forked from extern/shorewall_code
Remove mailing list problem report
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@454 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
0babfcf177
commit
d08a68991a
@ -40,6 +40,7 @@
|
|||||||
<ol>
|
<ol>
|
||||||
<li>
|
<li>
|
||||||
|
|
||||||
|
|
||||||
<p align="left"> <b><u>I</u>f you use a Windows system to download
|
<p align="left"> <b><u>I</u>f you use a Windows system to download
|
||||||
a corrected script, be sure to run the script through <u>
|
a corrected script, be sure to run the script through <u>
|
||||||
<a href="http://www.megaloman.com/%7Ehany/software/hd2u/"
|
<a href="http://www.megaloman.com/%7Ehany/software/hd2u/"
|
||||||
@ -48,6 +49,7 @@
|
|||||||
</li>
|
</li>
|
||||||
<li>
|
<li>
|
||||||
|
|
||||||
|
|
||||||
<p align="left"> <b>If you are installing Shorewall for the first
|
<p align="left"> <b>If you are installing Shorewall for the first
|
||||||
time and plan to use the .tgz and install.sh script, you can untar
|
time and plan to use the .tgz and install.sh script, you can untar
|
||||||
the archive, replace the 'firewall' script in the untarred directory
|
the archive, replace the 'firewall' script in the untarred directory
|
||||||
@ -55,6 +57,7 @@ the archive, replace the 'firewall' script in the untarred directory
|
|||||||
</li>
|
</li>
|
||||||
<li>
|
<li>
|
||||||
|
|
||||||
|
|
||||||
<p align="left"> <b>If you are running a Shorewall version earlier
|
<p align="left"> <b>If you are running a Shorewall version earlier
|
||||||
than 1.3.11, when the instructions say to install a corrected firewall
|
than 1.3.11, when the instructions say to install a corrected firewall
|
||||||
script in /etc/shorewall/firewall, /usr/lib/shorewall/firewall
|
script in /etc/shorewall/firewall, /usr/lib/shorewall/firewall
|
||||||
@ -107,18 +110,25 @@ and NAT</a></b><br>
|
|||||||
|
|
||||||
|
|
||||||
<h3>Version 1.3.14</h3>
|
<h3>Version 1.3.14</h3>
|
||||||
|
|
||||||
<ul>
|
<ul>
|
||||||
<li>There is an <a
|
<li>There is an <a
|
||||||
href="http://www.shorewall.net/pub/shorewall/errata/1.3.14/rfc1918">updated
|
href="http://www.shorewall.net/pub/shorewall/errata/1.3.14/rfc1918">updated
|
||||||
rfc1918</a> file that reflects the resent allocation of 222.0.0.0/8 and 223.0.0.0/8.</li>
|
rfc1918</a> file that reflects the resent allocation of 222.0.0.0/8 and
|
||||||
|
223.0.0.0/8.</li>
|
||||||
|
</ul>
|
||||||
|
<ul>
|
||||||
<li>The documentation for the routestopped file claimed that a comma-separated
|
<li>The documentation for the routestopped file claimed that a comma-separated
|
||||||
list could appear in the second column while the code only supported a single
|
list could appear in the second column while the code only supported a single
|
||||||
host or network address. This has been corrected in <a
|
host or network address.</li>
|
||||||
|
<li>Log messages produced by 'logunclean' and 'dropunclean' were not rate-limited.</li>
|
||||||
|
|
||||||
|
</ul>
|
||||||
|
Both problems have been corrected in <a
|
||||||
href="http://www.shorewall.net/pub/shorewall/errata/1.3.14/firewall">this
|
href="http://www.shorewall.net/pub/shorewall/errata/1.3.14/firewall">this
|
||||||
firewall script</a> which may be installed in /usr/lib/shorewall as described
|
firewall script</a> which may be installed in /usr/lib/shorewall as described
|
||||||
above.<br>
|
above.<br>
|
||||||
</li>
|
|
||||||
</ul>
|
|
||||||
<h3>Version 1.3.13</h3>
|
<h3>Version 1.3.13</h3>
|
||||||
|
|
||||||
<ul>
|
<ul>
|
||||||
@ -136,9 +146,9 @@ too big".<br>
|
|||||||
above.<br>
|
above.<br>
|
||||||
|
|
||||||
<ul>
|
<ul>
|
||||||
<li>VLAN interface names of the form "eth<i>n</i>.<i>m</i>" (e.g., eth0.1)
|
<li>VLAN interface names of the form "eth<i>n</i>.<i>m</i>" (e.g.,
|
||||||
are not supported in this version or in 1.3.12. If you need such support,
|
eth0.1) are not supported in this version or in 1.3.12. If you need such
|
||||||
post on the users list and I can provide you with a patched version.<br>
|
support, post on the users list and I can provide you with a patched version.<br>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
</ul>
|
</ul>
|
||||||
@ -152,9 +162,9 @@ is corrected by <a
|
|||||||
href="http://www.shorewall.net/pub/shorewall/errata/1.3.12/firewall">this
|
href="http://www.shorewall.net/pub/shorewall/errata/1.3.12/firewall">this
|
||||||
firewall script</a> which may be installed in /usr/lib/shorewall as described
|
firewall script</a> which may be installed in /usr/lib/shorewall as described
|
||||||
above.</li>
|
above.</li>
|
||||||
<li>VLAN interface names of the form "eth<i>n</i>.<i>m</i>" (e.g., eth0.1)
|
<li>VLAN interface names of the form "eth<i>n</i>.<i>m</i>" (e.g.,
|
||||||
are not supported in this version or in 1.3.13. If you need such support,
