holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Add COMPLETE to release notes

Browse Source
This commit is contained in:
Tom Eastep 2010-08-06 19:30:33 -07:00
parent 0f02ee2628
commit 59829565f5
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
Shorewall/releasenotes.txt
View File

@ -1,6 +1,6 @@
----------------------------------------------------------------------------
S H O R E W A L L 4 . 4 . 1 2
B E T A 4
R C 1
----------------------------------------------------------------------------
I. RELEASE 4.4 HIGHLIGHTS
@ -306,6 +306,20 @@ None.
you use a capabilities file, be sure to regenerate it with 4.4.12
shorewall-lite or shorewall6-lite.
6) A new COMPLETE option has been added to shorewall.conf and to
shorewall6.conf. When set to Yes, it signifies that the
configuration is complete so that your set of zones encompasses any
hosts that can send or receive traffic to/from/through the
firewall. This causes Shorewall to omit the rules that catch
packets in which the source or destination IP address is outside of
any of your zones. Default is No. It is recommended that this
option only be set to Yes if:
- You have defined an interface whose effective physical setting is
'+'.
- That interface is assigned to a zone.
- You have no CONTINUE policies or rules.
----------------------------------------------------------------------------
V I. P R O B L E M S C O R R E C T E D A N D N E W F E A T U R E S
I N P R I O R R E L E A S E S