holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Fix rule generated by MULTICAST=Yes

Browse Source
This commit is contained in:
Tom Eastep 2009-08-29 09:32:38 -07:00
parent 00a20d5e1d
commit 210ca5faee
20 changed files with 40 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall-lite/fallback.sh
View File

@ -28,7 +28,7 @@
# shown below. Simply run this script to revert to your prior version of # shown below. Simply run this script to revert to your prior version of
# Shoreline Firewall. # Shoreline Firewall.
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall-lite/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall-lite/shorewall-lite.spec
View File

@ -1,6 +1,6 @@
%define name shorewall-lite %define name shorewall-lite
%define version 4.4.0 %define version 4.4.0
%define release 2 %define release 3
Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems. Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -98,6 +98,8 @@ fi
%doc COPYING changelog.txt releasenotes.txt %doc COPYING changelog.txt releasenotes.txt
%changelog %changelog
* Sat Aug 29 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.0-3
* Fri Aug 28 2009 Tom Eastep tom@shorewall.net * Fri Aug 28 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.0-2 - Updated to 4.4.0-2
* Thu Aug 13 2009 Tom Eastep tom@shorewall.net * Thu Aug 13 2009 Tom Eastep tom@shorewall.net

2
Shorewall-lite/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall/Perl/Shorewall/Config.pm
View File

@ -327,7 +327,7 @@ sub initialize( $ ) {
TC_SCRIPT => '', TC_SCRIPT => '',
EXPORT => 0, EXPORT => 0,
UNTRACKED => 0, UNTRACKED => 0,
VERSION => "4.4.0.2", VERSION => "4.4.0.3",
CAPVERSION => 40310 , CAPVERSION => 40310 ,
); );

2
Shorewall/Perl/Shorewall/Policy.pm
View File

@ -356,7 +356,7 @@ sub policy_rules( $$$$$ ) {
my ( $chainref , $target, $loglevel, $default, $dropmulticast ) = @_; my ( $chainref , $target, $loglevel, $default, $dropmulticast ) = @_;
unless ( $target eq 'NONE' ) { unless ( $target eq 'NONE' ) {
add_rule $chainref, "-d 224.0.0.0/24 -j RETURN" if $dropmulticast && $target ne 'CONTINUE' && $target ne 'ACCEPT'; add_rule $chainref, "-d 224.0.0.0/4 -j RETURN" if $dropmulticast && $target ne 'CONTINUE' && $target ne 'ACCEPT';
add_rule $chainref, "-j $default" if $default && $default ne 'none'; add_rule $chainref, "-j $default" if $default && $default ne 'none';
log_rule $loglevel , $chainref , $target , '' if $loglevel ne ''; log_rule $loglevel , $chainref , $target , '' if $loglevel ne '';
fatal_error "Null target in policy_rules()" unless $target; fatal_error "Null target in policy_rules()" unless $target;

3
Shorewall/changelog.txt
View File

@ -1,3 +1,6 @@
Changes in Shorewall 4.4.0.3
1) Fix rule generated by MULTICAST=Yes
Changes in Shorewall 4.4.0.2 Changes in Shorewall 4.4.0.2

2
Shorewall/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

5
Shorewall/known_problems.txt
View File

@ -29,3 +29,8 @@
"-" in the ZONES column) in /etc/shorewall/interfaces. "-" in the ZONES column) in /etc/shorewall/interfaces.
This problem was corrected in Shorewall 4.4.0.2. This problem was corrected in Shorewall 4.4.0.2.
6) MULTICAST=Yes generates an incorrect rule that limits its
effectiveness to a small part of the multicast address space.