|
eth0.1) are not supported in this version or in 1.3.13. If you need such
|
||||||
post on the users list and I can provide you with a patched version.<br>
|
support, post on the users list and I can provide you with a patched version.<br>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
</ul>
|
</ul>
|
||||||
@ -191,9 +201,9 @@ the following warnings:<br>
|
|||||||
These warnings are harmless and may be ignored. Users downloading
|
These warnings are harmless and may be ignored. Users downloading
|
||||||
the .rpm from shorewall.net or mirrors should no longer see these warnings
|
the .rpm from shorewall.net or mirrors should no longer see these warnings
|
||||||
as the .rpm you will get from there has been corrected.</li>
|
as the .rpm you will get from there has been corrected.</li>
|
||||||
<li>DNAT rules that exclude a source subzone (SOURCE column contains
|
<li>DNAT rules that exclude a source subzone (SOURCE column
|
||||||
! followed by a sub-zone list) result in an error message and Shorewall
|
contains ! followed by a sub-zone list) result in an error message and
|
||||||
fails to start.<br>
|
Shorewall fails to start.<br>
|
||||||
<br>
|
<br>
|
||||||
Install <a
|
Install <a
|
||||||
href="http://www.shorewall.net/pub/shorewall/errata/1.3.11/firewall">this
|
href="http://www.shorewall.net/pub/shorewall/errata/1.3.11/firewall">this
|
||||||
@ -215,8 +225,8 @@ running on your firewall and you have a 'pptpserver' entry in /etc/shorewal
|
|||||||
version of the firewall script</a> may help. Please report any cases
|
version of the firewall script</a> may help. Please report any cases
|
||||||
where installing this script in /usr/lib/shorewall/firewall solved your
|
where installing this script in /usr/lib/shorewall/firewall solved your
|
||||||
connection problems. Beginning with version 1.3.10, it is safe to save
|
connection problems. Beginning with version 1.3.10, it is safe to save
|
||||||
the old version of /usr/lib/shorewall/firewall before copying in the new
|
the old version of /usr/lib/shorewall/firewall before copying in the
|
||||||
one since /usr/lib/shorewall/firewall is the real script now and not
|
new one since /usr/lib/shorewall/firewall is the real script now and not
|
||||||
just a symbolic link to the real script.<br>
|
just a symbolic link to the real script.<br>
|
||||||
</li>
|
</li>
|
||||||
|
|
||||||
@ -247,9 +257,9 @@ just a symbolic link to the real script.<br>
|
|||||||
<ul>
|
<ul>
|
||||||
<li>The installer (install.sh) issues a misleading message
|
<li>The installer (install.sh) issues a misleading message
|
||||||
"Common functions installed in /var/lib/shorewall/functions" whereas
|
"Common functions installed in /var/lib/shorewall/functions" whereas
|
||||||
the file is installed in /usr/lib/shorewall/functions. The installer also
|
the file is installed in /usr/lib/shorewall/functions. The installer
|
||||||
performs incorrectly when updating old configurations that had the file
|
also performs incorrectly when updating old configurations that had the
|
||||||
/etc/shorewall/functions. <a
|
file /etc/shorewall/functions. <a
|
||||||
href="ftp://ftp.shorewall.net/pub/shorewall/errata/1.3.9/install.sh">Here
|
href="ftp://ftp.shorewall.net/pub/shorewall/errata/1.3.9/install.sh">Here
|
||||||
is an updated version that corrects these problems.<br>
|
is an updated version that corrects these problems.<br>
|
||||||
</a></li>
|
</a></li>
|
||||||
@ -280,15 +290,19 @@ performs incorrectly when updating old configurations that had the file
|
|||||||
problems.
|
problems.
|
||||||
<h3>Version 1.3.7b</h3>
|
<h3>Version 1.3.7b</h3>
|
||||||
|
|
||||||
|
|
||||||
<p>DNAT rules where the source zone is 'fw' ($FW)
|
<p>DNAT rules where the source zone is 'fw' ($FW)
|
||||||
result in an error message. Installing
|
result in an error message. Installing
|
||||||
<a
|
<a
|
||||||
href="http://www.shorewall.net/pub/shorewall/errata/1.3.7/firewall">
|
href="http://www.shorewall.net/pub/shorewall/errata/1.3.7/firewall">
|
||||||
this corrected firewall script</a> in /var/lib/shorewall/firewall
|
this corrected firewall script</a> in /var/lib/shorewall/firewall
|
||||||
as described above corrects this problem.</p>
|
as described above corrects this
|
||||||
|
problem.</p>
|
||||||
|
|
||||||
|
|
||||||
<h3>Version 1.3.7a</h3>
|
<h3>Version 1.3.7a</h3>
|
||||||
|
|
||||||
|
|
||||||
<p>"shorewall refresh" is not creating the proper
|
<p>"shorewall refresh" is not creating the proper
|
||||||
rule for FORWARDPING=Yes. Consequently, after
|
rule for FORWARDPING=Yes. Consequently, after
|
||||||
"shorewall refresh", the firewall will not forward
|
"shorewall refresh", the firewall will not forward
|
||||||
@ -296,10 +310,13 @@ problems.
