I've uploaded 4.5.2 for testing. Given that I must go back to work tomorrow, I won't have as much time now to play with Shorewall.
----------------------------------------------------------------------------
P R O B L E M S C O R R E C T E D I N 4 . 5 . 2
----------------------------------------------------------------------------
1) Previously, if there were entries in /etc/shorewall/accounting,
OPTIMIZE settings of 4, 5, 6 or 7 could cause a run-time failure
during 'shorewall start'.
----------------------------------------------------------------------------
K N O W N P R O B L E M S R E M A I N I N G
----------------------------------------------------------------------------
None.
----------------------------------------------------------------------------
N E W F E A T U R E S I N 4 . 5 . 2
----------------------------------------------------------------------------
1) The "optimize 4" feature added in 4.5.1 is now extended to all
tables.
Additionally:
- if a built-in chain has a single rule that branches to a
second chain, then the rules from the second chain are moved to
the built-in chain and the target chain is omitted.
- Chains with no references are deleted.
- Accounting chains are subject to optimization if the new
OPTIMIZE_ACCOUNTING option is set to 'Yes' (default is 'No').
- If a chain ends with an unconditional branch to a second chain
(other than to 'reject'), then the branch is deleted from the
first chain and the rules from the second chain are appended to
it.
2) Shorewall now throws an error if:
a) There are tracked providers; and
b) PROVIDER_OFFSET is 0; and
c) 'ipp2p' is used as the PROTO in a tcpri entry.
3) You may now preview the generated ruleset by using the '-r' option
to the 'check' command (e.g., "shorewall check -r").
The output is a shell script fragment, similar to the way it
appears in the generated script.
Thank you for testing,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