7
Shorewall/releasenotes.txt
View File

@ -153,6 +153,13 @@ Shorewall 4.4.0 patch release 1.
10) The name 'any' is now reserved and may not be used as a zone name. 10) The name 'any' is now reserved and may not be used as a zone name.
----------------------------------------------------------------------------
P R O B L E M S C O R R E C T E D I N 4 . 4 . 0 . 3
----------------------------------------------------------------------------
1) MULTICAST=Yes generates an incorrect rule that limits its
effectiveness to a small part of the multicast address space.
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
P R O B L E M S C O R R E C T E D I N 4 . 4 . 0 . 2 P R O B L E M S C O R R E C T E D I N 4 . 4 . 0 . 2
---------------------------------------------------------------------------- ----------------------------------------------------------------------------

4
Shorewall/shorewall.spec
View File

@ -1,6 +1,6 @@
%define name shorewall %define name shorewall
%define version 4.4.0 %define version 4.4.0
%define release 2 %define release 3
Summary: Shoreline Firewall is an iptables-based firewall for Linux systems. Summary: Shoreline Firewall is an iptables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -104,6 +104,8 @@ fi
%doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples %doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples
%changelog %changelog
* Sat Aug 29 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.0-3
* Fri Aug 28 2009 Tom Eastep tom@shorewall.net * Fri Aug 28 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.0-2 - Updated to 4.4.0-2
* Thu Aug 13 2009 Tom Eastep tom@shorewall.net * Thu Aug 13 2009 Tom Eastep tom@shorewall.net

2
Shorewall/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6-lite/fallback.sh
View File

@ -28,7 +28,7 @@
# shown below. Simply run this script to revert to your prior version of # shown below. Simply run this script to revert to your prior version of
# Shoreline Firewall. # Shoreline Firewall.
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6-lite/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall6-lite/shorewall6-lite.spec
View File

@ -1,6 +1,6 @@
%define name shorewall6-lite %define name shorewall6-lite
%define version 4.4.0 %define version 4.4.0
%define release 2 %define release 3
Summary: Shoreline Firewall 6 Lite is an ip6tables-based firewall for Linux systems. Summary: Shoreline Firewall 6 Lite is an ip6tables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -89,6 +89,8 @@ fi
%doc COPYING changelog.txt releasenotes.txt %doc COPYING changelog.txt releasenotes.txt
%changelog %changelog
* Sat Aug 29 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.0-3
* Fri Aug 28 2009 Tom Eastep tom@shorewall.net * Fri Aug 28 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.0-2 - Updated to 4.4.0-2
* Thu Aug 13 2009 Tom Eastep tom@shorewall.net * Thu Aug 13 2009 Tom Eastep tom@shorewall.net

2
Shorewall6-lite/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6/fallback.sh
View File

@ -28,7 +28,7 @@
# shown below. Simply run this script to revert to your prior version of # shown below. Simply run this script to revert to your prior version of
# Shoreline Firewall. # Shoreline Firewall.
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

2
Shorewall6/install.sh
View File

@ -22,7 +22,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
# #
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {

4
Shorewall6/shorewall6.spec
View File

@ -1,6 +1,6 @@
%define name shorewall6 %define name shorewall6
%define version 4.4.0 %define version 4.4.0
%define release 2 %define release 3
Summary: Shoreline Firewall 6 is an ip6tables-based firewall for Linux systems. Summary: Shoreline Firewall 6 is an ip6tables-based firewall for Linux systems.
Name: %{name} Name: %{name}
@ -93,6 +93,8 @@ fi
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn ipv6 Samples6 %doc COPYING INSTALL changelog.txt releasenotes.txt tunnel ipsecvpn ipv6 Samples6
%changelog %changelog
* Sat Aug 29 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.0-3
* Fri Aug 28 2009 Tom Eastep tom@shorewall.net * Fri Aug 28 2009 Tom Eastep tom@shorewall.net
- Updated to 4.4.0-2 - Updated to 4.4.0-2
* Thu Aug 13 2009 Tom Eastep tom@shorewall.net * Thu Aug 13 2009 Tom Eastep tom@shorewall.net

2
Shorewall6/uninstall.sh
View File

@ -26,7 +26,7 @@
# You may only use this script to uninstall the version # You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall # shown below. Simply run this script to remove Shorewall Firewall
VERSION=4.4.0.2 VERSION=4.4.0.3
usage() # $1 = exit status usage() # $1 = exit status
{ {