Re: [Shorewall-users] Shorewall 5.1.6 Beta 2

2017-08-11 Thread Tom Eastep
On 08/11/2017 05:28 AM, Norman Henderson wrote:
> Parameters are coming through to the enabled / disabled scripts as
> designed. However, what is the difference between physical and logical
> device names / when would they differ?

Shorewall interfaces can have both a logical and a physical name.

Example:

#ZONE   INTERFACE   OPTIONS
wan WAN_IF  physical=eth0

The logical name is WAN_IF; that name is normally used elsewhere in the
configuration files to refer to the interface. The physical name of the
interface is eth0, which is of course the name of the interface as known
to the kernel.

If the 'physical' option is not specified, then the physical and logical
names are the same.

-Tom
-- 
Tom Eastep\   Q: What do you get when you cross a mobster with
Shoreline, \ an international standard?
Washington, USA \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
  \___



signature.asc
Description: OpenPGP digital signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users


Re: [Shorewall-users] Shorewall 5.1.6 Beta 2

2017-08-11 Thread Norman Henderson
Parameters are coming through to the enabled / disabled scripts as
designed. However, what is the difference between physical and logical
device names / when would they differ?


On Wed, Aug 9, 2017 at 9:56 PM, Tom Eastep  wrote:

> Shorewall 5.1.6 Beta 2 is now available for testing.
>
> Problems Corrected since Beta 1:
>
> 1)  http://www.shorewall.net/shorewall_extension_scripts.htm states
> that $SHAREDIR and $CONFDIR can be used in extension scripts, that
> has not been true for some time. Beginning with this release, those
> variables are once again available in the generated script.
>
> 2)  Under very rare circumstances, when OPTIMIZE level 8 was used,
> messages such as the following could be issued during compilation:
>
> Use of uninitialized value in hash element at
>/usr/share/shorewall/Shorewall/Rules.pm line 818.
> Use of uninitialized value in concatenation (.) or string at
>/usr/share/shorewall/Shorewall/Rules.pm line 823.
>
> That has been corrected.
>
> New Features since Beta 1:
>
> 1)  The two new run-time extensions scripts (enabled and disabled) have
> been enhanced
>
> Like all run-time extension scripts, the contents of each script
> are placed in a function body. In the case of these new scripts,
> the function is passed arguments:
>
> $1 = the physical name of the interface
> $2 = the logical name of the interface
> $3 = the name of the Provider, if any, associated with the
>  interface.
>
> Thank you for testing,
>
> -Tom
> --
> Tom Eastep\   Q: What do you get when you cross a mobster with
> Shoreline, \ an international standard?
> Washington, USA \ A: Someone who makes you an offer you can't
> http://shorewall.org \   understand
>   \___
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users


[Shorewall-users] Shorewall 5.1.6 Beta 2

2017-08-09 Thread Tom Eastep
Shorewall 5.1.6 Beta 2 is now available for testing.

Problems Corrected since Beta 1:

1)  http://www.shorewall.net/shorewall_extension_scripts.htm states
that $SHAREDIR and $CONFDIR can be used in extension scripts, that
has not been true for some time. Beginning with this release, those
variables are once again available in the generated script.

2)  Under very rare circumstances, when OPTIMIZE level 8 was used,
messages such as the following could be issued during compilation:

Use of uninitialized value in hash element at
   /usr/share/shorewall/Shorewall/Rules.pm line 818.
Use of uninitialized value in concatenation (.) or string at
   /usr/share/shorewall/Shorewall/Rules.pm line 823.

That has been corrected.

New Features since Beta 1:

1)  The two new run-time extensions scripts (enabled and disabled) have
been enhanced

Like all run-time extension scripts, the contents of each script
are placed in a function body. In the case of these new scripts,
the function is passed arguments:

$1 = the physical name of the interface
$2 = the logical name of the interface
$3 = the name of the Provider, if any, associated with the
 interface.

Thank you for testing,

-Tom
-- 
Tom Eastep\   Q: What do you get when you cross a mobster with
Shoreline, \ an international standard?
Washington, USA \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
  \___



signature.asc
Description: OpenPGP digital signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users