Hello community,
here is the log from the commit of package shorewall for openSUSE:Factory
checked in at 2015-04-15 16:24:53
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/shorewall (Old)
and /work/SRC/openSUSE:Factory/.shorewall.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "shorewall"
Changes:
--------
--- /work/SRC/openSUSE:Factory/shorewall/shorewall.changes 2015-04-05
02:04:29.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.shorewall.new/shorewall.changes 2015-04-15
16:24:55.000000000 +0200
@@ -1,0 +2,15 @@
+Tue Apr 14 22:06:55 UTC 2015 - tog...@opensuse.org
+
+- Update to version 4.6.8.1 For more details see changnlog.txt and
+ releasenotes.txt
+
+ * Previously, when servicd was installed and there were one or
+ more required interfaces, the firewall would fail to start at
+ boot.This has been corrected by Tuomo Soini.
+
+ * Some startup logic in lib.cli has been deleted. A bug prevented
+ the code from working as intended, so there is no loss of
+ functionality resulting from deletion of the code.
+
+
+-------------------------------------------------------------------
Old:
----
shorewall-4.6.8.tar.bz2
shorewall-core-4.6.8.tar.bz2
shorewall-docs-html-4.6.8.tar.bz2
shorewall-init-4.6.8.tar.bz2
shorewall-lite-4.6.8.tar.bz2
shorewall6-4.6.8.tar.bz2
shorewall6-lite-4.6.8.tar.bz2
New:
----
shorewall-4.6.8.1.tar.bz2
shorewall-core-4.6.8.1.tar.bz2
shorewall-docs-html-4.6.8.1.tar.bz2
shorewall-init-4.6.8.1.tar.bz2
shorewall-lite-4.6.8.1.tar.bz2
shorewall6-4.6.8.1.tar.bz2
shorewall6-lite-4.6.8.1.tar.bz2
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ shorewall.spec ++++++
--- /var/tmp/diff_new_pack.CfohR0/_old 2015-04-15 16:24:56.000000000 +0200
+++ /var/tmp/diff_new_pack.CfohR0/_new 2015-04-15 16:24:56.000000000 +0200
@@ -20,7 +20,7 @@
%define have_systemd 1
Name: shorewall
-Version: 4.6.8
+Version: 4.6.8.1
Release: 0
Summary: Shoreline Firewall is an iptables-based firewall for Linux
systems
License: GPL-2.0
++++++ shorewall-4.6.8.tar.bz2 -> shorewall-4.6.8.1.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/Perl/Shorewall/Config.pm
new/shorewall-4.6.8.1/Perl/Shorewall/Config.pm
--- old/shorewall-4.6.8/Perl/Shorewall/Config.pm 2015-04-02
22:27:47.000000000 +0200
+++ new/shorewall-4.6.8.1/Perl/Shorewall/Config.pm 2015-04-11
16:50:08.000000000 +0200
@@ -396,6 +396,7 @@
NEW_TOS_MATCH => 'New tos Match',
TARPIT_TARGET => 'TARPIT Target',
IFACE_MATCH => 'Iface Match',
+ TCPMSS_TARGET => 'TCPMSS Target',
AMANDA_HELPER => 'Amanda Helper',
FTP_HELPER => 'FTP Helper',
@@ -713,8 +714,8 @@
TC_SCRIPT => '',
EXPORT => 0,
KLUDGEFREE => '',
- VERSION => "4.6.8",
- CAPVERSION => 40606 ,
+ VERSION => "4.6.8.1",
+ CAPVERSION => 40609 ,
);
#
# From shorewall.conf file
@@ -983,6 +984,7 @@
REAP_OPTION => undef,
TARPIT_TARGET => undef,
IFACE_MATCH => undef,
+ TCPMSS_TARGET => undef,
AMANDA_HELPER => undef,
FTP_HELPER => undef,
@@ -4468,7 +4470,9 @@
qt1( "$iptables $iptablesw -A $sillyname -m iface --iface lo --loopback" );
}
-
+sub Tcpmss_Target() {
+ qt1( "$iptables $iptablesw -A $sillyname -p tcp --tcp-flags SYN,RST SYN -j
TCPMSS --clamp-mss-to-pmtu" );
+}
our %detect_capability =
( ACCOUNT_TARGET =>\&Account_Target,
@@ -4557,6 +4561,7 @@
STATISTIC_MATCH => \&Statistic_Match,
TARPIT_TARGET => \&Tarpit_Target,
TCPMSS_MATCH => \&Tcpmss_Match,
+ TCPMSS_TARGET => \&Tcpmss_Target,
TFTP_HELPER => \&TFTP_Helper,
TFTP0_HELPER => \&TFTP0_Helper,
TIME_MATCH => \&Time_Match,
@@ -4710,6 +4715,7 @@
$capabilities{NEW_TOS_MATCH} = detect_capability( 'NEW_TOS_MATCH' );
$capabilities{TARPIT_TARGET} = detect_capability( 'TARPIT_TARGET' );
$capabilities{IFACE_MATCH} = detect_capability( 'IFACE_MATCH' );
+ $capabilities{TCPMSS_TARGET} = detect_capability( 'TCPMSS_TARGET' );
unless ( have_capability 'CT_TARGET' ) {
$capabilities{HELPER_MATCH} = detect_capability 'HELPER_MATCH';
@@ -5608,8 +5614,9 @@
default_yes_no 'DETECT_DNAT_IPADDRS' , '';
default_yes_no 'CLEAR_TC' , $family == F_IPV4 ? 'Yes' :
'';
- if ( supplied $config{CLAMPMSS} ) {
- default_yes_no 'CLAMPMSS' , '' unless
$config{CLAMPMSS} =~ /^\d+$/;
+ if ( supplied( $val = $config{CLAMPMSS} ) ) {
+ default_yes_no 'CLAMPMSS' , '' unless $val =~ /^\d+$/;
+ require_capability 'TCPMSS_TARGET', "CLAMPMSS=$val", 's' if
$config{CLAMPMSS};
} else {
$config{CLAMPMSS} = '';
}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/Perl/Shorewall/Zones.pm
new/shorewall-4.6.8.1/Perl/Shorewall/Zones.pm
--- old/shorewall-4.6.8/Perl/Shorewall/Zones.pm 2015-04-02 22:27:47.000000000
+0200
+++ new/shorewall-4.6.8.1/Perl/Shorewall/Zones.pm 2015-04-11
16:50:08.000000000 +0200
@@ -465,6 +465,7 @@
} else {
fatal_error "Missing value for option \"$e\"" unless
defined $val;
fatal_error "Invalid value ($val) for option \"$e\"" unless
$val =~ /^($fmt)$/;
+ require_capability 'TCPMSS_TARGET', "mss=$val", 's' if $e eq
'mss';
}
my $key = $zonekey{$e};
@@ -1258,6 +1259,7 @@
fatal_error "The '$option' option requires a value" unless
defined $value;
my $numval = numeric_value $value;
fatal_error "Invalid value ($value) for option $option" unless
defined $numval && $numval <= $maxoptionvalue{$option};
+ require_capability 'TCPMSS_TARGET', "mss=$value", 's' if
$option eq 'mss';
$options{$option} = $numval;
$hostoptions{$option} = $numval if $hostopt;
} elsif ( $type == IPLIST_IF_OPTION ) {
@@ -2067,6 +2069,7 @@
$zoneref->{options}{in}{blacklist} = 1;
} elsif ( $option =~ /^mss=(\d+)$/ ) {
fatal_error "Invalid mss ($1)" unless $1 >= 500;
+ require_capability 'TCPMSS_TARGET', $option, 's';
$options{mss} = $1;
$zoneref->{options}{complex} = 1;
} elsif ( $validhostoptions{$option}) {
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/changelog.txt
new/shorewall-4.6.8.1/changelog.txt
--- old/shorewall-4.6.8/changelog.txt 2015-04-02 22:27:47.000000000 +0200
+++ new/shorewall-4.6.8.1/changelog.txt 2015-04-11 16:50:07.000000000 +0200
@@ -1,3 +1,10 @@
+Changes in 4.6.8.1
+
+1) Update release documents.
