On 04/19/2013 12:17 PM, Tom Eastep wrote: > Beta 5 is now available for testing. > > Problems corrected since Beta 4: > > 1) Previously, NFACCT accounting rules generated iptables rules with > the matches in the incorrect order. That caused the counters to be > incremented before all of the matches had been checked. Now, the > counter in an NFACCT rule is incremented only if all of the other > matches have been successful. > > 2) A number of ipset-related modules were incorrectly included in > /usr/share/shorewall/helpers. Those entries have now been removed. > > New/modified features since Beta 4: > > 1) It is now possible to specify HELPERS=none in > /etc/shorewall[6]/shorewall[6].conf. > > This setting has two consequences: > > a) All of the *_HELPER capabilities are set to off. > b) No probing of helpers is performed, thus eliminating "xt_CT: No > such helper XXX" warnings when the compiler is probing the > system for capabilities. >
I seemed to have had an SCM screwup that resulted in a bad Config.pm being included in the Beta. Patch attached. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Config.pm b/Shorewall/Perl/Shorewall/Config.pm index eb202f2..1ef50a1 100644 --- a/Shorewall/Perl/Shorewall/Config.pm +++ b/Shorewall/Perl/Shorewall/Config.pm @@ -5043,7 +5043,7 @@ sub get_configuration( $$$$ ) { my @helpers = split_list ( $val, 'helper' ); - for ( split_list $config{HELPERS} , 'helper' ) { + for ( @helpers ) { my $name = $_; if ( exists $helpers_enabled{$name} ) { s/-/_/;
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Precog is a next-generation analytics platform capable of advanced analytics on semi-structured data. The platform includes APIs for building apps and a phenomenal toolset for data science. Developers can use our toolset for easy data analysis & visualization. Get a free account! http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________ Shorewall-devel mailing list Shorewall-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-devel