|
|||||||
<a
|
<a
|
||||||
href="http://www.shorewall.net/pub/shorewall/errata/1.3.7/firewall">
|
href="http://www.shorewall.net/pub/shorewall/errata/1.3.7/firewall">
|
||||||
this corrected firewall script</a> in /var/lib/shorewall/firewall
|
this corrected firewall script</a> in /var/lib/shorewall/firewall
|
||||||
as described above corrects this problem.</p>
|
as described above corrects this
|
||||||
|
problem.</p>
|
||||||
|
|
||||||
|
|
||||||
<h3>Version <= 1.3.7a</h3>
|
<h3>Version <= 1.3.7a</h3>
|
||||||
|
|
||||||
|
|
||||||
<p>If "norfc1918" and "dhcp" are both specified as
|
<p>If "norfc1918" and "dhcp" are both specified as
|
||||||
options on a given interface then RFC 1918
|
options on a given interface then RFC 1918
|
||||||
checking is occurring before DHCP checking. This
|
checking is occurring before DHCP checking. This
|
||||||
@ -308,13 +325,14 @@ problems.
|
|||||||
reject the broadcast (usually logging it). This
|
reject the broadcast (usually logging it). This
|
||||||
has two problems:</p>
|
has two problems:</p>
|
||||||
|
|
||||||
|
|
||||||
<ol>
|
<ol>
|
||||||
<li>If the firewall is
|
<li>If the firewall
|
||||||
running a DHCP server, the client
|
is running a DHCP server, the client
|
||||||
won't be able to obtain an IP address
|
won't be able to obtain an IP address
|
||||||
lease from that server.</li>
|
lease from that server.</li>
|
||||||
<li>With this order of
|
<li>With this order
|
||||||
checking, the "dhcp" option cannot
|
of checking, the "dhcp" option cannot
|
||||||
be used as a noise-reduction measure
|
be used as a noise-reduction measure
|
||||||
where there are both dynamic and static
|
where there are both dynamic and static
|
||||||
clients on a LAN segment.</li>
|
clients on a LAN segment.</li>
|
||||||
@ -329,13 +347,16 @@ problems.
|
|||||||
installed in /var/lib/shorewall as
|
installed in /var/lib/shorewall as
|
||||||
described above.</p>
|
described above.</p>
|
||||||
|
|
||||||
|
|
||||||
<h3>Version 1.3.7</h3>
|
<h3>Version 1.3.7</h3>
|
||||||
|
|
||||||
|
|
||||||
<p>Version 1.3.7 dead on arrival -- please use
|
<p>Version 1.3.7 dead on arrival -- please use
|
||||||
version 1.3.7a and check your version against
|
version 1.3.7a and check your version against
|
||||||
these md5sums -- if there's a difference, please
|
these md5sums -- if there's a difference, please
|
||||||
download again.</p>
|
download again.</p>
|
||||||
|
|
||||||
|
|
||||||
<pre> d2fffb7fb99bcc6cb047ea34db1df10 shorewall-1.3.7a.tgz<br> 6a7fd284c8685b2b471a2f47b469fb94 shorewall-1.3.7a-1.noarch.rpm<br> 3decd14296effcff16853106771f7035 shorwall-1.3.7a.lrp</pre>
|
<pre> d2fffb7fb99bcc6cb047ea34db1df10 shorewall-1.3.7a.tgz<br> 6a7fd284c8685b2b471a2f47b469fb94 shorewall-1.3.7a-1.noarch.rpm<br> 3decd14296effcff16853106771f7035 shorwall-1.3.7a.lrp</pre>
|
||||||
|
|
||||||
<p>In other words, type "md5sum <<i>whatever package you downloaded</i>>
|
<p>In other words, type "md5sum <<i>whatever package you downloaded</i>>
|
||||||
@ -351,8 +372,8 @@ described above.</p>
|
|||||||
|
|
||||||
|
|
||||||
<p align="left">If ADD_SNAT_ALIASES=Yes is specified in /etc/shorewall/shorewall.conf,
|
<p align="left">If ADD_SNAT_ALIASES=Yes is specified in /etc/shorewall/shorewall.conf,
|
||||||
an error occurs when the firewall script attempts to add
|
an error occurs when the firewall script attempts to
|
||||||
an SNAT alias. </p>
|
add an SNAT alias. </p>
|
||||||
</li>
|
</li>
|
||||||
<li>
|
<li>
|
||||||
|
|
||||||
@ -436,8 +457,9 @@ it's a good idea to run that command after you have made configuratio
|
|||||||
by that name" then you probably have an entry in /etc/shorewall/hosts
|
by that name" then you probably have an entry in /etc/shorewall/hosts
|
||||||