+
+2) Add 'wants=network-online.target' to service files so that the
+ firewall will start when there are required interfaces.
+
Changes in 4.6.8 Final
1) Update release documents.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/configure
new/shorewall-4.6.8.1/configure
--- old/shorewall-4.6.8/configure 2015-04-02 22:27:47.000000000 +0200
+++ new/shorewall-4.6.8.1/configure 2015-04-11 16:50:07.000000000 +0200
@@ -28,7 +28,7 @@
#
# Build updates this
#
-VERSION=4.6.8
+VERSION=4.6.8.1
case "$BASH_VERSION" in
[4-9].*)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/configure.pl
new/shorewall-4.6.8.1/configure.pl
--- old/shorewall-4.6.8/configure.pl 2015-04-02 22:27:47.000000000 +0200
+++ new/shorewall-4.6.8.1/configure.pl 2015-04-11 16:50:07.000000000 +0200
@@ -31,7 +31,7 @@
# Build updates this
#
use constant {
- VERSION => '4.6.8'
+ VERSION => '4.6.8.1'
};
my %params;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/install.sh
new/shorewall-4.6.8.1/install.sh
--- old/shorewall-4.6.8/install.sh 2015-04-02 22:27:47.000000000 +0200
+++ new/shorewall-4.6.8.1/install.sh 2015-04-11 16:50:07.000000000 +0200
@@ -22,7 +22,7 @@
# along with this program; if not, see <http://www.gnu.org/licenses/>.
#
-VERSION=4.6.8
+VERSION=4.6.8.1
#
# Change to the directory containing this script
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/known_problems.txt
new/shorewall-4.6.8.1/known_problems.txt
--- old/shorewall-4.6.8/known_problems.txt 2015-04-02 22:27:47.000000000
+0200
+++ new/shorewall-4.6.8.1/known_problems.txt 2015-04-11 16:50:07.000000000
+0200
@@ -1,2 +1,7 @@
1) On systems running Upstart, shorewall-init cannot reliably secure
the firewall before interfaces are brought up.
+
+2) When servicd is installed and there were one or more required
+ interfaces, the firewall may fail to start at boot.
+
+ Corrected in Shorewall 4.6.8.1.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-accounting.5
new/shorewall-4.6.8.1/manpages/shorewall-accounting.5
--- old/shorewall-4.6.8/manpages/shorewall-accounting.5 2015-04-02
22:27:50.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-accounting.5 2015-04-11
16:50:12.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-accounting
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-ACCOUNTIN" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-ACCOUNTIN" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-actions.5
new/shorewall-4.6.8.1/manpages/shorewall-actions.5
--- old/shorewall-4.6.8/manpages/shorewall-actions.5 2015-04-02
22:27:51.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-actions.5 2015-04-11
16:50:13.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-actions
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-ACTIONS" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-ACTIONS" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-arprules.5
new/shorewall-4.6.8.1/manpages/shorewall-arprules.5
--- old/shorewall-4.6.8/manpages/shorewall-arprules.5 2015-04-02
22:27:52.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-arprules.5 2015-04-11
16:50:15.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-arprules
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-ARPRULES" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-ARPRULES" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-blacklist.5
new/shorewall-4.6.8.1/manpages/shorewall-blacklist.5
--- old/shorewall-4.6.8/manpages/shorewall-blacklist.5 2015-04-02
22:27:54.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-blacklist.5 2015-04-11
16:50:16.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-blacklist
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-BLACKLIST" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-BLACKLIST" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-blrules.5
new/shorewall-4.6.8.1/manpages/shorewall-blrules.5
--- old/shorewall-4.6.8/manpages/shorewall-blrules.5 2015-04-02
22:27:55.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-blrules.5 2015-04-11
16:50:17.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-blrules
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-BLRULES" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-BLRULES" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-conntrack.5
new/shorewall-4.6.8.1/manpages/shorewall-conntrack.5
--- old/shorewall-4.6.8/manpages/shorewall-conntrack.5 2015-04-02
22:28:02.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-conntrack.5 2015-04-11
16:50:24.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall6-conntrack
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL6\-CONNTRAC" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL6\-CONNTRAC" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-ecn.5
new/shorewall-4.6.8.1/manpages/shorewall-ecn.5
--- old/shorewall-4.6.8/manpages/shorewall-ecn.5 2015-04-02
22:28:03.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-ecn.5 2015-04-11
16:50:25.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-ecn
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-ECN" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-ECN" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-exclusion.5
new/shorewall-4.6.8.1/manpages/shorewall-exclusion.5
--- old/shorewall-4.6.8/manpages/shorewall-exclusion.5 2015-04-02
22:28:04.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-exclusion.5 2015-04-11
16:50:26.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-exclusion
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-EXCLUSION" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-EXCLUSION" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-hosts.5
new/shorewall-4.6.8.1/manpages/shorewall-hosts.5
--- old/shorewall-4.6.8/manpages/shorewall-hosts.5 2015-04-02
22:28:06.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-hosts.5 2015-04-11
16:50:28.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-hosts
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-HOSTS" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-HOSTS" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-init.8
new/shorewall-4.6.8.1/manpages/shorewall-init.8
--- old/shorewall-4.6.8/manpages/shorewall-init.8 2015-04-02
22:28:07.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-init.8 2015-04-11
16:50:29.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-init
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Administrative Commands
.\" Source: Administrative Commands
.\" Language: English
.\"
-.TH "SHOREWALL\-INIT" "8" "04/02/2015" "Administrative Commands"
"Administrative Commands"
+.TH "SHOREWALL\-INIT" "8" "04/11/2015" "Administrative Commands"
"Administrative Commands"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-interfaces.5
new/shorewall-4.6.8.1/manpages/shorewall-interfaces.5
--- old/shorewall-4.6.8/manpages/shorewall-interfaces.5 2015-04-02
22:28:09.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-interfaces.5 2015-04-11
16:50:31.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-interfaces
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-INTERFACE" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-INTERFACE" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-ipsets.5
new/shorewall-4.6.8.1/manpages/shorewall-ipsets.5
--- old/shorewall-4.6.8/manpages/shorewall-ipsets.5 2015-04-02
22:28:10.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-ipsets.5 2015-04-11
