holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Document fix for ORIGINAL DEST

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-04-28 12:21:59 -07:00
parent 1f362b32f2
commit 54f368c413
2 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Shorewall/changelog.txt
View File

@ -1,6 +1,7 @@
Changes in Shorewall 4.4.19.2 Changes in Shorewall 4.4.19.2
None. 1) Restore the ability to have IPSET names in the ORIGINAL DEST column
of a DNAT or REDIRECT rule.
Changes in Shorewall 4.4.19.1 Changes in Shorewall 4.4.19.1

15
Shorewall/releasenotes.txt
View File

@ -15,7 +15,20 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
4.4.19.2 4.4.19.2
None. 1) In Shorewall-shell, there was the ability to specify IPSET names in
the ORIGINAL DEST column of DNAT and REDIRECT rules. That ability,
inadvertently dropped in Shorewall-perl, has been restored.
CAUTION: When an IPSET is used in this way, the server port is
opened from the SOURCE zone.
Example:
DNAT net dmz:10.1.1.2 tcp 80 - +foo
will implicitly add this rule
ACCEPT net dmz:10.1.1.2 tcp 80
4.4.19.1 4.4.19.1