that specifies an interface that you didn't include in
|
that specifies an interface that you didn't include in
|
||||||
/etc/shorewall/interfaces. To correct this problem, you
|
/etc/shorewall/interfaces. To correct this problem, you
|
||||||
must add an entry to /etc/shorewall/interfaces. Shorewall 1.3.3 and
|
must add an entry to /etc/shorewall/interfaces. Shorewall 1.3.3
|
||||||
later versions produce a clearer error message in this case.</p>
|
and later versions produce a clearer error message in this
|
||||||
|
case.</p>
|
||||||
|
|
||||||
<h3 align="left">Version 1.3.2</h3>
|
<h3 align="left">Version 1.3.2</h3>
|
||||||
|
|
||||||
@ -496,9 +518,9 @@ appearence of the option. For example:<br>
|
|||||||
that affects only the 'routestopped' option.<br>
|
that affects only the 'routestopped' option.<br>
|
||||||
<br>
|
<br>
|
||||||
Users who downloaded the corrected script
|
Users who downloaded the corrected script
|
||||||
prior to 1850 GMT today should download and install the
|
prior to 1850 GMT today should download and install
|
||||||
corrected script again to ensure that this second problem
|
the corrected script again to ensure that this second
|
||||||
is corrected.</li>
|
problem is corrected.</li>
|
||||||
|
|
||||||
</ul>
|
</ul>
|
||||||
|
|
||||||
@ -510,13 +532,14 @@ is corrected.</li>
|
|||||||
<h3 align="left">Version 1.3.0</h3>
|
<h3 align="left">Version 1.3.0</h3>
|
||||||
|
|
||||||
<ul>
|
<ul>
|
||||||
<li>Folks who downloaded 1.3.0 from the links
|
<li>Folks who downloaded 1.3.0 from the
|
||||||
on the download page before 23:40 GMT, 29 May 2002 may
|
links on the download page before 23:40 GMT, 29 May
|
||||||
have downloaded 1.2.13 rather than 1.3.0. The "shorewall
|
2002 may have downloaded 1.2.13 rather than 1.3.0. The
|
||||||
version" command will tell you which version that you
|
"shorewall version" command will tell you which version
|
||||||
have installed.</li>
|
that you have installed.</li>
|
||||||
<li>The documentation NAT.htm file uses non-existent
|
<li>The documentation NAT.htm file uses
|
||||||
wallpaper and bullet graphic files. The <a
|
non-existent wallpaper and bullet graphic files. The
|
||||||
|
<a
|
||||||
href="http://www.shorewall.net/pub/shorewall/errata/1.3.0/NAT.htm">
|
href="http://www.shorewall.net/pub/shorewall/errata/1.3.0/NAT.htm">
|
||||||
corrected version is here</a>.</li>
|
corrected version is here</a>.</li>
|
||||||
|
|
||||||
@ -535,8 +558,8 @@ is corrected.</li>
|
|||||||
<blockquote>
|
<blockquote>
|
||||||
|
|
||||||
<p align="left">There are a couple of serious bugs in iptables 1.2.3 that
|
<p align="left">There are a couple of serious bugs in iptables 1.2.3 that
|
||||||
prevent it from working with Shorewall. Regrettably, RedHat
|
prevent it from working with Shorewall. Regrettably,
|
||||||
released this buggy iptables in RedHat 7.2. </p>
|
RedHat released this buggy iptables in RedHat 7.2. </p>
|
||||||
|
|
||||||
|
|
||||||
<p align="left"> I have built a <a
|
<p align="left"> I have built a <a
|
||||||
@ -550,8 +573,8 @@ is corrected.</li>
|
|||||||
|
|
||||||
|
|
||||||
<p align="left"><font color="#ff6633"><b>Update 11/9/2001: </b></font>RedHat
|
<p align="left"><font color="#ff6633"><b>Update 11/9/2001: </b></font>RedHat
|
||||||
has released an iptables-1.2.4 RPM of their own which you can download
|
has released an iptables-1.2.4 RPM of their own which you can
|
||||||
from<font color="#ff6633"> <a
|
download from<font color="#ff6633"> <a
|
||||||
href="http://www.redhat.com/support/errata/RHSA-2001-144.html">http://www.redhat.com/support/errata/RHSA-2001-144.html</a>.
|
href="http://www.redhat.com/support/errata/RHSA-2001-144.html">http://www.redhat.com/support/errata/RHSA-2001-144.html</a>.
