forked from extern/shorewall_code
Fix rules file; add 'initialized' script
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1316 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
60fbcd932f
commit
e023c8b712
@ -49,3 +49,5 @@ Changes since 2.0.1
|
||||
23) Apply Alex Wilms's patch for install.sh
|
||||
|
||||
24) Add ACCEPT+ and NONAT targets.
|
||||
|
||||
25) Added 'initialized' extension script.
|
@ -4816,6 +4816,8 @@ add_common_rules() {
|
||||
run_iptables -A reject -j REJECT
|
||||
fi
|
||||
|
||||
run_user_exit initialized
|
||||
|
||||
#
|
||||
# Process Black List
|
||||
#
|
||||
|
@ -21,7 +21,8 @@ Problems Corrected since 2.0.1
|
||||
|
||||
Problems Corrected since 2.0.2 Beta 2
|
||||
|
||||
None.
|
||||
1) A missing '#' in the rules file caused errors when processing the
|
||||
file.
|
||||
|
||||
-----------------------------------------------------------------------
|
||||
Issues when migrating from Shorewall 2.0.0 to Shorewall 2.0.1:
|
||||
@ -218,5 +219,8 @@ New Features:
|
||||
NONAT -- Exempts matching connections from subsequent DNAT[-]
|
||||
and REDIRECT[-] rules.
|
||||
|
||||
|
||||
|
||||
12) A new extension script 'initialized' has been added. This script is invoked
|
||||
at the same point as the 'common' script was previously and is useful for
|
||||
users who mis-used that script under Shorewall 1.x (the script was intended
|
||||
for adding rules to the 'common' chain but many users treated it as a script
|
||||
for adding rules before Shorewall's).
|
@ -30,7 +30,7 @@
|
||||
# DNAT[-] or REDIRECT[-] rules
|
||||
# NONAT -- Excludes the connection from any
|
||||
# subsequent DNAT[-] or REDIRECT[-]
|
||||
rules but doesn't generate a rule
|
||||
# rules but doesn't generate a rule
|
||||
# to accept the traffic.
|
||||
# DROP -- ignore the request
|
||||
# REJECT -- disallow the request and return an
|
||||
|
Loading…
Reference in New Issue
Block a user