diff --git a/Shorewall-docs2/FAQ.xml b/Shorewall-docs2/FAQ.xml
index 424a60aae..3245d84c0 100644
--- a/Shorewall-docs2/FAQ.xml
+++ b/Shorewall-docs2/FAQ.xml
@@ -17,7 +17,7 @@
- 2004-11-24
+ 2004-12-04
2001-2004
@@ -907,6 +907,21 @@ LOGBURST=""
+
+ @<source>2<dest>
+
+
+ You have a policy for traffic from <source> to <dest> that specifies TCP connection rate
+ limiting (value in the LIMIT:BURST column). The logged packet
+ exceeds that limit and was dropped. Note that these log messages
+ themselves are severely rate-limited so that a syn-flood won't
+ generate a secondary DOS because of excessive log message. These
+ log messages were added in Shorewall 2.2.0 Beta 7.
+
+
+
<interface>_mac
diff --git a/Shorewall-docs2/errata.xml b/Shorewall-docs2/errata.xml
index e024b397d..ce8668e50 100644
--- a/Shorewall-docs2/errata.xml
+++ b/Shorewall-docs2/errata.xml
@@ -13,7 +13,7 @@
- 2004-11-12
+ 2004-12-02
2001-2004
@@ -90,6 +90,28 @@
Problems in Version 2.0
+
+ Shorewall 2.0.12
+
+
+
+ The "shorewall add" command produces the error message:
+
+ /usr/share/shorewall/firewall: line 1: match_destination_hosts: command not found
+
+ You can correct the problem yourself by editing
+ /usr/share/shorewall/firewall and on line 5805, replace match_destination_hosts with match_dest_hosts.
+
+
+
+ Corrected in this
+ firewall script which may be installed in
+ /usr/share/shorewall/firewall as described above.
+
+