forked from extern/shorewall_code
Fix longstanding Proxy ARP/IPSEC bug
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1215 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
5f554b61dd
commit
f37f1d4243
@ -13,3 +13,5 @@ Changes since 2.0.0
|
|||||||
6) Fix another <zone>_frwd problem.
|
6) Fix another <zone>_frwd problem.
|
||||||
|
|
||||||
7) Add -x option to /sbin/shorewall.
|
7) Add -x option to /sbin/shorewall.
|
||||||
|
|
||||||
|
8) Implement Sean Mathews's fix fix Proxy ARP and IPSEC.
|
||||||
|
@ -1511,7 +1511,7 @@ setup_proxy_arp() {
|
|||||||
[ -n "$persistent" ] && haveroute=yes
|
[ -n "$persistent" ] && haveroute=yes
|
||||||
fi
|
fi
|
||||||
|
|
||||||
run_arp -Ds $address $external pub
|
run_arp -i $external -Ds $address $external pub
|
||||||
|
|
||||||
echo 1 > /proc/sys/net/ipv4/conf/$interface/proxy_arp
|
echo 1 > /proc/sys/net/ipv4/conf/$interface/proxy_arp
|
||||||
echo 0 > /proc/sys/net/ipv4/conf/$external/proxy_arp
|
echo 0 > /proc/sys/net/ipv4/conf/$external/proxy_arp
|
||||||
|
@ -10,6 +10,9 @@ Problems Corrected since 2.0.0
|
|||||||
/etc/shorewall/hosts, superfluous rules are generated in the
|
/etc/shorewall/hosts, superfluous rules are generated in the
|
||||||
<zone>_frwd chain.
|
<zone>_frwd chain.
|
||||||
|
|
||||||
|
3) Thanks to Sean Mathews, a long-standing problem with Proxy ARP and
|
||||||
|
IPSEC has been corrected. Thanks Sean!!!
|
||||||
|
|
||||||
Problems Corrected since 2.0.1 Beta 1
|
Problems Corrected since 2.0.1 Beta 1
|
||||||
|
|
||||||
1) The BOGON_LOG_LEVEL variable is now included in shorewall.conf. It
|
1) The BOGON_LOG_LEVEL variable is now included in shorewall.conf. It
|
||||||
|
Loading…
Reference in New Issue
Block a user