Update release documents

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-08-26 11:22:39 -07:00
parent c2b7b37304
commit 325c9b63ac
3 changed files with 36 additions and 3 deletions

View File

@ -1,3 +1,9 @@
Changes in Shorewall 4.4.12.2
1) Add tweak to 4.4.12.1 optimization fix.
2) Fix exclusion in the blacklist file.
Changes in Shorewall 4.4.12.1
1) Fix optimization bugs.

View File

@ -5,9 +5,28 @@
to rules, OPTIMIZE 8 through 15 can result in invalid
iptables-restore (ip6tables-restore) input.
Workaround: Don't use optimizaiton levels greater than 7.
Corrected in Shorewall 4.4.12.1.
3) Under rare circumstances unvolving exclusion, OPTIMIZE 8 through 15
canresult in invalid iptables-restore (ip6tables-restore) input.
Workaround: Don't use optimizaiton levels greater than 7.
Corrected in Shorewall 4.4.12.1.
4) The change in 4.4.12 to detect and use the new ipset match syntax
broke the ability to detect the old ipset match capability.
Corrected in Shorewall 4.4.12.1.
5) If REQUIRE_INTERFACE=Yes then start/restart will fail
if the last optional interface tested is not available.
Corrected in Shorewall 4.4.12.1.
6) The fix for COMMENT and optimization in 4.4.12.1 is incomplete.
Workaround: Don't use OPTIMIZE 8-15.
7) Exclusion in the blacklist file is correctly validated but is then
ignored when generating iptables (ip6tables) rules.
Workaround: Don't use exclusion in the blacklist file.

View File

@ -1,5 +1,5 @@
----------------------------------------------------------------------------
S H O R E W A L L 4 . 4 . 1 2 . 1
S H O R E W A L L 4 . 4 . 1 2 . 2
----------------------------------------------------------------------------
I. RELEASE 4.4 HIGHLIGHTS
@ -224,6 +224,14 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
I I I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
----------------------------------------------------------------------------
4.4.12.2
1) The fix for COMMENT and OPTIMIZE 8-15 in 4.4.12.1 missed one case
which has mpe been corrected.
2) Previously, exclusion in the blacklist file was correctly validated
but was then ignored when generating iptables (ip6tables) rules.
4.4.12.1
1) Under rare circumstances where COMMENT is used to attach comments