|
||||||
</font>I have installed this RPM on my firewall and it works
|
</font>I have installed this RPM on my firewall and it works
|
||||||
fine.</p>
|
fine.</p>
|
||||||
@ -582,6 +605,7 @@ is corrected.</li>
|
|||||||
and RedHat iptables</h3>
|
and RedHat iptables</h3>
|
||||||
|
|
||||||
<blockquote>
|
<blockquote>
|
||||||
|
|
||||||
<p>Users who use RedHat iptables RPMs and who upgrade to kernel 2.4.18/19
|
<p>Users who use RedHat iptables RPMs and who upgrade to kernel 2.4.18/19
|
||||||
may experience the following:</p>
|
may experience the following:</p>
|
||||||
|
|
||||||
@ -606,24 +630,30 @@ to rpm (e.g., "iptables -Uvh --oldpackage iptables-1.2.5-1.i386.rpm")
|
|||||||
<h3><a name="SuSE"></a>Problems installing/upgrading
|
<h3><a name="SuSE"></a>Problems installing/upgrading
|
||||||
RPM on SuSE</h3>
|
RPM on SuSE</h3>
|
||||||
|
|
||||||
|
|
||||||
<p>If you find that rpm complains about a conflict
|
<p>If you find that rpm complains about a conflict
|
||||||
with kernel <= 2.2 yet you have a 2.4 kernel
|
with kernel <= 2.2 yet you have a 2.4 kernel
|
||||||
installed, simply use the "--nodeps" option to
|
installed, simply use the "--nodeps" option to
|
||||||
rpm.</p>
|
rpm.</p>
|
||||||
|
|
||||||
|
|
||||||
<p>Installing: rpm -ivh --nodeps <i><shorewall rpm></i></p>
|
<p>Installing: rpm -ivh --nodeps <i><shorewall rpm></i></p>
|
||||||
|
|
||||||
|
|
||||||
<p>Upgrading: rpm -Uvh --nodeps <i><shorewall rpm></i></p>
|
<p>Upgrading: rpm -Uvh --nodeps <i><shorewall rpm></i></p>
|
||||||
|
|
||||||
|
|
||||||
<h3><a name="Multiport"></a><b>Problems with
|
<h3><a name="Multiport"></a><b>Problems with
|
||||||
iptables version 1.2.7 and MULTIPORT=Yes</b></h3>
|
iptables version 1.2.7 and MULTIPORT=Yes</b></h3>
|
||||||
|
|
||||||
|
|
||||||
<p>The iptables 1.2.7 release of iptables has made
|
<p>The iptables 1.2.7 release of iptables has made
|
||||||
an incompatible change to the syntax used to
|
an incompatible change to the syntax used to
|
||||||
specify multiport match rules; as a consequence,
|
specify multiport match rules; as a consequence,
|
||||||
if you install iptables 1.2.7 you must be running
|
if you install iptables 1.2.7 you must be running
|
||||||
Shorewall 1.3.7a or later or:</p>
|
Shorewall 1.3.7a or later or:</p>
|
||||||
|
|
||||||
|
|
||||||
<ul>
|
<ul>
|
||||||
<li>set MULTIPORT=No
|
<li>set MULTIPORT=No
|
||||||
in /etc/shorewall/shorewall.conf; or </li>
|
in /etc/shorewall/shorewall.conf; or </li>
|
||||||
@ -646,12 +676,12 @@ in /etc/shorewall/shorewall.conf; or </li>
|
|||||||
Error message is:<br>
|
Error message is:<br>
|
||||||
|
|
||||||
<pre>Setting up NAT...<br>iptables: Invalid argument<br>Terminated<br><br></pre>
|
<pre>Setting up NAT...<br>iptables: Invalid argument<br>Terminated<br><br></pre>
|
||||||
The solution is to put "no" in the LOCAL column. Kernel support
|
The solution is to put "no" in the LOCAL column. Kernel
|
||||||
for LOCAL=yes has never worked properly and 2.4.18-10 has disabled
|
support for LOCAL=yes has never worked properly and 2.4.18-10 has
|
||||||
it. The 2.4.19 kernel contains corrected support under a new kernel
|
disabled it. The 2.4.19 kernel contains corrected support under a new
|
||||||
configuraiton option; see <a href="Documentation.htm#NAT">http://www.shorewall.net/Documentation.htm#NAT</a><br>
|
kernel configuraiton option; see <a href="Documentation.htm#NAT">http://www.shorewall.net/Documentation.htm#NAT</a><br>
|
||||||
|
|
||||||
<p><font size="2"> Last updated 2/17/2003 -
|
<p><font size="2"> Last updated 2/18/2003 -
|
||||||
<a href="support.htm">Tom Eastep</a></font> </p>
|
<a href="support.htm">Tom Eastep</a></font> </p>
|
||||||
|
|
||||||
<p><a href="copyright.htm"><font size="2">Copyright</font> © <font
|
<p><a href="copyright.htm"><font size="2">Copyright</font> © <font
