Hi Tom, some warnings in shorewall6 if you use the unmodified shorewall6.conf:
WARNING: Unknown configuration option (IP) ignored : /etc/shorewall6/shorewall6.conf (line 61) WARNING: Unknown configuration option (TC) ignored : /etc/shorewall6/shorewall6.conf (line 63) WARNING: Unknown configuration option (IPSET) ignored : /etc/shorewall6/shorewall6.conf (line 65) Alex ----- Ursprüngliche Mail ----- Von: "Tom Eastep" <[email protected]> An: "Shorewall Users" <[email protected]>, "Shorewall Announcements" <[email protected]> Gesendet: Sonntag, 26. Juli 2009 16:43:15 GMT +01:00 Amsterdam/Berlin/Bern/Rom/Stockholm/Wien Betreff: [Shorewall-announce] Shorewall 4.4.0 RC 1 The Shorewall team is pleased to announce the availability of Shorewall 4.4.0 RC 1. http://www.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.0-RC1 ftp://ftp.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.0-RC1 ---------------------------------------------------------------------------- P R O B L E M S C O R R E C T E D I N 4 . 4 . 0 RC1 ---------------------------------------------------------------------------- 1) The duplicate macro GIT has been deleted. 2) Previously, Shorewall might alter the routing when there were no providers, even if the "-n" option was given. 3) Previously, NONAT rules on a sub-zone were not exempted from DNAT/REDIRECT rules of a parent zone. 4) Previously if the 'status' command was run by someone other than root, the response always show that the firewall was stopped and the state was 'Unknown'. Now an error message is generated to indicate that the command may only be run by root. 5) Previously, if 'rpm -U' was used to upgrade from a version of Shorewall earlier than 4.3.5, then Shorewall would not start automatically at boot time. ---------------------------------------------------------------------------- K N O W N P R O B L E M S R E M A I N I N G ---------------------------------------------------------------------------- 1) When a capabilities file is used, 'shorewall6 check (start, etc.)' erroneously reports that the capabilities file is out of date. ---------------------------------------------------------------------------- N E W F E A T U R E S I N 4 . 4 . 0 RC1 ---------------------------------------------------------------------------- 1) A new keyword 'any' may be used in the SOURCE and DEST columns of the rules file. In the absense of nested zones, 'any' works the same as 'all'. When there are nested zones, 'any' only selects the top-level zones. 'any' is intended to be used with IMPLICIT_CONTINUE=Yes in shorewall.conf. -The Shorewall Team -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ _______________________________________________ Shorewall-announce mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-announce ------------------------------------------------------------------------------ _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
