In this release:

1) Shell variables may now be used to parameterize your firewall rules. 
A new file /etc/shorewall/params is provided for setting shell variable 
values.

Example:

/etc/shorewall/params:

        NET_IF=eth0
        NET_BCAST=130.252.100.255
        NET_OPTIONS=noping,norfc1918

/etc/shorewall/interfaces:

        net     $NET_IF $NET_BCAST      $NET_OPTIONS

The result will be the same as if the record had been written

        net     eth0    130.252.100.255 noping,norfc1918

2) The second column in the /etc/shorewall/hosts file can now contain a 
comma-separated list.

Example:

        sea     eth2:130.252.100.0/24,155.186.235.0/24  routestopped

This is equivalent to the following two entries:

        sea     eth2:130.252.100.0/24   routestopped
        sea     eth2:155.186.235.0/24   routestopped

3) Handling of multiple-zone interfaces has been improved. See the 
documentation for the /etc/shorewall/interfaces file.


-Tom
-- 
Tom Eastep          \  [EMAIL PROTECTED]
ICQ: #60745924       \  http://seattlefirewall.dyndns.org
AIM: tmeastep         \__________________________________
Shoreline, Washington

_______________________________________________
Leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to