holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Fix QUEUE in the ESTABLISHED section

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3399 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-01-29 18:02:42 +00:00
parent a69641d15f
commit 315d8a92b4
3 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Shorewall/changelog.txt
View File

@ -33,3 +33,7 @@ Changes in 3.1.x.
16) Apply Tuomo's patches for IPSEC and Noecho.
17) Fix bridging
18) Fix QUEUE when used in the ESTABLISHED section.

4
Shorewall/compiler
View File

@ -5149,13 +5149,13 @@ process_rule() # $1 = target
case $proto in
tcp|TCP|6)
do_ports
[ "$target" = QUEUE ] && proto="$proto --syn"
[ "$target" = QUEUE -a $SECTION != ESTABLISHED ] && proto="$proto --syn"
;;
udp|UDP|17)
do_ports
;;
icmp|ICMP|1)
[ -n "$port" ] && dports="--icmp-type $port"
[ -n "$port" ] && dports="--icmp-type $port"
;;
all|ALL)
[ -n "$port" ] && \

9
Shorewall/releasenotes.txt
View File

@ -29,9 +29,16 @@ Note to users upgrading from Shorewall 2.x or 3.0
Problems Corrected in 3.1.4
1) "shorewall check" generates an error if there are entries in
1) "shorewall check" generated an error if there were entries in
/etc/shorewall/massq.
2) Bridging now works.
3) The handling of the QUEUE target in the ESTABLISHED section has been
corrected. Previously, the "--syn" option was being added unconditionally
to rules with the QUEUE target with the result that no TCP packets in the
ESTABLISHED state would be sent to QUEUE.
New Features added in 3.1.4
1) The /etc/shorewall/maclist file has a new column layout. The first column