forked from extern/shorewall_code
e70a63f267
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@573 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
34 lines
1.3 KiB
Plaintext
34 lines
1.3 KiB
Plaintext
This is a minor release of Shorewall.
|
|
|
|
Problems Corrected:
|
|
|
|
New Features:
|
|
|
|
1) A REDIRECT- rule target has been added. This target behaves for
|
|
REDIRECT in the same was as DNAT- does for DNAT in that the
|
|
Netfilter nat table REDIRECT rule is added but not the companion
|
|
filter table ACCEPT rule.
|
|
|
|
2) The LOGMARKER variable has been renamed LOGFORMAT and has been
|
|
changed to a 'printf' formatting template which accepts three
|
|
arguments (the chain name, logging rule number (optional) and the
|
|
disposition). The logging rule number is included if the LOGFORMAT
|
|
value contains '%d'. For example, to use LOGFORMAT with fireparse,
|
|
set it as:
|
|
|
|
LOGFORMAT="fp=%s:%d a=%s "
|
|
|
|
|
|
CAUTION: /sbin/shorewall uses the leading part of the LOGFORMAT
|
|
string (up to but not including the first '%') to find log messages
|
|
in the 'show log', 'status' and 'hits' commands. This part should
|
|
not be omitted (the LOGFORMAT should not begin with "%") and the
|
|
leading part should be sufficiently unique for /sbin/shorewall to
|
|
identify Shorewall messages.
|
|
|
|
3) When logging is specified on a DNAT[-] or REDIRECT[-] rule, the
|
|
logging now takes place in the nat table rather than in the filter
|
|
table. This way, only those connections that actually undergo DNAT
|
|
or redirection will be logged.
|
|
|