|
||||||
@ -667,5 +697,7 @@ configuraiton option; see <a href="Documentation.htm#NAT">http://www.shorewal
|
|||||||
<br>
|
<br>
|
||||||
<br>
|
<br>
|
||||||
<br>
|
<br>
|
||||||
|
<br>
|
||||||
|
<br>
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
|
@ -17,6 +17,7 @@
|
|||||||
<title>Shorewall Mailing Lists</title>
|
<title>Shorewall Mailing Lists</title>
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<meta name="Microsoft Theme" content="none">
|
<meta name="Microsoft Theme" content="none">
|
||||||
</head>
|
</head>
|
||||||
<body>
|
<body>
|
||||||
@ -29,6 +30,7 @@
|
|||||||
<td width="33%" valign="middle" align="left">
|
<td width="33%" valign="middle" align="left">
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<h1 align="center"><a
|
<h1 align="center"><a
|
||||||
href="http://www.centralcommand.com/linux_products.html"><img
|
href="http://www.centralcommand.com/linux_products.html"><img
|
||||||
src="images/Vexira_Antivirus_Logo.gif" alt="Vexira Logo" width="78"
|
src="images/Vexira_Antivirus_Logo.gif" alt="Vexira Logo" width="78"
|
||||||
@ -71,8 +73,6 @@
|
|||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
<h2 align="left">Not getting List Mail? -- <a
|
|
||||||
href="mailing_list_problems.htm">Check Here</a></h2>
|
|
||||||
|
|
||||||
<p align="left">If you experience problems with any of these lists, please
|
<p align="left">If you experience problems with any of these lists, please
|
||||||
let <a href="mailto:teastep@shorewall.net">me</a> know</p>
|
let <a href="mailto:teastep@shorewall.net">me</a> know</p>
|
||||||
@ -96,8 +96,8 @@
|
|||||||
(including <a href="http://razor.sourceforge.net/">Vipul's Razor</a>).<br>
|
(including <a href="http://razor.sourceforge.net/">Vipul's Razor</a>).<br>
|
||||||
</li>
|
</li>
|
||||||
<li>to ensure that the sender address is fully qualified.</li>
|
<li>to ensure that the sender address is fully qualified.</li>
|
||||||
<li>to verify that the sender's domain has an A or MX record
|
<li>to verify that the sender's domain has an A or MX
|
||||||
in DNS.</li>
|
record in DNS.</li>
|
||||||
<li>to ensure that the host name in the HELO/EHLO command
|
<li>to ensure that the host name in the HELO/EHLO command
|
||||||
is a valid fully-qualified DNS name that resolves.</li>
|
is a valid fully-qualified DNS name that resolves.</li>
|
||||||
|
|
||||||
@ -106,13 +106,13 @@
|
|||||||
<h2>Please post in plain text</h2>
|
<h2>Please post in plain text</h2>
|
||||||
A growing number of MTAs serving list subscribers are rejecting
|
A growing number of MTAs serving list subscribers are rejecting
|
||||||
all HTML traffic. At least one MTA has gone so far as to blacklist shorewall.net
|
all HTML traffic. At least one MTA has gone so far as to blacklist shorewall.net
|
||||||
"for continuous abuse" because it has been my policy to allow HTML in list
|
"for continuous abuse" because it has been my policy to allow HTML in
|
||||||
posts!!<br>
|
list posts!!<br>
|
||||||
<br>
|
<br>
|
||||||
I think that blocking all HTML is a Draconian way to control spam
|
I think that blocking all HTML is a Draconian way to control spam
|
||||||
and that the ultimate losers here are not the spammers but the list subscribers
|
and that the ultimate losers here are not the spammers but the list
|
||||||
whose MTAs are bouncing all shorewall.net mail. As one list subscriber
|
subscribers whose MTAs are bouncing all shorewall.net mail. As one list
|
||||||
wrote to me privately "These e-mail admin's need to get a <i>(explitive
|
subscriber wrote to me privately "These e-mail admin's need to get a <i>(explitive
|
||||||
deleted)</i> life instead of trying to rid the planet of HTML based e-mail".
|
deleted)</i> life instead of trying to rid the planet of HTML based e-mail".
