holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Fix 'export' command

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8798 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-10-24 14:54:51 +00:00
parent 9782bef71e
commit 36a24f890c
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Shorewall-common/releasenotes.txt
View File

@ -126,7 +126,7 @@ Other changes in Shorewall 4.2.1
causes connections to match when the number of causes connections to match when the number of
current connections exceeds <limit>. current connections exceeds <limit>.
When specified in the policy file, the limit is envorced on all When specified in the policy file, the limit is enforced on all
connections that are subject to the given policy (just like connections that are subject to the given policy (just like
LIMIT:BURST). The limit is checked on new connections before the LIMIT:BURST). The limit is checked on new connections before the
connection is passed through the rules in the NEW section of the connection is passed through the rules in the NEW section of the
@ -174,10 +174,16 @@ Other changes in Shorewall 4.2.1
Beginning November 1, 2008 at noon LCT. Beginning November 1, 2008 at noon LCT.
Use of this feature requires the time match capability in your
kernel and iptables. If you use a capabilities file when compiling
your Shorewall configuration(s), then you need to regenerate the
file using Shorewall or Shorewall-lite 4.2.1.
3) If your kernel and iptables support "-m conntrack --ctorigdstport" 3) If your kernel and iptables support "-m conntrack --ctorigdstport"
then Shorewall will utilize that capability to ensure that when you then Shorewall will utilize that capability to ensure that when you
do port mapping (change the destination port but not the do port mapping (change the destination port but not the
destination IP address), the final destination port is not open. destination IP address), the final destination port is not opened
as a side effect.
Example: Example: