Beta 1 prep

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8492 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-05-04 00:18:47 +00:00
parent 4d9473e8ca
commit f1567e6e3d
39 changed files with 72 additions and 81 deletions

View File

@ -1,4 +1,4 @@
# Shorewall Packet Filtering Firewall Export Directory Makefile - V4.1 # Shorewall Packet Filtering Firewall Export Directory Makefile - V4.2
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1 +1 @@
This is the Shorewall-common Development 4.1 branch of SVN. This is the Shorewall-common Development 4.2 branch of SVN.

View File

@ -1,3 +1,6 @@
Changes in 4.1.9
Changes in 4.1.8 Changes in 4.1.8
1) Fix some parsing issues with absurd configurations. 1) Fix some parsing issues with absurd configurations.

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.1 # The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.2
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,7 +1,7 @@
#!/bin/sh #!/bin/sh
RCDLINKS="2,S41 3,S41 6,K41" RCDLINKS="2,S41 3,S41 6,K41"
# #
# The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.1 # The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.2
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.base # Shorewall 4.2 -- /usr/share/shorewall/lib.base
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.cli. # Shorewall 4.2 -- /usr/share/shorewall/lib.cli.
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.config # Shorewall 4.2 -- /usr/share/shorewall/lib.config
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.dynamiczones # Shorewall 4.2 -- /usr/share/shorewall/lib.dynamiczones
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,7 +1,7 @@
Shorewall 4.1 Patch Release 8. Shorewall 4.2.0 Beta 1.
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
R E L E A S E 4 . 1 H I G H L I G H T S R E L E A S E 4 . 2 H I G H L I G H T S
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
1) Support is included for multiple internet providers through the same 1) Support is included for multiple internet providers through the same
ethernet interface. ethernet interface.
@ -27,7 +27,7 @@ Migration Issues.
originating on the firewall must be coded in the POSTROUTING table. originating on the firewall must be coded in the POSTROUTING table.
2) Previously, Shorewall did not range-check the value of the 2) Previously, Shorewall did not range-check the value of the
VERBOSITY option in shorewall.conf. Beginning with Shorewall 4.1: VERBOSITY option in shorewall.conf. Beginning with Shorewall 4.2:
a) A VERBOSITY setting outside the range -1 through 2 is rejected. a) A VERBOSITY setting outside the range -1 through 2 is rejected.
b) After the -v and -q options are applied, the resulting value is b) After the -v and -q options are applied, the resulting value is
@ -75,46 +75,15 @@ Migration Issues.
Note that there is a new 'Rfc1918' macro that acts on addresses Note that there is a new 'Rfc1918' macro that acts on addresses
reserved by RFC 1918. reserved by RFC 1918.
Problems Corrected in Shorewall 4.1.8 Problems Corrected in Shorewall 4.2.0 Beta 1
1) Changes to your configuration made by NULL_ROUTE_RFC1918=Yes are None.
now reversed during 'shorewall stop' and 'shoreawll restart'.
2) The init script on Debian now reads and utilizes the value of the Other Changes in Shoreall 4.2.0 Beta 1.
OPTIONS variable from /etc/default/shorewall[-lite]. Previously,
the value of that variable was not passed to the shorewall[-lite]
command.
3) With both Shorewall and Shorewall Lite, the 'start' and 'restart' New Features in Shorewall 4.2.
commands now support a '-p' option. This option causes the
Netfilter connection tracking table to be flushed (purged) as part
of the operation. The 'conntrack' utility must be installed to use
this option.
Other Changes in Shoreall 4.1.8. 1) Shorewall 4.2 contains support for multiple Internet providers
1) When using Shorewall-perl, the CEIL and RATE columns must now
contain arithmetic expressions consisting of:
a) Numeric digits (Hex numbers not allowed).
b) Parentheses.
c) The arithmetic operators +-* and /.
d) The word 'full'.
2) The installers (install.sh) now auto-detect a Cygwin environment
and install under the current user's ID if OWNER and GROUP are not
given.
3) The 'start' and 'restart' commands now support a '-p' (purge)
option which cause all entries to be removed from the Netfilter
conntrack table. In order to use this option, the 'conntrack'
utility must be installed on your system. Although it is generally
not installed by default, Most distributions have this utility in
their repositories.
New Features in Shorewall 4.1.
1) Shorewall 4.1 contains support for multiple Internet providers
through a single ethernet interface. Configuring two providers through a single ethernet interface. Configuring two providers
through a single interface differs from two providers through two through a single interface differs from two providers through two
interfaces in several ways. interfaces in several ways.
@ -133,7 +102,7 @@ New Features in Shorewall 4.1.
d) This feature requires Realm Match support in your kernel and d) This feature requires Realm Match support in your kernel and
iptables. If you use a capabilities file, you need to regenerate iptables. If you use a capabilities file, you need to regenerate
the file with Shorewall 4.1 or Shorewall-lite 4.1. the file with Shorewall 4.2 or Shorewall-lite 4.2.
e) You must add route_rules entries for networks that are accessed e) You must add route_rules entries for networks that are accessed
through a particular provider. through a particular provider.
@ -218,7 +187,7 @@ New Features in Shorewall 4.1.
ACCEPT:NFLOG(1,0,1) vpn fw tcp ssh,time,631,8080 ACCEPT:NFLOG(1,0,1) vpn fw tcp ssh,time,631,8080
5) Shorewall-perl 4.1 implements an alternative syntax for macro 5) Shorewall-perl 4.2 implements an alternative syntax for macro
parameters and for the NFQUEUE queue number. Rather than following parameters and for the NFQUEUE queue number. Rather than following
the macro name (or NFQUEUE) with a slash ("/") and the parameter, the macro name (or NFQUEUE) with a slash ("/") and the parameter,
the parameter may be enclosed in parentheses. the parameter may be enclosed in parentheses.
@ -231,7 +200,7 @@ New Features in Shorewall 4.1.
The old syntax will still be accepted but will cease to be documented The old syntax will still be accepted but will cease to be documented
in some future Shorewall release. in some future Shorewall release.
6) Shorewall 4.1 contains enhanced operational logging capabilities 6) Shorewall 4.2 contains enhanced operational logging capabilities
through a set of related enhancements to Shorewall-common and through a set of related enhancements to Shorewall-common and
Shorewall-perl. The enhancements are not supported by Shorewall-perl. The enhancements are not supported by
Shorewall-shell nor are they supported by Shorewall-lite except Shorewall-shell nor are they supported by Shorewall-lite except
@ -330,7 +299,7 @@ New Features in Shorewall 4.1.
originating on the firewall must be coded in the POSTROUTING chain. originating on the firewall must be coded in the POSTROUTING chain.
8) Previously, Shorewall did not range-check the value of the 8) Previously, Shorewall did not range-check the value of the
VERBOSITY option in shorewall.conf. Beginning with Shorewall 4.1: VERBOSITY option in shorewall.conf. Beginning with Shorewall 4.2:
a) A VERBOSITY setting outside the range -1 through 2 is rejected. a) A VERBOSITY setting outside the range -1 through 2 is rejected.
b) After the -v and -q options are applied, the resulting value is b) After the -v and -q options are applied, the resulting value is
@ -506,7 +475,7 @@ New Features in Shorewall 4.1.
- complex zones with exclusions had their own 'input' and - complex zones with exclusions had their own 'input' and
'output' chains. 'output' chains.
Beginning with Shorewall-perl 4.1, all non-firewall zones will be Beginning with Shorewall-perl 4.2, all non-firewall zones will be
treated as 'complex'. This will have the effect of one additional treated as 'complex'. This will have the effect of one additional
filter chain per zone but in most cases, the average number of filter chain per zone but in most cases, the average number of
filter rules traversed by a connection request will be reduced. filter rules traversed by a connection request will be reduced.
@ -851,3 +820,22 @@ New Features in Shorewall 4.1.
Beginning with Shorewall 4.0.11 and 4.1.7, enabling of forwarding Beginning with Shorewall 4.0.11 and 4.1.7, enabling of forwarding
is deferred until after the rules are in place. is deferred until after the rules are in place.
36) When using Shorewall-perl, the CEIL and RATE columns must now
contain arithmetic expressions consisting of:
a) Numeric digits (Hex numbers not allowed).
b) Parentheses.
c) The arithmetic operators +-* and /.
d) The word 'full'.
37) The installers (install.sh) now auto-detect a Cygwin environment
and install under the current user's ID if OWNER and GROUP are not
given.
38) The 'start' and 'restart' commands now support a '-p' (purge)
option which cause all entries to be removed from the Netfilter
conntrack table. In order to use this option, the 'conntrack'
utility must be installed on your system. Although it is generally
not installed by default, Most distributions have this utility in
their repositories.

