diff --git a/Shorewall-docs2/FAQ.xml b/Shorewall-docs2/FAQ.xml index 424a60aae..3245d84c0 100644 --- a/Shorewall-docs2/FAQ.xml +++ b/Shorewall-docs2/FAQ.xml @@ -17,7 +17,7 @@ - 2004-11-24 + 2004-12-04 2001-2004 @@ -907,6 +907,21 @@ LOGBURST="" + + @<source>2<dest> + + + You have a policy for traffic from <source> to <dest> that specifies TCP connection rate + limiting (value in the LIMIT:BURST column). The logged packet + exceeds that limit and was dropped. Note that these log messages + themselves are severely rate-limited so that a syn-flood won't + generate a secondary DOS because of excessive log message. These + log messages were added in Shorewall 2.2.0 Beta 7. + + + <interface>_mac diff --git a/Shorewall-docs2/errata.xml b/Shorewall-docs2/errata.xml index e024b397d..ce8668e50 100644 --- a/Shorewall-docs2/errata.xml +++ b/Shorewall-docs2/errata.xml @@ -13,7 +13,7 @@ - 2004-11-12 + 2004-12-02 2001-2004 @@ -90,6 +90,28 @@
Problems in Version 2.0 +
+ Shorewall 2.0.12 + + + + The "shorewall add" command produces the error message: + + /usr/share/shorewall/firewall: line 1: match_destination_hosts: command not found + + You can correct the problem yourself by editing + /usr/share/shorewall/firewall and on line 5805, replace match_destination_hosts with match_dest_hosts. + + + + Corrected in this + firewall script which may be installed in + /usr/share/shorewall/firewall as described above. +
+
Shorewall 2.0.10