16:50:32.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-ipsets
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-IPSETS" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-IPSETS" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-maclist.5
new/shorewall-4.6.8.1/manpages/shorewall-maclist.5
--- old/shorewall-4.6.8/manpages/shorewall-maclist.5 2015-04-02
22:28:11.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-maclist.5 2015-04-11
16:50:34.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-maclist
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-MACLIST" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-MACLIST" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-mangle.5
new/shorewall-4.6.8.1/manpages/shorewall-mangle.5
--- old/shorewall-4.6.8/manpages/shorewall-mangle.5 2015-04-02
22:28:13.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-mangle.5 2015-04-11
16:50:35.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-mangle
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-MANGLE" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-MANGLE" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-masq.5
new/shorewall-4.6.8.1/manpages/shorewall-masq.5
--- old/shorewall-4.6.8/manpages/shorewall-masq.5 2015-04-02
22:28:15.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-masq.5 2015-04-11
16:50:37.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-masq
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-MASQ" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-MASQ" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-modules.5
new/shorewall-4.6.8.1/manpages/shorewall-modules.5
--- old/shorewall-4.6.8/manpages/shorewall-modules.5 2015-04-02
22:28:16.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-modules.5 2015-04-11
16:50:38.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-modules
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-MODULES" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-MODULES" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-nat.5
new/shorewall-4.6.8.1/manpages/shorewall-nat.5
--- old/shorewall-4.6.8/manpages/shorewall-nat.5 2015-04-02
22:28:17.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-nat.5 2015-04-11
16:50:40.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-nat
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-NAT" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-NAT" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-nesting.5
new/shorewall-4.6.8.1/manpages/shorewall-nesting.5
--- old/shorewall-4.6.8/manpages/shorewall-nesting.5 2015-04-02
22:28:19.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-nesting.5 2015-04-11
16:50:41.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-nesting
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-NESTING" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-NESTING" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-netmap.5
new/shorewall-4.6.8.1/manpages/shorewall-netmap.5
--- old/shorewall-4.6.8/manpages/shorewall-netmap.5 2015-04-02
22:28:20.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-netmap.5 2015-04-11
16:50:42.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-netmap
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-NETMAP" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-NETMAP" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-params.5
new/shorewall-4.6.8.1/manpages/shorewall-params.5
--- old/shorewall-4.6.8/manpages/shorewall-params.5 2015-04-02
22:28:21.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-params.5 2015-04-11
16:50:44.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-params
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-PARAMS" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-PARAMS" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-policy.5
new/shorewall-4.6.8.1/manpages/shorewall-policy.5
--- old/shorewall-4.6.8/manpages/shorewall-policy.5 2015-04-02
22:28:23.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-policy.5 2015-04-11
16:50:45.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-policy
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-POLICY" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-POLICY" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-providers.5
new/shorewall-4.6.8.1/manpages/shorewall-providers.5
--- old/shorewall-4.6.8/manpages/shorewall-providers.5 2015-04-02
22:28:24.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-providers.5 2015-04-11
16:50:47.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-providers
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-PROVIDERS" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-PROVIDERS" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-proxyarp.5
new/shorewall-4.6.8.1/manpages/shorewall-proxyarp.5
--- old/shorewall-4.6.8/manpages/shorewall-proxyarp.5 2015-04-02
22:28:26.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-proxyarp.5 2015-04-11
16:50:48.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-proxyarp
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-PROXYARP" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-PROXYARP" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-routes.5
new/shorewall-4.6.8.1/manpages/shorewall-routes.5
--- old/shorewall-4.6.8/manpages/shorewall-routes.5 2015-04-02
22:28:28.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-routes.5 2015-04-11
16:50:51.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-routes
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-ROUTES" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-ROUTES" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-routestopped.5
new/shorewall-4.6.8.1/manpages/shorewall-routestopped.5
--- old/shorewall-4.6.8/manpages/shorewall-routestopped.5 2015-04-02
22:28:27.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-routestopped.5 2015-04-11
16:50:49.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-routestopped
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-ROUTESTOP" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-ROUTESTOP" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-rtrules.5
new/shorewall-4.6.8.1/manpages/shorewall-rtrules.5
--- old/shorewall-4.6.8/manpages/shorewall-rtrules.5 2015-04-02
22:28:30.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-rtrules.5 2015-04-11
16:50:52.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-rtrules
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-RTRULES" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-RTRULES" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-rules.5
new/shorewall-4.6.8.1/manpages/shorewall-rules.5
--- old/shorewall-4.6.8/manpages/shorewall-rules.5 2015-04-02
22:28:33.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-rules.5 2015-04-11
16:50:55.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-rules
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-RULES" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-RULES" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-secmarks.5
new/shorewall-4.6.8.1/manpages/shorewall-secmarks.5
--- old/shorewall-4.6.8/manpages/shorewall-secmarks.5 2015-04-02
22:28:34.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-secmarks.5 2015-04-11
16:50:56.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-secmarks
