2008-12-28 18:52:28 +01:00
|
|
|
Changes in Shorewall 4.2.4-RC3
|
|
|
|
|
|
|
|
1) Fix exclusion handling with certain hosts options.
|
|
|
|
|
|
|
|
2) Rework zone exclusion to more accurately model what the user specifies.
|
|
|
|
|
2008-12-21 21:22:27 +01:00
|
|
|
Changes in Shorewall 4.2.4-RC2
|
|
|
|
|
|
|
|
1) Update samples.
|
|
|
|
|
|
|
|
2) Remove special handling of 2000::/3 routes.
|
|
|
|
|
|
|
|
3) Fix handling of multi-zone interfaces.
|
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
Changes in Shorewall 4.2.4-RC1
|
2008-12-16 17:54:06 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
1) Merge changes from 4.3.3 -- IPv6 support.
|
2008-12-16 17:54:06 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
Changes in Shorewall 4.2.3
|
2008-12-16 17:54:06 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
1) Verify User/Group names.
|
2008-12-13 17:38:55 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
2) Don't allow compiled script named 'shorewall'.
|
2008-12-13 18:00:11 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
3) Avoid problems when '$' appears on the first line of
|
|
|
|
/etc/shorewall/compile.
|
2008-12-13 23:17:21 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
4) Add the output of "netstat -tunap" to dump
|
2008-12-14 03:06:59 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
5) Allow '+' as an interface.
|
2008-12-14 03:06:59 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
6) Change ipp2p detection to support latest version.
|
2008-12-14 03:06:59 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
7) Fix NEW_CONNTRACK_MATCH.
|
2008-12-13 23:17:21 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
8) Make use of --goto.
|
2008-12-14 21:03:49 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
9) Allow ressetting individual chains.
|
2008-12-14 21:03:49 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
10) Correct faulty optimization.
|
2008-12-12 17:08:20 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
Changes in Shorewall 4.2.2
|
2008-12-12 17:08:20 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
1) Insure that lines copied from a user file are newline-terminated.
|
2008-12-12 22:31:31 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
2) Added macro.JAP.
|
2008-12-13 00:20:47 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
3) Added macro.DAAP.
|
2008-12-11 20:24:34 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
4) Added macro.DCC.
|
2008-12-11 20:24:34 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
5) Added macro.GNUnet.
|
2008-12-11 20:24:34 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
6) Prevent invalid rules when KLUDGEFREE is not set.
|
2008-12-11 20:24:34 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
7) Separated detection of old conntrack syntax from new conntrack
|
|
|
|
feature detection.
|
2008-12-12 01:59:42 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
8) Fix nonat rules with destination IP address.
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
9) Correct NEW_CONNTRACK_MATCH with server port but no dest port.
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
Changes in Shorewall 4.2.1
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
1) Added CONNBYTES to tcrules manpage. Flesh out description of HELPER.
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
2) Fixed minor CONNBYTES editing issue.
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
3) Add CONNLIMIT to policy and rules.
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
4) Allow use of iptables-1.4.1.
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
5) Add time match support.
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
6) Applied Lennart Sorensen's patch for length match.
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
7) Take advantage of --ctorigdstport
|
2008-12-07 19:17:26 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
8) Fix syntax error in 'export'
|
2008-12-11 00:24:55 +01:00
|
|
|
|
2008-12-17 22:06:30 +01:00
|
|
|
Initial release of Shorewall 4.2.0.
|