diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 21d0ab8d3..3434ad13f 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -282,6 +282,23 @@ None. See http://www.shorewall.net/simple_traffic_shaping.html for details. +8) Previously, when TC_EXPERT=No, packets arriving through 'tracked' + provider interfaces were unconditionally passed to the PREROUTING + tcrules. This was done so that tcrules could reset the packet mark + to zero so that the packet would be routed using the 'main' routing + table. Using the main table allowed dynamic routes (such as those + added for VPNs) to be effective. + + The route_rules file was created to provide a better alternative + to clearing the packet mark. As a consequence, passing these + packets to PREROUTING complicates things without providing any real + benefit. + + Beginning with this release, when TRACK_PROVIDERS=Yes and TC_EXPORT=No, + packets arriving through 'tracked' interfaces will not be passed to + the PREROUTING rules. Since TRACK_PROVIDERS was just introduced in + 4.4.3, this change should be transparent to most, if not all, users. + ---------------------------------------------------------------------------- N E W F E A T U R E S I N 4 . 4 . 0 ----------------------------------------------------------------------------