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-SECMARKS" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-SECMARKS" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-stoppedrules.5
new/shorewall-4.6.8.1/manpages/shorewall-stoppedrules.5
--- old/shorewall-4.6.8/manpages/shorewall-stoppedrules.5 2015-04-02
22:28:35.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-stoppedrules.5 2015-04-11
16:50:58.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-stoppedrules
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-STOPPEDRU" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-STOPPEDRU" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-tcclasses.5
new/shorewall-4.6.8.1/manpages/shorewall-tcclasses.5
--- old/shorewall-4.6.8/manpages/shorewall-tcclasses.5 2015-04-02
22:28:37.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-tcclasses.5 2015-04-11
16:50:59.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-tcclasses
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-TCCLASSES" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-TCCLASSES" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-tcdevices.5
new/shorewall-4.6.8.1/manpages/shorewall-tcdevices.5
--- old/shorewall-4.6.8/manpages/shorewall-tcdevices.5 2015-04-02
22:28:38.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-tcdevices.5 2015-04-11
16:51:00.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-tcdevices
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-TCDEVICES" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-TCDEVICES" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-tcfilters.5
new/shorewall-4.6.8.1/manpages/shorewall-tcfilters.5
--- old/shorewall-4.6.8/manpages/shorewall-tcfilters.5 2015-04-02
22:28:40.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-tcfilters.5 2015-04-11
16:51:02.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-tcfilters
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-TCFILTERS" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-TCFILTERS" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-tcinterfaces.5
new/shorewall-4.6.8.1/manpages/shorewall-tcinterfaces.5
--- old/shorewall-4.6.8/manpages/shorewall-tcinterfaces.5 2015-04-02
22:28:41.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-tcinterfaces.5 2015-04-11
16:51:03.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-tcinterfaces
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-TCINTERFA" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-TCINTERFA" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-tcpri.5
new/shorewall-4.6.8.1/manpages/shorewall-tcpri.5
--- old/shorewall-4.6.8/manpages/shorewall-tcpri.5 2015-04-02
22:28:42.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-tcpri.5 2015-04-11
16:51:05.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-tcpri
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-TCPRI" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-TCPRI" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-tcrules.5
new/shorewall-4.6.8.1/manpages/shorewall-tcrules.5
--- old/shorewall-4.6.8/manpages/shorewall-tcrules.5 2015-04-02
22:28:44.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-tcrules.5 2015-04-11
16:51:06.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-mangle
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-MANGLE" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-MANGLE" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-tos.5
new/shorewall-4.6.8.1/manpages/shorewall-tos.5
--- old/shorewall-4.6.8/manpages/shorewall-tos.5 2015-04-02
22:28:46.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-tos.5 2015-04-11
16:51:08.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-tos
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-TOS" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-TOS" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-tunnels.5
new/shorewall-4.6.8.1/manpages/shorewall-tunnels.5
--- old/shorewall-4.6.8/manpages/shorewall-tunnels.5 2015-04-02
22:28:47.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-tunnels.5 2015-04-11
16:51:09.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-tunnels
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-TUNNELS" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-TUNNELS" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-vardir.5
new/shorewall-4.6.8.1/manpages/shorewall-vardir.5
--- old/shorewall-4.6.8/manpages/shorewall-vardir.5 2015-04-02
22:28:48.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-vardir.5 2015-04-11
16:51:10.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-vardir
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-VARDIR" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-VARDIR" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall-zones.5
new/shorewall-4.6.8.1/manpages/shorewall-zones.5
--- old/shorewall-4.6.8/manpages/shorewall-zones.5 2015-04-02
22:28:53.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall-zones.5 2015-04-11
16:51:15.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-zones
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-ZONES" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\-ZONES" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall.8
new/shorewall-4.6.8.1/manpages/shorewall.8
--- old/shorewall-4.6.8/manpages/shorewall.8 2015-04-02 22:28:52.000000000
+0200
+++ new/shorewall-4.6.8.1/manpages/shorewall.8 2015-04-11 16:51:14.000000000
+0200
@@ -2,12 +2,12 @@
.\" Title: shorewall
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Administrative Commands
.\" Source: Administrative Commands
.\" Language: English
.\"
-.TH "SHOREWALL" "8" "04/02/2015" "Administrative Commands" "Administrative
Commands"
+.TH "SHOREWALL" "8" "04/11/2015" "Administrative Commands" "Administrative
Commands"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/manpages/shorewall.conf.5
new/shorewall-4.6.8.1/manpages/shorewall.conf.5
--- old/shorewall-4.6.8/manpages/shorewall.conf.5 2015-04-02
22:28:00.000000000 +0200
+++ new/shorewall-4.6.8.1/manpages/shorewall.conf.5 2015-04-11
16:50:22.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall.conf
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\&.CONF" "5" "04/02/2015" "Configuration Files" "Configuration
Files"
+.TH "SHOREWALL\&.CONF" "5" "04/11/2015" "Configuration Files" "Configuration
Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/releasenotes.txt
new/shorewall-4.6.8.1/releasenotes.txt
--- old/shorewall-4.6.8/releasenotes.txt 2015-04-02 22:27:47.000000000
+0200
+++ new/shorewall-4.6.8.1/releasenotes.txt 2015-04-11 16:50:07.000000000
+0200
@@ -1,7 +1,7 @@
----------------------------------------------------------------------------
- S H O R E W A L L 4 . 6 . 8
+ S H O R E W A L L 4 . 6 . 8 . 1
------------------------------------
- A p r i l 0 4 , 2 0 1 5
+ A p r i l 1 1 , 2 0 1 5
----------------------------------------------------------------------------
I. PROBLEMS CORRECTED IN THIS RELEASE
@@ -14,6 +14,18 @@
I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
----------------------------------------------------------------------------
+4.6.8.1
+
+1) Previously, when servicd was installed and there were one or more
+ required interfaces, the firewall would fail to start at boot. This
+ has been corrected by Tuomo Soini.
+
+2) Some startup logic in lib.cli has been deleted. A bug prevented the
+ code from working as intended, so there is no loss of functionality
+ resulting from deletion of the code.
