On 04/19/2013 12:17 PM, Tom Eastep wrote:
> Beta 5 is now available for testing.
> 
> Problems corrected since Beta 4:
> 
> 1)  Previously, NFACCT accounting rules generated iptables rules with
>     the matches in the incorrect order. That caused the counters to be
>     incremented before all of the matches had been checked. Now, the
>     counter in an NFACCT rule is incremented only if all of the other
>     matches have been successful.
> 
> 2)  A number of ipset-related modules were incorrectly included in
>     /usr/share/shorewall/helpers. Those entries have now been removed.
> 
> New/modified features since Beta 4:
> 
> 1)  It is now possible to specify HELPERS=none in
>     /etc/shorewall[6]/shorewall[6].conf.
> 
>     This setting has two consequences:
> 
>     a) All of the *_HELPER capabilities are set to off.
>     b) No probing of helpers is performed, thus eliminating "xt_CT: No
>        such helper XXX" warnings when the compiler is probing the
>        system for capabilities.
> 

I seemed to have had an SCM screwup that resulted in a bad Config.pm
being included in the Beta. Patch attached.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Config.pm b/Shorewall/Perl/Shorewall/Config.pm
index eb202f2..1ef50a1 100644
--- a/Shorewall/Perl/Shorewall/Config.pm
+++ b/Shorewall/Perl/Shorewall/Config.pm
@@ -5043,7 +5043,7 @@ sub get_configuration( $$$$ ) {
 
 	my @helpers = split_list ( $val, 'helper' );
 
-	for ( split_list $config{HELPERS} , 'helper' ) {
+	for ( @helpers ) {
 	    my $name = $_;
 	    if ( exists $helpers_enabled{$name} ) {
 		s/-/_/;

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Shorewall-devel mailing list
Shorewall-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to