Shorewall 4.4.20.2 is now available for download. Problems Corrected:
1) Problem Corrected #1 from 4.4.19.4 was inadvertently omitted from
4.4.20. It is now included.
2) A defect introduced in 4.4.20 could cause the following failure at
start/restart:
ERROR: Command "tc qdisc add dev eth0 parent 1:11 handle 1:
sfq quantum 12498 limit 127 perturb 10" failed
3) The 'sfilter' interface option introduced in 4.4.20 was only
applied to forwarded traffic. Now it is also applied to traffic
addressed to the firewall itself.
4) IPSEC traffic is now (correctly) excluded from sfilter.
5) Shorewall 4.4.20 could, under some circumstances, fail during
iptables-restore with a message such as the following:
iptables-restore v1.4.10: Couldn't load target
`dsl0_fwd':/usr/lib/xtables/libipt_dsl0_fwd.so: cannot open shared
object file: No such file or directory
Error occurred at line: 113
Try `iptables-restore -h' or 'iptables-restore --help' for more
information.
ERROR: iptables-restore Failed. Input is in
/var/lib/shorewall/.iptables-restore-input
6) The following incorrect warning message has been eliminated:
WARNING: sfilter is ineffective with FASTACCEPT=Yes
Thank you for using Shorewall,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ EditLive Enterprise is the world's most technically advanced content authoring tool. Experience the power of Track Changes, Inline Image Editing and ensure content is compliant with Accessibility Checking. http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