+
+4.6.8
+
1) This release includes defect repair from Shorewall 4.6.6.2 and
earlier releases.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/shorewall.service
new/shorewall-4.6.8.1/shorewall.service
--- old/shorewall-4.6.8/shorewall.service 2015-04-02 22:26:51.000000000
+0200
+++ new/shorewall-4.6.8.1/shorewall.service 2015-04-11 16:49:05.000000000
+0200
@@ -5,6 +5,7 @@
#
[Unit]
Description=Shorewall IPv4 firewall
+Wants=network-online.target
After=network-online.target
Conflicts=iptables.service firewalld.service
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/shorewall.service.214
new/shorewall-4.6.8.1/shorewall.service.214
--- old/shorewall-4.6.8/shorewall.service.214 2015-04-02 22:26:51.000000000
+0200
+++ new/shorewall-4.6.8.1/shorewall.service.214 2015-04-11 16:49:05.000000000
+0200
@@ -5,6 +5,7 @@
#
[Unit]
Description=Shorewall IPv4 firewall
+Wants=network-online.target
After=network-online.target
Conflicts=iptables.service firewalld.service
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/shorewall.spec
new/shorewall-4.6.8.1/shorewall.spec
--- old/shorewall-4.6.8/shorewall.spec 2015-04-02 22:27:47.000000000 +0200
+++ new/shorewall-4.6.8.1/shorewall.spec 2015-04-11 16:50:07.000000000
+0200
@@ -1,6 +1,6 @@
%define name shorewall
%define version 4.6.8
-%define release 0base
+%define release 1
Summary: Shoreline Firewall is an iptables-based firewall for Linux systems.
Name: %{name}
@@ -132,6 +132,8 @@
%doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples
%changelog
+* Sat Apr 11 2015 Tom Eastep t...@shorewall.net
+- Updated to 4.6.8-1
* Sun Mar 29 2015 Tom Eastep t...@shorewall.net
- Updated to 4.6.8-0base
* Tue Mar 24 2015 Tom Eastep t...@shorewall.net
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-4.6.8/uninstall.sh
new/shorewall-4.6.8.1/uninstall.sh
--- old/shorewall-4.6.8/uninstall.sh 2015-04-02 22:27:47.000000000 +0200
+++ new/shorewall-4.6.8.1/uninstall.sh 2015-04-11 16:50:07.000000000 +0200
@@ -26,7 +26,7 @@
# You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall
-VERSION=4.6.8
+VERSION=4.6.8.1
PRODUCT=shorewall
usage() # $1 = exit status
++++++ shorewall-core-4.6.8.tar.bz2 -> shorewall-core-4.6.8.1.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-core-4.6.8/changelog.txt
new/shorewall-core-4.6.8.1/changelog.txt
--- old/shorewall-core-4.6.8/changelog.txt 2015-04-02 22:27:47.000000000
+0200
+++ new/shorewall-core-4.6.8.1/changelog.txt 2015-04-11 16:50:07.000000000
+0200
@@ -1,3 +1,10 @@
+Changes in 4.6.8.1
+
+1) Update release documents.
+
+2) Add 'wants=network-online.target' to service files so that the
+ firewall will start when there are required interfaces.
+
Changes in 4.6.8 Final
1) Update release documents.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-core-4.6.8/configure
new/shorewall-core-4.6.8.1/configure
--- old/shorewall-core-4.6.8/configure 2015-04-02 22:27:47.000000000 +0200
+++ new/shorewall-core-4.6.8.1/configure 2015-04-11 16:50:07.000000000
+0200
@@ -28,7 +28,7 @@
#
# Build updates this
#
-VERSION=4.6.8
+VERSION=4.6.8.1
case "$BASH_VERSION" in
[4-9].*)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-core-4.6.8/configure.pl
new/shorewall-core-4.6.8.1/configure.pl
--- old/shorewall-core-4.6.8/configure.pl 2015-04-02 22:27:47.000000000
+0200
+++ new/shorewall-core-4.6.8.1/configure.pl 2015-04-11 16:50:07.000000000
+0200
@@ -31,7 +31,7 @@
# Build updates this
#
use constant {
- VERSION => '4.6.8'
+ VERSION => '4.6.8.1'
};
my %params;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-core-4.6.8/install.sh
new/shorewall-core-4.6.8.1/install.sh
--- old/shorewall-core-4.6.8/install.sh 2015-04-02 22:27:47.000000000 +0200
+++ new/shorewall-core-4.6.8.1/install.sh 2015-04-11 16:50:07.000000000
+0200
@@ -22,7 +22,7 @@
# along with this program; if not, see <http://www.gnu.org/licenses/>.
#
-VERSION=4.6.8
+VERSION=4.6.8.1
usage() # $1 = exit status
{
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-core-4.6.8/known_problems.txt
new/shorewall-core-4.6.8.1/known_problems.txt
--- old/shorewall-core-4.6.8/known_problems.txt 2015-04-02 22:27:47.000000000
+0200
+++ new/shorewall-core-4.6.8.1/known_problems.txt 2015-04-11
16:50:07.000000000 +0200
@@ -1,2 +1,7 @@
1) On systems running Upstart, shorewall-init cannot reliably secure
the firewall before interfaces are brought up.
+
+2) When servicd is installed and there were one or more required
+ interfaces, the firewall may fail to start at boot.
+
+ Corrected in Shorewall 4.6.8.1.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-core-4.6.8/lib.cli
