diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 74ddd897d..eca7ebf4f 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -2,6 +2,8 @@ Changes in Shorewall 4.4.7.6 1) Fix Debian init script exit status +2) Fix NFQUEUE(queue-num) in policy + Changes in Shorewall 4.4.7.5 1) Don't create a logging chain for rules with '-j RETURN'. diff --git a/Shorewall/known_problems.txt b/Shorewall/known_problems.txt index 99e0a3af3..7d647d60c 100644 --- a/Shorewall/known_problems.txt +++ b/Shorewall/known_problems.txt @@ -64,3 +64,9 @@ are 1/2 of the values given in the rule. Corrected in 4.4.7.5. + +9) If a queue-number is specified in an NFQUEUE policy (e.g., + NFQUEUE(0)), invalid iptables-restore input is generated. + +10) The Debian init scripts return exit status 0, even when the command + fails. diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index a198099ce..2be8fc48f 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -191,6 +191,10 @@ Shorewall 4.4.7 Patch Release 6. init script would still return a success (zero) exit status. It now returns a failure status (1) when the command fails. +2) Previously, if a queue number was specified in an NFQUEUE policy + (e.g., NFQUEUE(0)), invalid iptables-restore input would be + generated. + ---------------------------------------------------------------------------- P R O B L E M S C O R R E C T E D I N 4 . 4 . 7 . 5 ----------------------------------------------------------------------------