Fix rules file; add 'initialized' script

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1316 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-05-07 19:57:33 +00:00
parent 60fbcd932f
commit e023c8b712
4 changed files with 12 additions and 4 deletions

View File

@ -49,3 +49,5 @@ Changes since 2.0.1
23) Apply Alex Wilms's patch for install.sh
24) Add ACCEPT+ and NONAT targets.
25) Added 'initialized' extension script.

View File

@ -4816,6 +4816,8 @@ add_common_rules() {
run_iptables -A reject -j REJECT
fi
run_user_exit initialized
#
# Process Black List
#

View File

@ -21,7 +21,8 @@ Problems Corrected since 2.0.1
Problems Corrected since 2.0.2 Beta 2
None.
1) A missing '#' in the rules file caused errors when processing the
file.
-----------------------------------------------------------------------
Issues when migrating from Shorewall 2.0.0 to Shorewall 2.0.1:
@ -218,5 +219,8 @@ New Features:
NONAT -- Exempts matching connections from subsequent DNAT[-]
and REDIRECT[-] rules.
12) A new extension script 'initialized' has been added. This script is invoked
at the same point as the 'common' script was previously and is useful for
users who mis-used that script under Shorewall 1.x (the script was intended
for adding rules to the 'common' chain but many users treated it as a script
for adding rules before Shorewall's).

View File

@ -30,7 +30,7 @@
# DNAT[-] or REDIRECT[-] rules
# NONAT -- Excludes the connection from any
# subsequent DNAT[-] or REDIRECT[-]
rules but doesn't generate a rule
# rules but doesn't generate a rule
# to accept the traffic.
# DROP -- ignore the request
# REJECT -- disallow the request and return an