new/shorewall-core-4.6.8.1/lib.cli
--- old/shorewall-core-4.6.8/lib.cli 2015-04-02 22:26:51.000000000 +0200
+++ new/shorewall-core-4.6.8.1/lib.cli 2015-04-11 16:49:05.000000000 +0200
@@ -25,7 +25,7 @@
# loaded after this one and replaces some of the functions declared here.
#
-SHOREWALL_CAPVERSION=40606
+SHOREWALL_CAPVERSION=40609
[ -n "${g_program:=shorewall}" ]
@@ -2575,6 +2575,7 @@
NEW_TOS_MATCH=
TARPIT_TARGET=
IFACE_MATCH=
+ TCPMSS_TARGET=
AMANDA_HELPER=
FTP_HELPER=
@@ -2732,6 +2733,8 @@
qt $g_tool -A $chain -m iface --iface lo --loopback && IFACE_MATCH=Yes
+ qt $g_tool -A $chain -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
--clamp-mss-to-pmtu && TCPMSS_TARGET=Yes
+
if [ -n "$MANGLE_ENABLED" ]; then
qt $g_tool -t mangle -N $chain
@@ -3001,16 +3004,17 @@
report_capability "IMQ Target (IMQ_TARGET)" $IMQ_TARGET
report_capability "DSCP Match (DSCP_MATCH)" $DSCP_MATCH
report_capability "DSCP Target (DSCP_TARGET)" $DSCP_TARGET
- report_capability "Geo IP match" $GEOIP_MATCH
- report_capability "RPFilter match" $RPFILTER_MATCH
- report_capability "NFAcct match" $NFACCT_MATCH
- report_capability "Checksum Target" $CHECKSUM_TARGET
- report_capability "Arptables JF" $ARPTABLESJF
- report_capability "MASQUERADE Target" $MASQUERADE_TGT
- report_capability "UDPLITE Port Redirection" $UDPLITEREDIRECT
- report_capability "New tos Match" $NEW_TOS_MATCH
- report_capability "TARPIT Target" $TARPIT_TARGET
- report_capability "Iface Match" $IFACE_MATCH
+ report_capability "Geo IP Match (GEOIP_MATCH)" $GEOIP_MATCH
+ report_capability "RPFilter Match (RPFILTER_MATCH)" $RPFILTER_MATCH
+ report_capability "NFAcct Match" $NFACCT_MATCH
+ report_capability "Checksum Target (CHECKSUM_TARGET)" $CHECKSUM_TARGET
+ report_capability "Arptables JF (ARPTABLESJF)" $ARPTABLESJF
+ report_capability "MASQUERADE Target (MASQUERADE_TGT)" $MASQUERADE_TGT
+ report_capability "UDPLITE Port Redirection (UDPLITEREDIRECT)"
$UDPLITEREDIRECT
+ report_capability "New tos Match (NEW_TOS_MATCH)" $NEW_TOS_MATCH
+ report_capability "TARPIT Target (TARPIT_TARGET)" $TARPIT_TARGET
+ report_capability "Iface Match (IFACE_MATCH)" $IFACE_MATCH
+ report_capability "TCPMSS Target (TCPMSS_TARGET)" $TCPMSS_TARGET
report_capability "Amanda Helper" $AMANDA_HELPER
report_capability "FTP Helper" $FTP_HELPER
@@ -3140,6 +3144,7 @@
report_capability1 NEW_TOS_MATCH
report_capability1 TARPIT_TARGET
report_capability1 IFACE_MATCH
+ report_capability1 TCPMSS_TARGET
report_capability1 AMANDA_HELPER
report_capability1 FTP_HELPER
@@ -4035,10 +4040,6 @@
[ -n "${VARDIR:=/var/lib/$g_program}" ]
- if [ ! -f ${VARDIR}/firewall ]; then
- [ -f ${VARDIR}/.restore ] && cp -f ${VARDIR}/.rstore ${VARDIR}/firewall
- fi
-
g_firewall=${VARDIR}/firewall
version_file=${g_sharedir}/version
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-core-4.6.8/releasenotes.txt
new/shorewall-core-4.6.8.1/releasenotes.txt
--- old/shorewall-core-4.6.8/releasenotes.txt 2015-04-02 22:27:47.000000000
+0200
+++ new/shorewall-core-4.6.8.1/releasenotes.txt 2015-04-11 16:50:07.000000000
+0200
@@ -1,7 +1,7 @@
----------------------------------------------------------------------------
- S H O R E W A L L 4 . 6 . 8
+ S H O R E W A L L 4 . 6 . 8 . 1
------------------------------------
- A p r i l 0 4 , 2 0 1 5
+ A p r i l 1 1 , 2 0 1 5
----------------------------------------------------------------------------
I. PROBLEMS CORRECTED IN THIS RELEASE
@@ -14,6 +14,18 @@
I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
----------------------------------------------------------------------------
+4.6.8.1
+
+1) Previously, when servicd was installed and there were one or more
+ required interfaces, the firewall would fail to start at boot. This
+ has been corrected by Tuomo Soini.
+
+2) Some startup logic in lib.cli has been deleted. A bug prevented the
+ code from working as intended, so there is no loss of functionality
+ resulting from deletion of the code.
+
+4.6.8
+
1) This release includes defect repair from Shorewall 4.6.6.2 and
earlier releases.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-core-4.6.8/shorewall-core.spec
new/shorewall-core-4.6.8.1/shorewall-core.spec
--- old/shorewall-core-4.6.8/shorewall-core.spec 2015-04-02
22:27:47.000000000 +0200
+++ new/shorewall-core-4.6.8.1/shorewall-core.spec 2015-04-11
16:50:07.000000000 +0200
@@ -1,6 +1,6 @@
%define name shorewall-core
%define version 4.6.8
-%define release 0base
+%define release 1
Summary: Shoreline Firewall is an iptables-based firewall for Linux systems.
Name: %{name}
@@ -63,6 +63,8 @@
%doc COPYING INSTALL changelog.txt releasenotes.txt
%changelog
+* Sat Apr 11 2015 Tom Eastep t...@shorewall.net
+- Updated to 4.6.8-1
* Sun Mar 29 2015 Tom Eastep t...@shorewall.net
- Updated to 4.6.8-0base
* Tue Mar 24 2015 Tom Eastep t...@shorewall.net
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-core-4.6.8/uninstall.sh
new/shorewall-core-4.6.8.1/uninstall.sh
--- old/shorewall-core-4.6.8/uninstall.sh 2015-04-02 22:27:47.000000000
+0200
+++ new/shorewall-core-4.6.8.1/uninstall.sh 2015-04-11 16:50:07.000000000
+0200
@@ -26,7 +26,7 @@
# You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall
-VERSION=4.6.8
+VERSION=4.6.8.1
usage() # $1 = exit status
{
++++++ shorewall-docs-html-4.6.8.tar.bz2 -> shorewall-docs-html-4.6.8.1.tar.bz2
++++++
++++ 6847 lines of diff (skipped)
++++++ shorewall-init-4.6.8.tar.bz2 -> shorewall-init-4.6.8.1.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-init-4.6.8/changelog.txt
new/shorewall-init-4.6.8.1/changelog.txt
--- old/shorewall-init-4.6.8/changelog.txt 2015-04-02 22:27:48.000000000
+0200
+++ new/shorewall-init-4.6.8.1/changelog.txt 2015-04-11 16:50:08.000000000
+0200
@@ -1,3 +1,10 @@
+Changes in 4.6.8.1
+
+1) Update release documents.
+
+2) Add 'wants=network-online.target' to service files so that the
+ firewall will start when there are required interfaces.