|
||||||
Nevertheless, to allow subscribers to receive list posts as must as possible,
|
Nevertheless, to allow subscribers to receive list posts as must as possible,
|
||||||
I have now configured the list server at shorewall.net to strip all HTML
|
I have now configured the list server at shorewall.net to strip all HTML
|
||||||
@ -124,9 +124,9 @@ the list server.<br>
|
|||||||
|
|
||||||
<h2>Other Mail Delivery Problems</h2>
|
<h2>Other Mail Delivery Problems</h2>
|
||||||
If you find that you are missing an occasional list post, your e-mail
|
If you find that you are missing an occasional list post, your e-mail
|
||||||
admin may be blocking mail whose <i>Received:</i> headers contain the names
|
admin may be blocking mail whose <i>Received:</i> headers contain the
|
||||||
of certain ISPs. Again, I believe that such policies hurt more than they
|
names of certain ISPs. Again, I believe that such policies hurt more than
|
||||||
help but I'm not prepared to go so far as to start stripping <i>Received:</i>
|
they help but I'm not prepared to go so far as to start stripping <i>Received:</i>
|
||||||
headers to circumvent those policies.<br>
|
headers to circumvent those policies.<br>
|
||||||
|
|
||||||
<h2 align="left">Mailing Lists Archive Search</h2>
|
<h2 align="left">Mailing Lists Archive Search</h2>
|
||||||
@ -164,9 +164,10 @@ the list server.<br>
|
|||||||
value=""> <input type="submit" value="Search"> </p>
|
value=""> <input type="submit" value="Search"> </p>
|
||||||
</form>
|
</form>
|
||||||
|
|
||||||
<h2 align="left"><font color="#ff0000">Please do not try to download the entire
|
|
||||||
Archive -- it is 75MB (and growing daily) and my slow DSL line simply won't
|
<h2 align="left"><font color="#ff0000">Please do not try to download the
|
||||||
stand the traffic. If I catch you, you will be blacklisted.<br>
|
entire Archive -- it is 75MB (and growing daily) and my slow DSL line simply
|
||||||
|
won't stand the traffic. If I catch you, you will be blacklisted.<br>
|
||||||
</font></h2>
|
</font></h2>
|
||||||
|
|
||||||
<h2 align="left">Shorewall CA Certificate</h2>
|
<h2 align="left">Shorewall CA Certificate</h2>
|
||||||
@ -207,9 +208,9 @@ to this list.</p>
|
|||||||
<p align="left">The list archives are at <a
|
<p align="left">The list archives are at <a
|
||||||
href="http://lists.shorewall.net/pipermail/shorewall-users/index.html">http://lists.shorewall.net/pipermail/shorewall-users</a>.</p>
|
href="http://lists.shorewall.net/pipermail/shorewall-users/index.html">http://lists.shorewall.net/pipermail/shorewall-users</a>.</p>
|
||||||
|
|
||||||
<p align="left">Note that prior to 1/1/2002, the mailing list was hosted
|
<p align="left">Note that prior to 1/1/2002, the mailing list was hosted at
|
||||||
at <a href="http://sourceforge.net">Sourceforge</a>. The archives from that
|
<a href="http://sourceforge.net">Sourceforge</a>. The archives from that list
|
||||||
list may be found at <a
|
may be found at <a
|
||||||
href="http://www.geocrawler.com/lists/3/Sourceforge/9327/0/">www.geocrawler.com/lists/3/Sourceforge/9327/0/</a>.</p>
|
href="http://www.geocrawler.com/lists/3/Sourceforge/9327/0/">www.geocrawler.com/lists/3/Sourceforge/9327/0/</a>.</p>
|
||||||
|
|
||||||
<h2 align="left">Shorewall Announce Mailing List</h2>
|
<h2 align="left">Shorewall Announce Mailing List</h2>
|
||||||
@ -261,8 +262,8 @@ list may be found at <a
|
|||||||
the Mailing Lists</h2>
|
the Mailing Lists</h2>
|
||||||
|
|
||||||
<p align="left">There seems to be near-universal confusion about unsubscribing
|
<p align="left">There seems to be near-universal confusion about unsubscribing
|
||||||
from Mailman-managed lists although Mailman 2.1 has attempted
|
from Mailman-managed lists although Mailman 2.1 has attempted to
|
||||||
to make this less confusing. To unsubscribe:</p>
|
make this less confusing. To unsubscribe:</p>
|
||||||
|
|
||||||
<ul>
|
<ul>
|
||||||
<li>
|
<li>
|
||||||
@ -275,8 +276,8 @@ to make this less confusing. To unsubscribe:</p>
|
|||||||
<p align="left">Down at the bottom of that page is the following text:
|
<p align="left">Down at the bottom of that page is the following text:
|
||||||
" To <b>unsubscribe</b> from <i><list name></i>, get a password
|
" To <b>unsubscribe</b> from <i><list name></i>, get a password
|
||||||
reminder, or change your subscription options enter your subscription
|
reminder, or change your subscription options enter your subscription
|
||||||
email address:". Enter your email address in the box and click
|
email address:". Enter your email address in the box and
|
||||||
on the "<b>Unsubscribe</b> or edit options" button.</p>
|
click on the "<b>Unsubscribe</b> or edit options" button.</p>
|
||||||
</li>
|
</li>
|
||||||
<li>
|
<li>
|
||||||
|
|
||||||
@ -293,12 +294,13 @@ to make this less confusing. To unsubscribe:</p>
|
|||||||
|
|
||||||
<p align="left"><a href="gnu_mailman.htm">Check out these instructions</a></p>
|
