diff --git a/Shorewall-common/changelog.txt b/Shorewall-common/changelog.txt index f597848b3..8ee442f0f 100644 --- a/Shorewall-common/changelog.txt +++ b/Shorewall-common/changelog.txt @@ -14,6 +14,12 @@ Changes in 3.9.3 7) Fix dropInvalid. +8) Fix 'none'. + +9) Fix SAME with SOURCE $FW + +10) Fix tcp:syn. + Changes in 3.9.2 1) Implement '-C {shell|perl}'. diff --git a/Shorewall-common/releasenotes.txt b/Shorewall-common/releasenotes.txt index a552f9b36..bb427c7a5 100644 --- a/Shorewall-common/releasenotes.txt +++ b/Shorewall-common/releasenotes.txt @@ -37,8 +37,18 @@ Problems corrected in Shorewall 3.9.3 - All addresses - Routed networks -5) The 'dropInvalid' built-in action now correctly generates a DROP - rule rather than a REJECT rule. +5) The 'dropInvalid' built-in action now correctly generates a DROP + rule rather than a REJECT rule. + +6) The Shorewall-perl compiler was not treating 'none' in the SOURCE + or DEST column of the rules file correctly. + +7) The Shorewall-perl compiler did not accept 'tcp:syn' in the PROTO + column. + +8) The Shorewall-perl compiler generated an invalid rule when + $FW was the SOURCE of a SAME rule (iptables/netfilter do not + support SAME in the OUTPUT chain). Other changes in Shorewall 3.9.3