Hi Shorewall developers, I upgraded to 4.6.1.2 (Debian package).
It seems that the DSCP match in tcrules file doesn't work with names (such as EF, BE, CS1, ...). The joined patch would resolve that. However, RESTORE and SAVE rules doesn't working anymore with the message: ERROR: RESTORE rules are not allowed in the OUTPUT chain /etc/shorew all/tcrules (line 51) ERROR: SAVE rules are not allowed in the OUTPUT chain /etc/shorewall /tcrules (line 236) Where you aware of this problem/bug ? I'am going to look into it. Thanks for your help, Best regards, Thibaut Chèze
--- Tc.pm 2014-07-01 11:09:36.683051612 +0200 +++ Tc.pm.patched 2014-07-01 11:10:09.862835338 +0200 @@ -423,7 +423,7 @@ function => sub () { require_capability 'DSCP_TARGET', 'The DSCP action', 's'; my $dscp = numeric_value( $params ); - $dscp = $dscpmap{$1} unless defined $dscp; + $dscp = $dscpmap{$params} unless defined $dscp; fatal_error( "Invalid DSCP ($params)" ) unless defined $dscp && $dscp <= 0x38 && ! ( $dscp & 1 ); $target = 'DSCP --set-dscp ' . in_hex( $dscp ); },
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft
_______________________________________________ Shorewall-devel mailing list Shorewall-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-devel