forked from extern/shorewall_code
Update release documents
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
c2b7b37304
commit
325c9b63ac
@ -1,3 +1,9 @@
|
||||
Changes in Shorewall 4.4.12.2
|
||||
|
||||
1) Add tweak to 4.4.12.1 optimization fix.
|
||||
|
||||
2) Fix exclusion in the blacklist file.
|
||||
|
||||
Changes in Shorewall 4.4.12.1
|
||||
|
||||
1) Fix optimization bugs.
|
||||
|
@ -5,9 +5,28 @@
|
||||
to rules, OPTIMIZE 8 through 15 can result in invalid
|
||||
iptables-restore (ip6tables-restore) input.
|
||||
|
||||
Workaround: Don't use optimizaiton levels greater than 7.
|
||||
Corrected in Shorewall 4.4.12.1.
|
||||
|
||||
3) Under rare circumstances unvolving exclusion, OPTIMIZE 8 through 15
|
||||
canresult in invalid iptables-restore (ip6tables-restore) input.
|
||||
|
||||
Workaround: Don't use optimizaiton levels greater than 7.
|
||||
Corrected in Shorewall 4.4.12.1.
|
||||
|
||||
4) The change in 4.4.12 to detect and use the new ipset match syntax
|
||||
broke the ability to detect the old ipset match capability.
|
||||
|
||||
Corrected in Shorewall 4.4.12.1.
|
||||
|
||||
5) If REQUIRE_INTERFACE=Yes then start/restart will fail
|
||||
if the last optional interface tested is not available.
|
||||
|
||||
Corrected in Shorewall 4.4.12.1.
|
||||
|
||||
6) The fix for COMMENT and optimization in 4.4.12.1 is incomplete.
|
||||
|
||||
Workaround: Don't use OPTIMIZE 8-15.
|
||||
|
||||
7) Exclusion in the blacklist file is correctly validated but is then
|
||||
ignored when generating iptables (ip6tables) rules.
|
||||
|
||||
Workaround: Don't use exclusion in the blacklist file.
|
||||
|
@ -1,5 +1,5 @@
|
||||
----------------------------------------------------------------------------
|
||||
S H O R E W A L L 4 . 4 . 1 2 . 1
|
||||
S H O R E W A L L 4 . 4 . 1 2 . 2
|
||||
----------------------------------------------------------------------------
|
||||
|
||||
I. RELEASE 4.4 HIGHLIGHTS
|
||||
@ -224,6 +224,14 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
|
||||
I I I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
|
||||
----------------------------------------------------------------------------
|
||||
|
||||
4.4.12.2
|
||||
|
||||
1) The fix for COMMENT and OPTIMIZE 8-15 in 4.4.12.1 missed one case
|
||||
which has mpe been corrected.
|
||||
|
||||
2) Previously, exclusion in the blacklist file was correctly validated
|
||||
but was then ignored when generating iptables (ip6tables) rules.
|
||||
|
||||
4.4.12.1
|
||||
|
||||
1) Under rare circumstances where COMMENT is used to attach comments
|
||||
|
Loading…
Reference in New Issue
Block a user