diff --git a/Shorewall-common/releasenotes.txt b/Shorewall-common/releasenotes.txt
index 1d2559beb..24344719e 100644
--- a/Shorewall-common/releasenotes.txt
+++ b/Shorewall-common/releasenotes.txt
@@ -166,6 +166,14 @@ Migration Considerations:
'true' value; otherwise, the compiler will assume that the script
failed and will abort the compilation.
+ All scripts will need to begin with the following line:
+
+ use Shorewall::Chains;
+
+ For more complex scripts, you may need to 'use' other Shorewall
+ Perl modules -- browse /usr/share/shorewall-perl/Shorewall/ to
+ see what's available.
+
When a script is invoked, the $chainref scalar variable will hold a
reference to a chain table entry.
@@ -174,7 +182,7 @@ Migration Considerations:
To add a rule to the chain:
- add_rule $chainref,
+ add_rule( $chainref, );
Where
@@ -183,11 +191,11 @@ Migration Considerations:
Example:
- add_rule $chainref, '-j ACCEPT';
+ add_rule( $chainref, '-j ACCEPT' );
To insert a rule into the chain:
- insert_rule $chainref, ,
+ insert_rule( $chainref, , );
The log_rule_limit function works like it does in the shell
compiler with two exceptions:
@@ -201,16 +209,18 @@ Migration Considerations:
Example:
- log_rule_limit
- 'info' ,
- $chainref ,
- $chainref->{name},
- 'DROP' ,
- '', #Limit
- '' , #Log tag
- 'add';
+ log_rule_limit(
+ 'info' ,
+ $chainref ,
+ $chainref->{name},
+ 'DROP' ,
+ '', #Limit
+ '' , #Log tag
+ 'add', #Command
+ '-p tcp' #Pass as-is
+ );
- f) The 'refresh' command is now works like 'restart' with the
+ f) The 'refresh' command now works like 'restart' with the
following exceptions:
- The refresh command is rejected if Shorewall is not running.
diff --git a/Shorewall-perl/Shorewall/Config.pm b/Shorewall-perl/Shorewall/Config.pm
index e3cde8065..01f681159 100644
--- a/Shorewall-perl/Shorewall/Config.pm
+++ b/Shorewall-perl/Shorewall/Config.pm
@@ -1171,10 +1171,10 @@ sub run_user_exit( $ ) {
if ( -f $file ) {
progress_message "Processing $file...";
- unless (my $return = eval `cat $file`) {
+ unless (my $return = eval `cat $file` ) {
fatal_error "Couldn't parse $file: $@" if $@;
fatal_error "Couldn't do $file: $!" unless defined $return;
- fatal_error "Couldn't run $file" unless $return;
+ fatal_error "Couldn't run $file";
}
}
}
diff --git a/Shorewall-perl/Shorewall/Tc.pm b/Shorewall-perl/Shorewall/Tc.pm
index ae4e78b2a..7320f7ff5 100644
--- a/Shorewall-perl/Shorewall/Tc.pm
+++ b/Shorewall-perl/Shorewall/Tc.pm
@@ -550,7 +550,7 @@ sub setup_tc() {
my $mark_part = '';
if ( @routemarked_interfaces && ! $config{TC_EXPERT} ) {
- $mark_part = '-m mark --mark 0/0xFF00';
+ $mark_part = $config{HIGH_ROUTE_MARKS} ? '-m mark --mark 0/0xFF00' : '-m mark --mark 0/0xFF';
for my $interface ( @routemarked_interfaces ) {
add_rule $mangle_table->{PREROUTING} , "-i $interface -j tcpre";
diff --git a/Shorewall-shell/compiler b/Shorewall-shell/compiler
index 2c01184a4..310527376 100755
--- a/Shorewall-shell/compiler
+++ b/Shorewall-shell/compiler
@@ -958,7 +958,7 @@ setup_tc1() {
# packets that are not part of a marked connection to the 'tcpre/tcout' chains.
#
if [ -n "$ROUTEMARK_INTERFACES" -a -z "$TC_EXPERT" ]; then
- mark_part="-m mark --mark 0/0xFF00"
+ [ -n "$HIGH_ROUTE_MARKS" ] && mark_part="-m mark --mark 0/0xFF00" || mark_part="-m mark --mark 0/0xFF00"
#
# But let marks in tcpre override those assigned by 'track'
#
diff --git a/web/shorewall_index.htm b/web/shorewall_index.htm
index 26038971a..ab3e1db95 100644
--- a/web/shorewall_index.htm
+++ b/web/shorewall_index.htm
@@ -21,13 +21,14 @@ Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the
license is included in the section entitled “GNU Free Documentation License”.
-2007-05-17
+2007-05-18
Table of Contents
-Introduction to Shorewall
+Main
+Shorewall Server Down
+Introduction to Shorewall
Glossary
@@ -42,7 +43,14 @@ href="#Glossary">Glossary
OpenWRT
Donations
-Introduction to Shorewall
+Main Shorewall Server Down
+
+The server that hosts www.shorewall.net and ftp.shorewall.net is currently
+down and a backup server with limited bandwidth has been pressed into
+service. Please use Mirrors whenever
+possible.
+
+Thanks!
Glossary