<p align="left"><a href="gnu_mailman.htm">Check out these instructions</a></p>
|
||||||
|
|
||||||
<p align="left"><font size="2">Last updated 2/3/2003 - <a
|
<p align="left"><font size="2">Last updated 2/18/2003 - <a
|
||||||
href="http://www.shorewall.net/support.htm">Tom Eastep</a></font></p>
|
href="http://www.shorewall.net/support.htm">Tom Eastep</a></font></p>
|
||||||
|
|
||||||
<p align="left"><a href="copyright.htm"> <font size="2">Copyright</font> ©
|
<p align="left"><a href="copyright.htm"> <font size="2">Copyright</font>
|
||||||
<font size="2">2001, 2002, 2003 Thomas M. Eastep.</font></a><br>
|
© <font size="2">2001, 2002, 2003 Thomas M. Eastep.</font></a><br>
|
||||||
</p>
|
</p>
|
||||||
<br>
|
<br>
|
||||||
|
<br>
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
|
@ -1,49 +0,0 @@
|
|||||||
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
||||||
<html>
|
|
||||||
<head>
|
|
||||||
|
|
||||||
<meta http-equiv="Content-Language" content="en-us">
|
|
||||||
|
|
||||||
<meta http-equiv="Content-Type"
|
|
||||||
content="text/html; charset=windows-1252">
|
|
||||||
|
|
||||||
<meta name="GENERATOR" content="Microsoft FrontPage 5.0">
|
|
||||||
|
|
||||||
<meta name="ProgId" content="FrontPage.Editor.Document">
|
|
||||||
<title>Mailing List Problems</title>
|
|
||||||
</head>
|
|
||||||
<body>
|
|
||||||
|
|
||||||
<table border="0" cellpadding="0" cellspacing="0"
|
|
||||||
style="border-collapse: collapse;" bordercolor="#111111" width="100%"
|
|
||||||
id="AutoNumber1" bgcolor="#400169" height="90">
|
|
||||||
<tbody>
|
|
||||||
<tr>
|
|
||||||
<td width="100%">
|
|
||||||
|
|
||||||
<h1 align="center"><font color="#ffffff">Mailing List Problems</font></h1>
|
|
||||||
</td>
|
|
||||||
</tr>
|
|
||||||
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
<h2 align="left">Shorewall.net is currently experiencing mail delivery problems
|
|
||||||
to at least one address in each of the following domains:</h2>
|
|
||||||
|
|
||||||
<blockquote>
|
|
||||||
<div align="left">
|
|
||||||
<pre>2020ca - delivery to this domain has been disabled (cause unknown)<br>arosy.de - delivery to this domain has been disabled (Relay access denied)<br>arundel.homelinux.org - delivery to this domain has been disabled (connection timed out, connection refused)<br>asurfer.com - (Mailbox full)<br>bol.com.br - delivery to this domain has been disabled (Mailbox Full)<br>cuscominc.com - delivery to this domain has been disabled (bouncing mail from all sources with "Mail rejected because the server you are sending to is misconfigured").<br>cvnet.psi.br - (DNS configuration error -- MX is cvn-srv1.cvnet.psi.br.cvnet.psi.br)<br>datakota.com - (DNS Timeouts)<br>excite.com - delivery to this domain has been disabled (cause unknown)<br>epacificglobal.com - delivery to this domain has been disabled (no MX record for domain)<br>freefish.dyndns.org - delivery to this domain has been disabled (Name Server Problem -- Host not found)<br>gmx.net - delivery to this domain has been disabled (cause unknown)<br>hotmail.com - delivery to this domain has been disabled (Mailbox over quota)<br>intercom.net - delivery to this domain has been disabled (cause unknown)<br>nitialcs.com - delivery to this domain has been disabled (cause unknown)<br>intelligents.2y.net - delivery to this domain has been disabled (Name Service Problem -- Host not Found).<br>khp-inc.com - delivery to this domain has been disabled (anti-virus problems)<br>kieninger.de - delivery to this domain has been disabled (relaying to <xxxxx@kieninger.de> prohibited by administrator)<br>lariera.com - delivery to this domain has been disabled (Unknown User)<br>mfocus.com.my - delivery to this domain has been disabled (MTA at mailx.mfocus.com.my not delivering and not giving a reason)<br>navair.navy.mil - delivery to this domain has been disabled (A restriction in the system prevented delivery of the message)<br>opermail.net - delivery to this domain has been disabled (cause unknown)<br>penquindevelopment.com - delivery to this domain has been disabled (connection timed out)<br>scip-online.de - delivery to this domain has been disabled (cause unknown)<br>spctnet.com - connection timed out - delivery to this domain has been disabled<br>telusplanet.net - delivery to this domain has been disabled (cause unknown)<br>the-techy.com - delivery to this domain has been disabled (clueless administrator - continuous DNS problems) <br>yahoo.com - delivery to this domain has been disabled (Mailbox over quota)</pre>
|
|
||||||
</div>
|
|
||||||
</blockquote>
|
|
||||||
|
|
||||||
<p align="left"><font size="2">Last updated 12/17/2002 02:51 GMT - <a
|
|
||||||
href="support.htm">Tom Eastep</a></font></p>
|
|
||||||
|
|
||||||
<p align="left"><a href="copyright.htm"> <font
|
|
||||||
size="2">Copyright</font> © <font size="2">2002 Thomas M. Eastep.</font></a></p>
|
|
||||||
|
|
||||||
<p align="left"> </p>
|
|
||||||
<br>
|
|
||||||
</body>
|
|
||||||
</html>
|
|
Loading…
Reference in New Issue
Block a user