diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index b1d2d60c8..292cee6ad 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -4,6 +4,8 @@ Changes in Shorewall 4.4.20 Beta 1 2) Restore use of IPSETS in the ORIGINAL DEST column. +3) Correct several complex TC issues reported by Mr Dash4. + Changes in Shorewall 4.4.19.1 1) Eliminate silly duplicate rule when stopped. diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index e0e4d0b24..496c599e0 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -52,6 +52,24 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES ACCEPT net dmz:10.1.10.2 tcp 80 +5) Two problems with complex TC have been corrected: + + a) The following entry in /etc/shorewall/tcclasses + + A:1 - 10*full/100:50ms 20*full/100 1 tcp-ack + + produced this error: + + ERROR: Unknown INTERFACE (A) : /etc/shorewall/tcclasses + + This has been corrected by requiring that class numbers + containing a-f or A-F must be prefaced by '0x'. + + b) Shorewall reserves class number 1 for the root class of the + queuing discipline. Definining class 1 in + /etc/shorewall/tcclasses was previoulsly escaping detection by + the compiler, resulting in a run-time error. + ---------------------------------------------------------------------------- I I. K N O W N P R O B L E M S R E M A I N I N G ----------------------------------------------------------------------------