holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Use '-m addrtype' in 'detectnets' output rules

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6256 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-05-06 16:10:00 +00:00
parent ef44b4741a
commit 59ca220c0b
3 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Shorewall-common/changelog.txt
View File

@ -2,6 +2,10 @@ Changes in 3.9.7
1) Clean up release notes.
2) Fix several bugs having to do with exclusion in the hosts file.
3) Use '-m addrtype' in detectnet interface output rules.
Changes in 3.9.6
1) Fix parsing problems in protocol handling.

8
Shorewall-common/releasenotes.txt
View File

@ -17,7 +17,13 @@ You must install Shorewall and at least one of the compiler packages
Problems corrected in 3.9.7.
None.
1) Several problems relating to exclusion in the hosts file have been
corrected.
Symptoms included:
Access to an undefined value at Rules.pm line 1656.
Incorrect rule generation.
Other changes in Shorewall 3.9.6.

4
Shorewall-perl/Shorewall/Rules.pm
View File

@ -1507,8 +1507,8 @@ sub generate_matrix() {
if ( $chain1 ) {
for my $interface ( keys %needbroadcast ) {
add_rule $filter_table->{output_chain $interface} , "-d 255.255.255.255 -j $chain1";
add_rule $filter_table->{output_chain $interface} , "-d 224.0.0.0/4 -j $chain1";
add_rule $filter_table->{output_chain $interface} , "-m addrtype --dst-type BROADCAST -j $chain1";
add_rule $filter_table->{output_chain $interface} , "-m addrtype --dst-type MULTICAST -j $chain1";
}
}