Package: shorewall
Version: 2.4.1-2
Severity: normal
Hi,
On upgrade, shorewall asks the scary looking question:
"Did you check your configuration and do you want to restart
Shorewall right now?"
Followed by:
======================================================================
This is a major release of Shorewall that introduces some changes in
the configuration files. You have to check carefully your
configuration before restarting your firewall to avoid failures and
network blackout. The changes are listed in
/usr/share/doc/shorewall/releasenotes.txt.gz.
======================================================================
Except, of course, they are not yet: the file there is the old
file, since the package has not been unpacked. If the user is not
paying attention, they can read the file, check their configuration
find that is is fine, upgrade, and then procxeed to have holes in the
firewall or blackouts.
There is no information yet as to what changes are going to take
place, and thus this question *MUS* be asked in the postinst, and
_NOT_ in the .config.
I have left the severity at normal, feel free to upgrade severity
to important.
manoj
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12.2-skas3-v9-pre4
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages shorewall depends on:
ii debconf 1.4.52 Debian configuration management sy
ii iproute 20041019-3 Professional tools to control the
ii iptables 1.3.1-2 Linux kernel 2.4+ iptables adminis
Versions of packages shorewall recommends:
ii wget 1.10-3+1.10.1beta1 retrieves files from the web
-- debconf information:
* shorewall/upgrade_20_22: true
shorewall/warnrfc1918:
shorewall/dont_restart:
* shorewall/upgrade_14_20: true
shorewall/upgrade_to_14:
shorewall/major_release:
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
