From b7915991bab24a4f4d5181e10c01c4790c0010f3 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Sat, 29 Aug 2009 09:24:51 -0700 Subject: [PATCH] Add MULTICAST=Yes corrected problem description to release notes --- Shorewall/releasenotes.txt | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 739b824c8..d30e7022b 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -180,11 +180,14 @@ Shorewall 4.4.1 one-interface sample configuration since forwarding is typically not required with only a single interface. -4) Previously, the definition of a zone that specified "nets=" in +4) If MULTICAST=Yes in shorewall.conf, multicast traffic was + incorrectly exempted from ACCEPT policies. + +5) Previously, the definition of a zone that specified "nets=" in /etc/shorewall/interfaces could not be extended by entries in /etc/shorewall/hosts. -5) Previously, "nets=" could be specified in a multi-zone interface +6) Previously, "nets=" could be specified in a multi-zone interface definition ("-" in the ZONES column) in /etc/shorewall/zones. This now raises a fatal compilation error.