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall Packet Filtering Firewall Control Program - V4.1 # Shorewall Packet Filtering Firewall Control Program - V4.2
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall interface helper utility - V4.1 # Shorewall interface helper utility - V4.2
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,2 +1,2 @@
This is the Shorewall-perl development 4.1 branch of SVN. This is the Shorewall-perl development 4.2 branch of SVN.

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Accounting.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Accounting.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Actions.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Actions.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Chains.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Chains.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#! /usr/bin/perl -w #! /usr/bin/perl -w
# #
# The Shoreline Firewall4 (Shorewall-perl) Packet Filtering Firewall Compiler - V4.1 # The Shoreline Firewall4 (Shorewall-perl) Packet Filtering Firewall Compiler - V4.2
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Config.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Config.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/IPAddrs.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/IPAddrs.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Nat.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Nat.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Policy.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Policy.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall 4.1 -- /usr/share/shorewall-perl/Shorewall/Proc.pm # Shorewall 4.2 -- /usr/share/shorewall-perl/Shorewall/Proc.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Providers.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Providers.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Proxyarp.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Proxyarp.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Rules.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Rules.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Tc.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Tc.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Tunnels.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Tunnels.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,5 +1,5 @@
# #
# Shorewall-perl 4.1 -- /usr/share/shorewall-perl/Shorewall/Zones.pm # Shorewall-perl 4.2 -- /usr/share/shorewall-perl/Shorewall/Zones.pm
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#! /usr/bin/perl -w #! /usr/bin/perl -w
# #
# The Shoreline Firewall4 (Shorewall-perl) Packet Filtering Firewall Compiler - V4.1 # The Shoreline Firewall4 (Shorewall-perl) Packet Filtering Firewall Compiler - V4.2
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1 +1 @@
This is the Shorewall-shell Development 4.1 branch of SVN. This is the Shorewall-shell Development 4.2 branch of SVN.

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.accounting # Shorewall 4.2 -- /usr/share/shorewall/lib.accounting
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.actions # Shorewall 4.2 -- /usr/share/shorewall/lib.actions
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.tcrules # Shorewall 4.2 -- /usr/share/shorewall/lib.tcrules
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.nat # Shorewall 4.2 -- /usr/share/shorewall/lib.nat
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.providers # Shorewall 4.2 -- /usr/share/shorewall/lib.providers
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.tc # Shorewall 4.2 -- /usr/share/shorewall/lib.tc
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.tcrules # Shorewall 4.2 -- /usr/share/shorewall/lib.tcrules
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Shorewall 4.1 -- /usr/share/shorewall/lib.tunnels # Shorewall 4.2 -- /usr/share/shorewall/lib.tunnels
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #

View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
# #
# Generated by the Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.1 # Generated by the Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.2
# #
# This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt]
# #