There has been quite a bit of testing this weekend resulting in a number of changes in the code. I have uploaded RC 1 so we can all get back on the same code base.
Problems Corrected since Beta 4:
1) The Shorewall6 actions.std has been updated.
2) The handling of audited *_DISPOSITION has been corrected.
3) ACCEPT and A_ACCEPT are now rejected as settings for
INVALID_DISPOSITION. That was the documented behavior in Beta 4 but
the code didn't match the documentation.
4) The bogus 'use Shorewall::Rules qw( process_rule1 )' directives
have been removed from several action files.
5) In Beta 4, a '?set @chain' directive caused rules to be omitted and
an invalid rule to be generated.
6) Manpage clarifications:
- shorewall[6]-accounting
The use of ipsets is documented.
The default CHAIN when that column is omitted is clarified.
- Configuration file basics
The format of <variable> in a ?set directive is clarified.
7) When source and/or destination ports are specified in an RST or
NotSyn rule, a fatal error is no longer raised.
8) The TCPFlags action now generates the correct rules.
9) UNTRACKED_DISPOSITION=ACCEPT is now handled correctly.
New/changed
Features since Beta 4:
1) The compiler now attempts to omit conntrack match rules that can
never match. It also attempts to suppress redundant conntrack
matches.
2) A 'New' standard action has been added that matches packets in the
NEW connection tracking state.
3) The $matches parameter to perl_action_helper() no longer needs to
include a trailing space.
4) The shorewallrc.archlinux file now assumes that systemd is
installed (Evangelos Foutras).
5) When the 'CONNTRACK match' capability is present (as it is in all
current distros), optimize level 16 now combines adjacent rules
that differ only in the conntrack states matched.
Thank you for testing,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_jan
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
