forked from extern/shorewall_code
32 lines
1.1 KiB
Plaintext
32 lines
1.1 KiB
Plaintext
|
This is a major release of Shorewall.
|
||
|
|
|
||
|
|
Problems Corrected since version 1.4.9:
|
||
|
|
|
||
|
|
None.
|
||
|
|
|
||
|
|
Migration Issues/Incompatible Changes in this Release:
|
||
|
|
|
||
|
|
1) The 'dropunclean' and 'logunclean' interface options are no longer
|
||
|
|
supported. If either option is specified in
|
||
|
|
/etc/shorewall/interfaces, an error message will be generated and
|
||
|
|
Shorewall will fail to start.
|
||
|
|
|
||
|
|
2) The NAT_BEFORE_RULES option has been removed from
|
||
|
|
shorewall.conf. The behavior of Shorewall is as if
|
||
|
|
NAT_BEFORE_RULES=No had been specified. In other words, DNAT rules
|
||
|
|
now always take precidence over one-to-one NAT specifications.
|
||
|
|
|
||
|
|
3) The HAVEROUTE column has been removed from
|
||
|
|
/etc/shorewall/proxyarp. Shorewall will no longer automatically add
|
||
|
|
routes for Proxy ARP hosts. Use your distribution's static route
|
||
|
|
capability to add these routes instead.
|
||
|
|
|
||
|
|
4) The default value for the ALL INTERFACES column in
|
||
|
|
/etc/shorewall/nat has changed. In Shorewall 1.*, if the column was
|
||
|
|
left empty, a value of "Yes" was assumed. This has been changed so
|
||
|
|
that a value of "No" is now assumed.
|
||
|
|
|
||
|
|
New Features:
|
||
|
|
|
||
|
|
None.
|