+
Changes in 4.6.8 Final
1) Update release documents.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-init-4.6.8/configure
new/shorewall-init-4.6.8.1/configure
--- old/shorewall-init-4.6.8/configure 2015-04-02 22:27:48.000000000 +0200
+++ new/shorewall-init-4.6.8.1/configure 2015-04-11 16:50:08.000000000
+0200
@@ -28,7 +28,7 @@
#
# Build updates this
#
-VERSION=4.6.8
+VERSION=4.6.8.1
case "$BASH_VERSION" in
[4-9].*)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-init-4.6.8/configure.pl
new/shorewall-init-4.6.8.1/configure.pl
--- old/shorewall-init-4.6.8/configure.pl 2015-04-02 22:27:48.000000000
+0200
+++ new/shorewall-init-4.6.8.1/configure.pl 2015-04-11 16:50:08.000000000
+0200
@@ -31,7 +31,7 @@
# Build updates this
#
use constant {
- VERSION => '4.6.8'
+ VERSION => '4.6.8.1'
};
my %params;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-init-4.6.8/install.sh
new/shorewall-init-4.6.8.1/install.sh
--- old/shorewall-init-4.6.8/install.sh 2015-04-02 22:27:48.000000000 +0200
+++ new/shorewall-init-4.6.8.1/install.sh 2015-04-11 16:50:08.000000000
+0200
@@ -27,7 +27,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
02110-1301 USA.
#
-VERSION=4.6.8
+VERSION=4.6.8.1
usage() # $1 = exit status
{
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-init-4.6.8/releasenotes.txt
new/shorewall-init-4.6.8.1/releasenotes.txt
--- old/shorewall-init-4.6.8/releasenotes.txt 2015-04-02 22:27:48.000000000
+0200
+++ new/shorewall-init-4.6.8.1/releasenotes.txt 2015-04-11 16:50:08.000000000
+0200
@@ -1,7 +1,7 @@
----------------------------------------------------------------------------
- S H O R E W A L L 4 . 6 . 8
+ S H O R E W A L L 4 . 6 . 8 . 1
------------------------------------
- A p r i l 0 4 , 2 0 1 5
+ A p r i l 1 1 , 2 0 1 5
----------------------------------------------------------------------------
I. PROBLEMS CORRECTED IN THIS RELEASE
@@ -14,6 +14,18 @@
I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
----------------------------------------------------------------------------
+4.6.8.1
+
+1) Previously, when servicd was installed and there were one or more
+ required interfaces, the firewall would fail to start at boot. This
+ has been corrected by Tuomo Soini.
+
+2) Some startup logic in lib.cli has been deleted. A bug prevented the
+ code from working as intended, so there is no loss of functionality
+ resulting from deletion of the code.
+
+4.6.8
+
1) This release includes defect repair from Shorewall 4.6.6.2 and
earlier releases.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-init-4.6.8/shorewall-init.service
new/shorewall-init-4.6.8.1/shorewall-init.service
--- old/shorewall-init-4.6.8/shorewall-init.service 2015-04-02
22:26:51.000000000 +0200
+++ new/shorewall-init-4.6.8.1/shorewall-init.service 2015-04-11
16:49:05.000000000 +0200
@@ -6,6 +6,7 @@
[Unit]
Description=Shorewall IPv4 firewall (bootup security)
Before=network.target
+Wants=network.target
Conflicts=iptables.service firewalld.service
[Service]
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-init-4.6.8/shorewall-init.spec
new/shorewall-init-4.6.8.1/shorewall-init.spec
--- old/shorewall-init-4.6.8/shorewall-init.spec 2015-04-02
22:27:48.000000000 +0200
+++ new/shorewall-init-4.6.8.1/shorewall-init.spec 2015-04-11
16:50:08.000000000 +0200
@@ -1,6 +1,6 @@
%define name shorewall-init
%define version 4.6.8
-%define release 0base
+%define release 1
Summary: Shorewall-init adds functionality to Shoreline Firewall (Shorewall).
Name: %{name}
@@ -126,6 +126,8 @@
%doc COPYING changelog.txt releasenotes.txt
%changelog
+* Sat Apr 11 2015 Tom Eastep t...@shorewall.net
+- Updated to 4.6.8-1
* Sun Mar 29 2015 Tom Eastep t...@shorewall.net
- Updated to 4.6.8-0base
* Tue Mar 24 2015 Tom Eastep t...@shorewall.net
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-init-4.6.8/uninstall.sh
new/shorewall-init-4.6.8.1/uninstall.sh
--- old/shorewall-init-4.6.8/uninstall.sh 2015-04-02 22:27:48.000000000
+0200
+++ new/shorewall-init-4.6.8.1/uninstall.sh 2015-04-11 16:50:08.000000000
+0200
@@ -26,7 +26,7 @@
# You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall
-VERSION=4.6.8
+VERSION=4.6.8.1
usage() # $1 = exit status
{
++++++ shorewall-lite-4.6.8.tar.bz2 -> shorewall-lite-4.6.8.1.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/changelog.txt
new/shorewall-lite-4.6.8.1/changelog.txt
--- old/shorewall-lite-4.6.8/changelog.txt 2015-04-02 22:27:48.000000000
+0200
+++ new/shorewall-lite-4.6.8.1/changelog.txt 2015-04-11 16:50:08.000000000
+0200
@@ -1,3 +1,10 @@
+Changes in 4.6.8.1
+
+1) Update release documents.
+
+2) Add 'wants=network-online.target' to service files so that the
+ firewall will start when there are required interfaces.
+
Changes in 4.6.8 Final
1) Update release documents.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/configure
new/shorewall-lite-4.6.8.1/configure
--- old/shorewall-lite-4.6.8/configure 2015-04-02 22:27:48.000000000 +0200
+++ new/shorewall-lite-4.6.8.1/configure 2015-04-11 16:50:08.000000000
+0200
@@ -28,7 +28,7 @@
#
# Build updates this
#
-VERSION=4.6.8
+VERSION=4.6.8.1
case "$BASH_VERSION" in
[4-9].*)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/configure.pl
new/shorewall-lite-4.6.8.1/configure.pl
--- old/shorewall-lite-4.6.8/configure.pl 2015-04-02 22:27:48.000000000
+0200
+++ new/shorewall-lite-4.6.8.1/configure.pl 2015-04-11 16:50:08.000000000
+0200
@@ -31,7 +31,7 @@
# Build updates this
#
use constant {
- VERSION => '4.6.8'
+ VERSION => '4.6.8.1'
};
