forked from extern/shorewall_code
Stop whining about ipt_owner messages under kernel 2.6.14
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2939 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
a91d24d65f
commit
08993cfe08
@ -4,7 +4,9 @@ Changes in 3.0.0 RC 3.
|
||||
|
||||
2) Suppress 'ambiguous redirect' error messages.
|
||||
|
||||
2) Correct stupid typo in release notes ([rej|drop]NewNot vs. [rej|drop]NewNon)
|
||||
3) Correct stupid typo in release notes ([rej|drop]NewNot vs. [rej|drop]NewNon).
|
||||
|
||||
4) Stop whining about ipt_owner messages under kernel 2.6.14.
|
||||
|
||||
Changes in 3.0.0 RC 2.
|
||||
|
||||
|
@ -907,7 +907,7 @@ determine_capabilities() {
|
||||
qt $IPTABLES -A fooX1234 -m physdev --physdev-in eth0 -j ACCEPT && PHYSDEV_MATCH=Yes
|
||||
qt $IPTABLES -A fooX1234 -m iprange --src-range 192.168.1.5-192.168.1.124 -j ACCEPT && IPRANGE_MATCH=Yes
|
||||
qt $IPTABLES -A fooX1234 -m recent --update -j ACCEPT && RECENT_MATCH=Yes
|
||||
qt $IPTABLES -A fooX1234 -m owner --cmd-owner foo -j ACCEPT && OWNER_MATCH=Yes
|
||||
qt $IPTABLES -A fooX1234 -m owner --uid-owner 0 -j ACCEPT && OWNER_MATCH=Yes
|
||||
qt $IPTABLES -A fooX1234 -m connmark --mark 2 -j ACCEPT && CONNMARK_MATCH=Yes
|
||||
qt $IPTABLES -A fooX1234 -p tcp -m ipp2p --ipp2p -j ACCEPT && IPP2P_MATCH=Yes
|
||||
|
||||
|
@ -12,6 +12,10 @@ Problems Corrected in 3.0.0 RC 3:
|
||||
"/usr/share/shorewall/firewall: line 128: $RESTOREBASE: ambiguous
|
||||
redirect"
|
||||
|
||||
3) The test that Shorewall uses to detect the availability of the
|
||||
owner match capability has been changed to avoid the generation
|
||||
of ipt_owner messages under kernel 2.6.14.
|
||||
|
||||
Migration Considerations:
|
||||
|
||||
1) The "monitor" command has been eliminated.
|
||||
|
Loading…
Reference in New Issue
Block a user