holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Disallow 'nets=' in a multi-zone interface definition

Browse Source
This commit is contained in:
Tom Eastep 2009-08-29 07:41:27 -07:00
parent f2c3d9cd79
commit 1ef00c547b
3 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Shorewall/Perl/Shorewall/Zones.pm
View File

@ -834,6 +834,7 @@ sub process_interface( $ ) {
$hostoptions{$option} = $numval if $hostopt; $hostoptions{$option} = $numval if $hostopt;
} elsif ( $type == IPLIST_IF_OPTION ) { } elsif ( $type == IPLIST_IF_OPTION ) {
fatal_error "The $option option requires a value" unless defined $value; fatal_error "The $option option requires a value" unless defined $value;
fatal_error q("nets=" may not be specified for a multi-zone interface) unless $zone;
fatal_error "Duplicate $option option" if $nets; fatal_error "Duplicate $option option" if $nets;
# #
# Remove parentheses from address list if present # Remove parentheses from address list if present

5
Shorewall/changelog.txt
View File

@ -22,7 +22,10 @@ Changes in Shorewall 4.4.1
11) Allow multicast to non-dynamic zones with nets=. 11) Allow multicast to non-dynamic zones with nets=.
12) Allow zones with nets= to be extended by /etc/shorewall/hosts entries. 12) Allow zones with nets= to be extended by /etc/shorewall/hosts
entries.
13) Don't allow nets= in a multi-zone interface definition.
Changes in Shorewall 4.4.0 Changes in Shorewall 4.4.0

6
Shorewall/releasenotes.txt
View File

@ -180,10 +180,14 @@ Shorewall 4.4.1
one-interface sample configuration since forwarding is typically one-interface sample configuration since forwarding is typically
not required with only a single interface. not required with only a single interface.
4) Previously, the definition of a zone that specified nets= in 4) Previously, the definition of a zone that specified "nets=" in
/etc/shorewall/interfaces could not be extended by entries in /etc/shorewall/interfaces could not be extended by entries in
/etc/shorewall/hosts. /etc/shorewall/hosts.
5) Previously, "nets=" could be specified in a multi-zone interface
definition ("-" in the ZONES column) in /etc/shorewall/zones. This
now raises a fatal compilation error.
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
K N O W N P R O B L E M S R E M A I N I N G K N O W N P R O B L E M S R E M A I N I N G
---------------------------------------------------------------------------- ----------------------------------------------------------------------------