diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 762f0a2e7..4c99f6dbd 100755 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -51,12 +51,12 @@ New Features: space. This is for compatibility with p2pwall. 2. A BLACKLISTNEWNONLY option has been added to shorewall.conf. When - this variable is set to "Yes", the blacklists (dynamic and static) + this option is set to "Yes", the blacklists (dynamic and static) are only consulted for new connection requests. When set to "No" (the default if the variable is not set), the blacklists are consulted on every packet. - Setting this variable to "No" allows blacklisting to stop existing + Setting this option to "No" allows blacklisting to stop existing connections from a newly blacklisted host but is more expensive in terms of packet processing time. This is especially true if the blacklists contain a large number of entries.