shorewall_code/Shorewall/releasenotes.txt

This is a minor release of Shorewall.

In this release:

1. A new "logwatch" command has been added to the /sbin/shorewall program.

2. Shorewall can now take advantage of the Netfilter 'multiport' match
   function (kernel configuration option CONFIG_IP_NF_MATCH_MULTIPORT).  
   
3. Dynamic blacklisting is now supported through the use of three new 
   commands in /sbin/shorewall:

   deny - drop packets from one or more hosts.
   reject - reject packets from one or more hosts.
   allow - reverse the effect of a prior 'deny' or 'reject' command.
   save - save the current dynamic blacklisting settings so that they 
          will be applied the next time that Shorewall is started.

4. The 'firewall', 'version' and 'functions' files have been moved from
   /etc/shorewall to /var/lib/shorewall.