forked from extern/shorewall_code
48719a6621
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@182 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
210 lines
11 KiB
HTML
210 lines
11 KiB
HTML
<html>
|
||
|
||
<head>
|
||
<meta http-equiv="Content-Language" content="en-us">
|
||
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
|
||
<meta name="GENERATOR" content="Microsoft FrontPage 5.0">
|
||
<meta name="ProgId" content="FrontPage.Editor.Document">
|
||
<title>Shorewall Errata for Version 1</title>
|
||
<meta name="Microsoft Theme" content="radial 011, default">
|
||
</head>
|
||
|
||
<body background="_themes/radial/radbkgnd.gif" bgcolor="#FFFFFF" text="#000000" link="#6666FF" vlink="#993333" alink="#66CCCC"><!--mstheme--><font face="arial, Arial, Helvetica">
|
||
|
||
<h1 align="center"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666">Shorewall Errata for Version 1.1<!--mstheme--></font></h1>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666"><font color="#660066"><u>To those of you who downloaded the 1.1.13 updated firewall script prior
|
||
to Sept 20, 2001:</u></font><!--mstheme--></font></h3>
|
||
|
||
<blockquote>
|
||
|
||
<p align="Left">Prior
|
||
to 20:00 20 Sept 2001 GMT, the link under 1.1.13 pointed to a broken version
|
||
of the firewall script. This has now been corrected. I apologize for any confusion
|
||
this may have caused.</p>
|
||
</blockquote>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666">Version 1.1.18<!--mstheme--></font></h3>
|
||
|
||
<blockquote>
|
||
|
||
<p align="Left">In the original .lrp, /etc/init.d/shorewall was not
|
||
secured for execute access. I have replaced the incorrect .lrp
|
||
(shorwall-1.1.18.lrp) with a corrected one (shorwall-1.1.18a.lrp).</p>
|
||
|
||
</blockquote>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666"><font color="#660066">
|
||
Version 1.1.17</font><!--mstheme--></font></h3>
|
||
|
||
<blockquote>
|
||
|
||
<p align="Left">In
|
||
shorewall.conf, ADD_IP_ALIASES was incorrectly spelled
|
||
IP_ADD_ALIASAES. There is a corrected version of the file <a href="ftp://ftp.shorewall.net/pub/shorewall/errata/1.1.17/shorewall.conf">here.</a></p>
|
||
|
||
<p align="Left">This
|
||
problem is also corrected in version 1.1.18.</p>
|
||
</blockquote>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666"><font color="#660066">
|
||
Version 1.1.16</font><!--mstheme--></font></h3>
|
||
|
||
<blockquote>
|
||
<p align="Left">
|
||
The ADD_IP_ALIASES variable added in 1.1.16 was incorrectly spelled IP_ADD_ALIASES
|
||
in the firewall script. To correct this problem, install the <a href="ftp://ftp.shorewall.net/pub/shorewall/errata/1.1.16/firewall">
|
||
corrected firewall script</a>
|
||
in the location pointed to by the symbolic link /etc/shorewall/firewall.</p>
|
||
|
||
<p align="Left">
|
||
This problem is also corrected in version 1.1.17.</p>
|
||
</blockquote>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666"><font color="#660066">
|
||
Version 1.1.14-1.1.15</font><!--mstheme--></font></h3>
|
||
|
||
<blockquote>
|
||
<p align="Left">
|
||
There are no corrections for these versions.</p>
|
||
</blockquote>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666"><font color="#660066">
|
||
Version 1.1.13</font><!--mstheme--></font></h3>
|
||
|
||
<blockquote>
|
||
<p align="Left">
|
||
The firewall fails to start if a rule with the following format is given:</p>
|
||
|
||
<p align="Left">
|
||
<disposition><EFBFBD><EFBFBD><EFBFBD> z1:www.xxx.yyy.zzz<7A><7A><EFBFBD> z2<7A><32><EFBFBD> proto<74><6F><EFBFBD> p1,p2,p3</p>
|
||
|
||
<p align="Left">
|
||
To correct this problem, install <a href="ftp://ftp.shorewall.net/pub/shorewall/errata/1.1.13/firewall">
|
||
this corrected firewall script</a>
|
||
in the location pointed to by the symbolic link /etc/shorewall/firewall.<2E></p>
|
||
</blockquote>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666"><font color="#660066">
|
||
Version 1.1.12</font><!--mstheme--></font></h3>
|
||
|
||
<blockquote>
|
||
<p align="Left">
|
||
The LRP version of Shorewall 1.1.12 has the incorrect /etc/shorewall/functions
|
||
file. This incorrect file results in many error messages of the form:</p>
|
||
|
||
<blockquote>
|
||
<p align="Left">
|
||
separate_list: not found</p>
|
||
</blockquote>
|
||
|
||
<p align="Left"><a href="ftp://ftp.shorewall.net/pub/shorewall/errata/1.1.12/functions">
|
||
The correct file may be obtained here</a>
|
||
. This problem is also corrected in version 1.1.13.</p>
|
||
</blockquote>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666"><font color="#660066">
|
||
Version 1.1.11</font><!--mstheme--></font></h3>
|
||
|
||
<blockquote>
|
||
<p align="Left">
|
||
There are no known problems with this version.</p>
|
||
</blockquote>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666"><font color="#660066">
|
||
Version 1.1.10</font><!--mstheme--></font></h3>
|
||
|
||
<blockquote>
|
||
<p align="Left">
|
||
If the following conditions were met:<br>
|
||
</p>
|
||
|
||
<ol>
|
||
|
||
<li>
|
||
<p align="Left">
|
||
A LAN segment attached to the firewall was served by a DHCP server
|
||
running on the firewall.</p>
|
||
</li>
|
||
|
||
<li>
|
||
<p align="Left">
|
||
There were entries in /etc/shorewall/hosts that referred to the
|
||
interface to that LAN segment.</p>
|
||
</li>
|
||
|
||
</ol>
|
||
|
||
<p align="Left">
|
||
then up until now it has been necessary to include entries for 0.0.0.0
|
||
and 255.255.255.255 for that interface in /etc/shorewall/hosts. <a href="ftp://ftp.shorewall.net/pub/shorewall/errata/1.1.10/firewall">
|
||
This version of the firewall script</a>
|
||
makes those additions unnecessary provided that you simply include
|
||
"dhcp" in the options for the interface in /etc/shorewall/interfaces.
