forked from extern/shorewall_code
4e650037f4
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1425 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
46 lines
1.1 KiB
Plaintext
46 lines
1.1 KiB
Plaintext
Changes since 1.4.9
|
|
|
|
1) Implement destination list in masq file.
|
|
|
|
2) Appled Frédéric LESPEZ's patch for packet marking by user/group id.
|
|
|
|
3) Correct column headings in action.template
|
|
|
|
4) Handle IPV6 addresses correctly with ADD_IP_ALIASES=Yes or
|
|
ADD_SNAT_ALIASES=Yes.
|
|
|
|
5) Implement "detectnets" option.
|
|
|
|
6) Correct the CONTINUE target and fix a couple of bugs in rate
|
|
limiting (with an assist from Steven Jan Springl).
|
|
|
|
7) Silently drop smurfs and broadcasts in the 'reject' chain.
|
|
|
|
8) Add multicast to 'detectnets' zones.
|
|
|
|
9) Don't add broadcasts to /0 groups.
|
|
|
|
10) Fix "-" in PROTO column of an action file.
|
|
|
|
11) Fix the enhancement in 1) above to avoid startup errors.
|
|
|
|
12) Allow maclist with Atheros cards
|
|
|
|
13) Fix masq file problem with exclusion in the source column.
|
|
|
|
14) Fix silly tcrules file problem.
|
|
|
|
15) Fix multiple excluded zones in DNAT/REDIRECT rules.
|
|
|
|
16) Correct reporting of POLICY rules.
|
|
|
|
17) Implement Sean Mathews's fix for Proxy ARP/IPSEC.
|
|
|
|
18) Update rfc1918.
|
|
|
|
19) Fix local exploit vulnerability.
|
|
|
|
20) Hack security fix so that it works under Slackware.
|
|
|
|
21) Fix mktempfile() where there is no mktemp utility.
|