RC 1 is now available for testing. Changes since Beta 6:
1) INLINE is now supported in the tcrules file.
The INLINE action is also supported in the accounting and tcrules
files. In the accounting file, INLINE is treated the same as COUNT
in the with the exception that the freeform iptables input
following the ';' is appended to any matches generated by the
column contents. INLINE is treated similarly in the tcrules file;
that is, the freeform input following ';' must specify the rule
target, if any. In the accounting and tcrules files, INLINE does
not accept a parameter.
2) The method of specifying that an nfacct object is incremented
unconditionally has changed. Previously, the '!' followed the
closing parenthesis:
NFACCT(foo)!
It now follows the object name:
NFACCT(foo!)
This allows unconditionally incrementing more than one object:
NFACCT(foo!,bar!)
As part of this change, nfacct object names may now contain the
characters &, ^, %, and @ in addition to letters, digits and _.
3) Prior to the availability of BEGIN PERL....END PERL in
configuration files, the only way to execute a chain-specific
script was to create a script file with the same name as the chain
and place it in a directory on the CONFIG_PATH. That facility has
the drawback that the compiler will attempt to run a non-script
file just because it has the same name as a chain. To disable this
facility, a new CHAIN_SCRIPTS option has been added to
shorewall[6].conf. The facility is disabled by setting
CHAIN_SCRIPTS=No. If not specified or specified as the empty value,
CHAIN_SCRIPTS=Yes is assumed for backward compatibility.
Thank you for testing,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Try New Relic Now & We'll Send You this Cool Shirt New Relic is the only SaaS-based application performance monitoring service that delivers powerful full stack analytics. Optimize and monitor your browser, app, & servers with just a few lines of code. Try New Relic and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
