diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index f37ed96b0..ed1cc7a78 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -8,6 +8,8 @@ Changes in Shorewall 4.4.20.2 4) Exclude ipsec traffic from sfilter. +5) Fix an interesting defect. + Changes in Shorewall 4.4.20.1 1) Corrected FSF address. diff --git a/Shorewall/known_problems.txt b/Shorewall/known_problems.txt index 301b21c64..f3f19ff40 100644 --- a/Shorewall/known_problems.txt +++ b/Shorewall/known_problems.txt @@ -17,3 +17,23 @@ The error occurs when explicit interface numbers are assigned in /etc/shorewall/tcdevices and the default HTB queuing discipline is used. + +3) The 'sfilter' interface option introduced in 4.4.20 is not applied + to traffic addressed to the firewall itself. + +4) IPSEC traffic is incorrectly included in the rules generated by + sfiltering. + +5) Shorewall 4.4.20 can, under some circumstances, fail during + iptables-restore with a message such as the following: + + iptables-restore v1.4.10: Couldn't load target + `dsl0_fwd':/usr/lib/xtables/libipt_dsl0_fwd.so: cannot open shared object + file: No such file or directory + + Error occurred at line: 113 + Try `iptables-restore -h' or 'iptables-restore --help' for more + information. + + ERROR: iptables-restore Failed. Input is in + /var/lib/shorewall/.iptables-restore-input diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 317b7c1a3..063898ac7 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -30,6 +30,20 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES 4) IPSEC traffic is now (correctly) excluded from sfilter. +5) Shorewall 4.4.20 could, under some circumstances, fail during + iptables-restore with a message such as the following: + + iptables-restore v1.4.10: Couldn't load target + `dsl0_fwd':/usr/lib/xtables/libipt_dsl0_fwd.so: cannot open shared object + file: No such file or directory + + Error occurred at line: 113 + Try `iptables-restore -h' or 'iptables-restore --help' for more + information. + + ERROR: iptables-restore Failed. Input is in + /var/lib/shorewall/.iptables-restore-input + 4.4.20.1 1) The address of the Free Software Foundation has been corrected in