holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Document fix for IPSETs and ORIGINAL DEST

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-04-29 07:25:42 -07:00
parent 27f1c494a0
commit 4a4d74b52b
2 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall/changelog.txt
View File

@ -2,6 +2,8 @@ Changes in Shorewall 4.4.20 Beta 1
1) Apply Togan's patch for installation flexibility.
2) Restore use of IPSETS in the ORIGINAL DEST column.
Changes in Shorewall 4.4.19.1
1) Eliminate silly duplicate rule when stopped.

13
Shorewall/releasenotes.txt
View File

@ -39,6 +39,19 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
DNAT and REDIRECT rules. That capability, inadvertently dropped in
Shorewall-perl, has now been restored.
Please note, however, that using an IPSET in this way will open the
server port from the SOURCE zone.
Example:
This rule:
DNAT net dmz:10.1.10.2 tcp 80 - +foo
will implicitly add this rule:
ACCEPT net dmz:10.1.10.2 tcp 80
----------------------------------------------------------------------------
I I. K N O W N P R O B L E M S R E M A I N I N G
----------------------------------------------------------------------------