forked from extern/shorewall_code
Update release notes and change log for 1.3.4
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@137 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
d863936d69
commit
ab7cf0e002
@ -1,31 +1,9 @@
|
|||||||
Changes since 1.3.2
|
Changes since 1.3.3
|
||||||
|
|
||||||
1. Correct detection of duplicate entries in the interfaces file.
|
1. DETECT_IPADDRS Parameter Added.
|
||||||
2. Clear command now flushes all chains.
|
|
||||||
3. Clear command enables forwarding.
|
|
||||||
4. Corrected indentation in check_config()
|
|
||||||
5. Reorganized the code for processing the rules file.
|
|
||||||
6. Reorganized tunnel creation.
|
|
||||||
7. Automatically generate 'multi' for wildcard interfaces.
|
|
||||||
8. Renamed the mangle table's rfc1918 chain to man1918.
|
|
||||||
9. The TARGET column in the rfc1918 file is now validated.
|
|
||||||
10. Corrected ICMP protocol number in a case statement.
|
|
||||||
11. Interfaces named in the hosts file are now validated against the
|
|
||||||
interfaces file.
|
|
||||||
12. Changed the usage of the nat table to correct problems with
|
|
||||||
NAT_BEFORE_RULES=No.
|
|
||||||
|
|
||||||
|
2. Renamed DETECT_IPADDRS to DETECT_DNAT_IPADDRS
|
||||||
|
|
||||||
|
3. Correct policy file zone validateion during [re]start.
|
||||||
|
|
||||||
|
4. Add 'routestopped' file.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
@ -28,7 +28,7 @@
|
|||||||
# shown below. Simply run this script to revert to your prior version of
|
# shown below. Simply run this script to revert to your prior version of
|
||||||
# Shoreline Firewall.
|
# Shoreline Firewall.
|
||||||
|
|
||||||
VERSION=1.3.3
|
VERSION=1.3.4
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -54,7 +54,7 @@
|
|||||||
# /etc/rc.d/rc.local file is modified to start the firewall.
|
# /etc/rc.d/rc.local file is modified to start the firewall.
|
||||||
#
|
#
|
||||||
|
|
||||||
VERSION=1.3.3
|
VERSION=1.3.4
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
@ -2,28 +2,22 @@ This is a minor release of Shorewall.
|
|||||||
|
|
||||||
In this release:
|
In this release:
|
||||||
|
|
||||||
1. Entries in /etc/shorewall/interface that use the wildcard character
|
1. A new /etc/shorewall/routestopped file has been added. This file is
|
||||||
("+") now have the "multi" option assumed.
|
intended to eventually replace the routestopped option in the
|
||||||
|
/etc/shorewall/interface and /etc/ shorewall/hosts files. This new
|
||||||
2. The 'rfc1918' chain in the mangle table has been renamed 'man1918'
|
file makes remote firewall administration easier by allowing any IP
|
||||||
to make log messages generated from that chain distinguishable from
|
or subnet to be enabled while Shorewall is stopped.
|
||||||
those generated by the 'rfc1918' chain in the filter table.
|
|
||||||
|
|
||||||
3. Interface names appearing in the hosts file are now validated
|
|
||||||
against the interfaces file.
|
|
||||||
|
|
||||||
4. The TARGET column in the rfc1918 file is now checked for
|
|
||||||
correctness.
|
|
||||||
|
|
||||||
5. The 'hits' command has been enhanced.
|
|
||||||
|
|
||||||
6. The structure of chains in the nat table has been changed to reduce
|
|
||||||
the number of rules that packets must traverse and to correct
|
|
||||||
problems with NAT_BEFORE_RULES=No.
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
2. An /etc/shorewall/stopped extension script has been added. This
|
||||||
|
script is invoked after Shorewall has stopped.
|
||||||
|
|
||||||
|
3. A DETECT_DNAT_ADDRS option has been added to
|
||||||
|
/etc/shoreall/shorewall.conf. When this option is selected, DNAT
|
||||||
|
rules only apply when the destination address is the external
|
||||||
|
interface's primary IP address.
|
||||||
|
|
||||||
|
4. The QuickStart Guide has been broken into three guides and has been
|
||||||
|
almost entirely rewritten.
|
||||||
|
|
||||||
|
5. The Samples have been updated to reflect the new capabilities in
|
||||||
|
this release.
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
%define name shorewall
|
%define name shorewall
|
||||||
%define version 1.3.3
|
%define version 1.3.4
|
||||||
%define release 1
|
%define release 1
|
||||||
%define prefix /usr
|
%define prefix /usr
|
||||||
|
|
||||||
@ -80,6 +80,8 @@ if [ $1 = 0 ]; then if [ -x /sbin/insserv ]; then /sbin/insserv -r /etc/init.d/s
|
|||||||
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel
|
%doc COPYING INSTALL changelog.txt releasenotes.txt tunnel
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Sat Jul 13 2002 Tom Eastep <tom@shorewall.net>
|
||||||
|
- Changed version to 1.3.4
|
||||||
* Web Jul 10 2002 Tom Eastep <tom@shorewall.net>
|
* Web Jul 10 2002 Tom Eastep <tom@shorewall.net>
|
||||||
- Added 'routestopped' configuration file.
|
- Added 'routestopped' configuration file.
|
||||||
* Fri Jul 05 2002 Tom Eastep <tom@shorewall.net>
|
* Fri Jul 05 2002 Tom Eastep <tom@shorewall.net>
|
||||||
|
@ -26,7 +26,7 @@
|
|||||||
# You may only use this script to uninstall the version
|
# You may only use this script to uninstall the version
|
||||||
# shown below. Simply run this script to remove Seattle Firewall
|
# shown below. Simply run this script to remove Seattle Firewall
|
||||||
|
|
||||||
VERSION=1.3.3
|
VERSION=1.3.4
|
||||||
|
|
||||||
usage() # $1 = exit status
|
usage() # $1 = exit status
|
||||||
{
|
{
|
||||||
|
Loading…
Reference in New Issue
Block a user