holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Document Fix for SAVE_IPSETS

Browse Source
This commit is contained in:
Tom Eastep 2011-04-03 08:59:42 -07:00
parent bc2de57291
commit 72aa24062c
2 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall/changelog.txt
View File

@ -1,6 +1,6 @@
Changes in Shorewall 4.4.18.2
1) Handle mis-configured ipsec host group on a bridge.
1) Fix SAVE_IPSETS=Yes without dynamic zones.
Changes in Shorewall 4.4.18.1

14
Shorewall/releasenotes.txt
View File

@ -15,11 +15,7 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
4.4.18.2
1) If a bridge interface had subordinate ports defined in
/etc/shorewall/interface, then an ipsec entry (either ipsec zone or
the 'ipsec' option specified) in /etc/shorewall/hosts resulted in
the compiler generating an incorrect Netfilter configuration.
1)
4.4.18.1
1) An issue with params processing on RHEL6 has been corrected. The
@ -100,6 +96,14 @@ None.
1) On systems running Upstart, shorewall-init cannot reliably secure
the firewall before interfaces are brought up.
2) If a bridge interface has subordinate ports defined in
/etc/shorewall/interface, then an ipsec entry (either ipsec zone or
the 'ipsec' option specified) in /etc/shorewall/hosts results in
an incorrect Netfilter configuration.
Workaround: Assign the ipsec entry to one or more of the bridge
ports rather than the bridge itself.
----------------------------------------------------------------------------
I I I. N E W F E A T U R E S I N T H I S R E L E A S E
----------------------------------------------------------------------------