Document optimization level 2 fix.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-04-22 11:55:13 -07:00
parent fb754b3a2e
commit b0b39cfc39
2 changed files with 8 additions and 1 deletions

View File

@ -27,7 +27,10 @@ Changes in Shorewall 4.4.9
13) Don't create output chains for BPORT zones.
14) Implement 'show log ip-addr' in /sbin/shorewall and /sbin/shorewall-lite/
14) Implement 'show log ip-addr' in /sbin/shorewall and
/sbin/shorewall-lite/
15) Restore lone ACCEPT rule to the OUTPUT chain under OPTIMIZE 2.
Changes in Shorewall 4.4.8

View File

@ -271,6 +271,10 @@ I I I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
be used. Now, Shorewall avoids setting up these unneeded chains
and/or rules.
10) If optimization level 2 and there were no OUTPUT rules and the only
effective output policy was $FW->all ACCEPT, then the OUTPUT chain
was empty and no packets could be sent.
----------------------------------------------------------------------------
I V. K N O W N P R O B L E M S R E M A I N I N G
----------------------------------------------------------------------------