holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Fix 'rejNotSyn'

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1955 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2005-02-11 21:37:06 +00:00
parent 23d5d9de3c
commit 97d46d35de
3 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
STABLE/changelog.txt
View File

@ -119,3 +119,7 @@ Changes in 2.0.15
Changes in 2.0.16 Changes in 2.0.16
1) Backport DROPINVALID from 2.2.0. 1) Backport DROPINVALID from 2.2.0.
Changes in 2.0.17
1) Fix rejNotSyn.

2
STABLE/firewall
View File

@ -2938,7 +2938,7 @@ process_actions2() {
[ "$COMMAND" != check ] && run_iptables -A dropNotSyn -p tcp ! --syn -j DROP [ "$COMMAND" != check ] && run_iptables -A dropNotSyn -p tcp ! --syn -j DROP
;; ;;
rejNotSyn) rejNotSyn)
[ "$COMMAND" != check ] && run_iptables -A rejectNotSyn -p tcp ! --syn -j REJECT --reject-with tcp-reset [ "$COMMAND" != check ] && run_iptables -A rejNotSyn -p tcp ! --syn -j REJECT --reject-with tcp-reset
;; ;;
logNotSyn) logNotSyn)
log_action logNotSyn LOG log_action logNotSyn LOG

7
STABLE/releasenotes.txt
View File

@ -1,4 +1,4 @@
Shorewall 2.0.16 Shorewall 2.0.17
---------------------------------------------------------------------- ----------------------------------------------------------------------
Problems Corrected in version 2.0.4 Problems Corrected in version 2.0.4
@ -299,3 +299,8 @@ New Features in 2.0.16
If not specified or if specified as empty (e.g., DROPINVALID="") If not specified or if specified as empty (e.g., DROPINVALID="")
then DROPINVALID=Yes is assumed. then DROPINVALID=Yes is assumed.
-------------------------------------------------------------------------------
Problems corrected in 2.0.17
1) Invoking the 'rejNotSyn' action results in an error at startup.