forked from extern/shorewall_code
Document optimization level 2 fix.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
fb754b3a2e
commit
b0b39cfc39
@ -27,7 +27,10 @@ Changes in Shorewall 4.4.9
|
||||
|
||||
13) Don't create output chains for BPORT zones.
|
||||
|
||||
14) Implement 'show log ip-addr' in /sbin/shorewall and /sbin/shorewall-lite/
|
||||
14) Implement 'show log ip-addr' in /sbin/shorewall and
|
||||
/sbin/shorewall-lite/
|
||||
|
||||
15) Restore lone ACCEPT rule to the OUTPUT chain under OPTIMIZE 2.
|
||||
|
||||
Changes in Shorewall 4.4.8
|
||||
|
||||
|
@ -271,6 +271,10 @@ I I I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
|
||||
be used. Now, Shorewall avoids setting up these unneeded chains
|
||||
and/or rules.
|
||||
|
||||
10) If optimization level 2 and there were no OUTPUT rules and the only
|
||||
effective output policy was $FW->all ACCEPT, then the OUTPUT chain
|
||||
was empty and no packets could be sent.
|
||||
|
||||
----------------------------------------------------------------------------
|
||||
I V. K N O W N P R O B L E M S R E M A I N I N G
|
||||
----------------------------------------------------------------------------
|
||||
|
Loading…
Reference in New Issue
Block a user