On mardi, 15 janvier 2019 14.00:01 h CET Tuomo Soini wrote: > On Tue, 15 Jan 2019 12:09:44 +0100 > > Bruno Friedmann <br...@ioda-net.ch> wrote: > > @Tuomo, did you apply this unconditionnally even for minor update ? > > Yes.
Ok I've done a look at all rpm based distribution, that none of the packager is doing that. Of course I've not been able to check how you do that in Foobar. I'm still interested, and will check with packager in openSUSE if I can find a safe way to do that. The most important thing being to not lockout an administrator to its remote installation. > > @Tom I will try to find a still running old shorewall with nat file > > (but not sure there's still one using that) and recheck the upgrade > > process with dumping shorewall state before after. > I guess you are actually talking about masq -> snat conversion? > Shorewall update handles that too. nat files is not deprecated and is > still used for 1:1 natting. ok -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch Bareos Partner, openSUSE Member, fsfe supporter GPG KEY : D5C9B751C4653227 irc: tigerfoot _______________________________________________ Shorewall-devel mailing list Shorewall-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-devel