify MSS value.
|
2004-10-15 00:31:52 +02:00
|
|
|
|
|
|
|
52) Detect duplicate zone names.
|
2004-10-15 20:46:27 +02:00
|
|
|
|
|
|
|
53) Add MSS column to the ipsec file.
|