holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Document use of state match for NOTRACK

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-09-17 08:21:16 -07:00
parent 882970a598
commit 8e2c8e5a8f
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall/changelog.txt
View File

@ -29,6 +29,8 @@ Changes in Shorewall 4.4.13
13) Implement an alternative blacklisting scheme.
14) Use '-m state' for UNTRACKED.
Changes in Shorewall 4.4.12
1) Fix IPv6 shorecap program.

4
Shorewall/releasenotes.txt
View File

@ -106,6 +106,10 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
10) Ipsets associated with 'dynamic' zones were being created during
'restart' but not during 'start'.
11) To work around an issue in Netfilter/iptables, Shorewall now uses
state match rather than conntrack match for UNTRACKED state
macthing.
----------------------------------------------------------------------------
I I. K N O W N P R O B L E M S R E M A I N I N G
----------------------------------------------------------------------------