diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt index 2cf22c9d0..cd1a09949 100644 --- a/Shorewall/changelog.txt +++ b/Shorewall/changelog.txt @@ -8,6 +8,8 @@ Changes in Shorewall 4.4.6 4) Allow both <...> and [...] for IPv6 Addresses. +5) Port mark geometry change from 4.5. + Changes in Shorewall 4.4.5 1) Fix 15-port limit removal change. diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index a59a2bed3..99d84ab87 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -169,6 +169,11 @@ Shorewall 4.4.6 now, if the zone has :0.0.0.0/0 (even with exclusions), then it may have no additional members in /etc/shorewall/hosts. +13) Prior versions of Shorewall applied PREROUTING marking rules to all + packets from 'tracked' provider interfaces when + TC_EXPERT=No. Beginning with Shorewall 4.4.6, packets from these + interfaces will only have those rules applied when TC_EXPERT=Yes. + ---------------------------------------------------------------------------- P R O B L E M S C O R R E C T E D I N 4 . 4 . 6 ---------------------------------------------------------------------------- @@ -182,6 +187,11 @@ Shorewall 4.4.6 verifying the existence of the correct ipset utility before using it to save the contents of the sets. +2) Prior versions of Shorewall incorrectly applied PREROUTING marking + rules to all packets from 'tracked' provider interfaces when + TC_EXPERT=No. Beginning with Shorewall 4.4.6, packets from these + interfaces will only have those rules applied when TC_EXPERT=Yes. + ---------------------------------------------------------------------------- K N O W N P R O B L E M S R E M A I N I N G ----------------------------------------------------------------------------