|
||
Install the script into the location pointed to by the symbolic link
|
||
/etc/shorewall/firewall.</p>
|
||
|
||
<p align="Left">
|
||
This problem has also been corrected in version 1.1.11.</p>
|
||
</blockquote>
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666"><font color="#660066">
|
||
Version 1.1.9</font><!--mstheme--></font></h3>
|
||
|
||
<!--mstheme--></font><!--msthemelist--><table border="0" cellpadding="0" cellspacing="0" width="100%">
|
||
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="_themes/radial/aradbul1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="arial, Arial, Helvetica">The shorewall "hits" command lists extraneous service names in the final
|
||
report. <a href="ftp://ftp.shorewall.net/pub/shorewall/errata/1.1.9/shorewall">
|
||
This version of the shorewall script</a>
|
||
corrects this problem.<br>
|
||
|
||
|
||
<!--mstheme--></font><!--msthemelist--></td></tr>
|
||
<!--msthemelist--></table><!--mstheme--><font face="arial, Arial, Helvetica">
|
||
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666">Version 1.1.8<!--mstheme--></font></h3>
|
||
|
||
<!--mstheme--></font><!--msthemelist--><table border="0" cellpadding="0" cellspacing="0" width="100%">
|
||
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="_themes/radial/aradbul1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="arial, Arial, Helvetica">Under some circumstances, the "dhcp" option on an interface triggers
|
||
a bug in the firewall script that results in a "chain already exists"
|
||
error. <a href="ftp://ftp.shorewall.net/pub/shorewall/errata/1.1.8/firewall">
|
||
This version of the firewall script</a>
|
||
corrects this problem. Install it into the location pointed to by
|
||
the symbolic link /etc/shorewall/firewall.<br>
|
||
<br>
|
||
This problem is also corrected in version 1.1.9.<br>
|
||
|
||
|
||
<!--mstheme--></font><!--msthemelist--></td></tr>
|
||
<!--msthemelist--></table><!--mstheme--><font face="arial, Arial, Helvetica">
|
||
|
||
|
||
<h3 align="Left"><!--mstheme--><font face="times new roman, Times New Roman, Times" color="#666666">Version 1.1.7<!--mstheme--></font></h3>
|
||
|
||
<!--mstheme--></font><!--msthemelist--><table border="0" cellpadding="0" cellspacing="0" width="100%">
|
||
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="_themes/radial/aradbul1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="arial, Arial, Helvetica">If the /etc/shorewall/rules template from version 1.1.7 is used, a warning
|
||
message appears during firewall startup:<br>
|
||
<br>
|
||
<20><><EFBFBD> Warning: Invalid Target - rule "@ icmp-unreachable packet."
|
||
ignored<br>
|
||
<br>
|
||
This warning may be eliminated by replacing the "@" in column 1 of
|
||
line 17 with "#"<!--mstheme--></font><!--msthemelist--></td></tr>
|
||
<!--msthemelist--></table><!--mstheme--><font face="arial, Arial, Helvetica">
|
||
|
||
<blockquote>
|
||
<p align="Left">
|
||
This problem is also corrected in version 1.1.8</p>
|
||
</blockquote>
|
||
|
||
<p align="left"><font size="2">
|
||
Last updated 12/21/2001 - </font><font size="2">
|
||
<a href="support.htm">Tom Eastep</a></font>
|
||
</p>
|
||
|
||
<p align="left"><font face="Trebuchet MS"><a href="copyright.htm">
|
||
<font size="2">Copyright</font> <20> <font size="2">2001, 2002 Thomas M. Eastep.</font></a></font></p>
|
||
|
||
<!--mstheme--></font></body>
|
||
|
||
</html> |