my %params;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/install.sh
new/shorewall-lite-4.6.8.1/install.sh
--- old/shorewall-lite-4.6.8/install.sh 2015-04-02 22:27:48.000000000 +0200
+++ new/shorewall-lite-4.6.8.1/install.sh 2015-04-11 16:50:08.000000000
+0200
@@ -22,7 +22,7 @@
# along with this program; if not, see <http://www.gnu.org/licenses/>.
#
-VERSION=4.6.8
+VERSION=4.6.8.1
usage() # $1 = exit status
{
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/shorewall-lite-4.6.8/manpages/shorewall-lite-vardir.5
new/shorewall-lite-4.6.8.1/manpages/shorewall-lite-vardir.5
--- old/shorewall-lite-4.6.8/manpages/shorewall-lite-vardir.5 2015-04-02
22:31:08.000000000 +0200
+++ new/shorewall-lite-4.6.8.1/manpages/shorewall-lite-vardir.5 2015-04-11
16:53:30.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-lite-vardir
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-LITE\-VAR" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-LITE\-VAR" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/manpages/shorewall-lite.8
new/shorewall-lite-4.6.8.1/manpages/shorewall-lite.8
--- old/shorewall-lite-4.6.8/manpages/shorewall-lite.8 2015-04-02
22:31:10.000000000 +0200
+++ new/shorewall-lite-4.6.8.1/manpages/shorewall-lite.8 2015-04-11
16:53:32.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-lite
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Administrative Commands
.\" Source: Administrative Commands
.\" Language: English
.\"
-.TH "SHOREWALL\-LITE" "8" "04/02/2015" "Administrative Commands"
"Administrative Commands"
+.TH "SHOREWALL\-LITE" "8" "04/11/2015" "Administrative Commands"
"Administrative Commands"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/manpages/shorewall-lite.conf.5
new/shorewall-lite-4.6.8.1/manpages/shorewall-lite.conf.5
--- old/shorewall-lite-4.6.8/manpages/shorewall-lite.conf.5 2015-04-02
22:31:07.000000000 +0200
+++ new/shorewall-lite-4.6.8.1/manpages/shorewall-lite.conf.5 2015-04-11
16:53:29.000000000 +0200
@@ -2,12 +2,12 @@
.\" Title: shorewall-lite.conf
.\" Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
-.\" Date: 04/02/2015
+.\" Date: 04/11/2015
.\" Manual: Configuration Files
.\" Source: Configuration Files
.\" Language: English
.\"
-.TH "SHOREWALL\-LITE\&.CO" "5" "04/02/2015" "Configuration Files"
"Configuration Files"
+.TH "SHOREWALL\-LITE\&.CO" "5" "04/11/2015" "Configuration Files"
"Configuration Files"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/releasenotes.txt
new/shorewall-lite-4.6.8.1/releasenotes.txt
--- old/shorewall-lite-4.6.8/releasenotes.txt 2015-04-02 22:27:48.000000000
+0200
+++ new/shorewall-lite-4.6.8.1/releasenotes.txt 2015-04-11 16:50:08.000000000
+0200
@@ -1,7 +1,7 @@
----------------------------------------------------------------------------
- S H O R E W A L L 4 . 6 . 8
+ S H O R E W A L L 4 . 6 . 8 . 1
------------------------------------
- A p r i l 0 4 , 2 0 1 5
+ A p r i l 1 1 , 2 0 1 5
----------------------------------------------------------------------------
I. PROBLEMS CORRECTED IN THIS RELEASE
@@ -14,6 +14,18 @@
I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
----------------------------------------------------------------------------
+4.6.8.1
+
+1) Previously, when servicd was installed and there were one or more
+ required interfaces, the firewall would fail to start at boot. This
+ has been corrected by Tuomo Soini.
+
+2) Some startup logic in lib.cli has been deleted. A bug prevented the
+ code from working as intended, so there is no loss of functionality
+ resulting from deletion of the code.
+
+4.6.8
+
1) This release includes defect repair from Shorewall 4.6.6.2 and
earlier releases.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/shorewall-lite.service
new/shorewall-lite-4.6.8.1/shorewall-lite.service
--- old/shorewall-lite-4.6.8/shorewall-lite.service 2015-04-02
22:26:51.000000000 +0200
+++ new/shorewall-lite-4.6.8.1/shorewall-lite.service 2015-04-11
16:49:05.000000000 +0200
@@ -5,6 +5,7 @@
#
[Unit]
Description=Shorewall IPv4 firewall (lite)
+Wants=network-online.target
After=network-online.target
Conflicts=iptables.service firewalld.service
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/shorewall-lite.service.214
new/shorewall-lite-4.6.8.1/shorewall-lite.service.214
--- old/shorewall-lite-4.6.8/shorewall-lite.service.214 2015-04-02
22:26:51.000000000 +0200
+++ new/shorewall-lite-4.6.8.1/shorewall-lite.service.214 2015-04-11
16:49:05.000000000 +0200
@@ -5,6 +5,7 @@
#
[Unit]
Description=Shorewall IPv4 firewall (lite)
+Wants=network-online.target
After=network-online.target
Conflicts=iptables.service firewalld.service
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/shorewall-lite.spec
new/shorewall-lite-4.6.8.1/shorewall-lite.spec
--- old/shorewall-lite-4.6.8/shorewall-lite.spec 2015-04-02
22:27:48.000000000 +0200
+++ new/shorewall-lite-4.6.8.1/shorewall-lite.spec 2015-04-11
16:50:08.000000000 +0200
@@ -1,6 +1,6 @@
%define name shorewall-lite
%define version 4.6.8
-%define release 0base
+%define release 1
%define initdir /etc/init.d
Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux
systems.
@@ -106,6 +106,8 @@
%doc COPYING changelog.txt releasenotes.txt
%changelog
+* Sat Apr 11 2015 Tom Eastep t...@shorewall.net
+- Updated to 4.6.8-1
* Sun Mar 29 2015 Tom Eastep t...@shorewall.net
- Updated to 4.6.8-0base
* Tue Mar 24 2015 Tom Eastep t...@shorewall.net
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/shorewall-lite-4.6.8/uninstall.sh
new/shorewall-lite-4.6.8.1/uninstall.sh
--- old/shorewall-lite-4.6.8/uninstall.sh 2015-04-02 22:27:48.000000000
+0200
+++ new/shorewall-lite-4.6.8.1/uninstall.sh 2015-04-11 16:50:08.000000000
+0200
@@ -26,7 +26,7 @@
# You may only use this script to uninstall the version
# shown below. Simply run this script to remove Shorewall Firewall
-VERSION=4.6.8
+VERSION=4.6.8.1
PRODUCT=shorewall-lite
usage() # $1 = exit status
++++++ shorewall-4.6.8.tar.bz2 -> shorewall6-4.6.8.1.tar.bz2 ++++++
++++ 127996 lines of diff (skipped)
++++++ shorewall-lite-4.6.8.tar.bz2 -> shorewall6-lite-4.6.8.1.tar.bz2 ++++++
++++ 8449 lines of diff (skipped)
