Sorry if that wasn't clear, I should've mentioned that this occurs applying the patch to the existing (latest) 4.4.22 build.
-----Original Message----- From: Andrew Silverman [mailto:[email protected]] Sent: Tuesday, August 02, 2011 12:17 PM To: 'Shorewall Users' Subject: Re: [Shorewall-users] [PATCH] Nasty bug After applying this patch, Shorewall6 startup fails as follows: [root@ipv6tunl Shorewall]# shorewall6 start Compiling... Subroutine insert_irule redefined at /usr/share/shorewall/Shorewall/Rules.pm line 517. Subroutine imatch_source_dev redefined at /usr/share/shorewall/Shorewall/Rules.pm line 2485. Global symbol "$comment" requires explicit package name at /usr/share/shorewall/Shorewall/Rules.pm line 536. Global symbol "$comment" requires explicit package name at /usr/share/shorewall/Shorewall/Rules.pm line 537. Global symbol "$iprangematch" requires explicit package name at /usr/share/shorewall/Shorewall/Rules.pm line 549. Global symbol "%capabilities" requires explicit package name at /usr/share/shorewall/Shorewall/Rules.pm line 1490. Compilation failed in require at /usr/share/shorewall/Shorewall/Tunnels.pm line 31. BEGIN failed--compilation aborted at /usr/share/shorewall/Shorewall/Tunnels.pm line 31. Compilation failed in require at /usr/share/shorewall/Shorewall/Compiler.pm line 32. BEGIN failed--compilation aborted at /usr/share/shorewall/Shorewall/Compiler.pm line 32. Compilation failed in require at /usr/share/shorewall/compiler.pl line 44. BEGIN failed--compilation aborted at /usr/share/shorewall/compiler.pl line 44. [root@ipv6tunl Shorewall]# -----Original Message----- From: Tom Eastep [mailto:[email protected]] Sent: Tuesday, August 02, 2011 9:38 AM To: Shorewall Users; Shorewall Announcements; Shorewall Development Subject: [Shorewall-users] [PATCH] Nasty bug A bug in recent versions of Shorewall can result in rules that are wider in scope than intended. If a zone name begins with 'all', then rules referring to that zone are incorrectly handled as if the keyword 'all' had been entered rather than the zone name. Shorewall releases affected are 4.4.13 - 4.4.22. The attached patch applies to all of these releases. a) Save the patch b) As root, execute this command: patch /usr/share/shorewall/Shorewall/Rules.pm < ALL.patch The patch will apply with an offset on releases prior to 4.4.22. Example (4.4.13): patch /usr/share/shorewall/Shorewall/Rules.pm < ~/ALL.patch patching file /usr/share/shorewall/Shorewall/Rules.pm Hunk #1 succeeded at 1548 (offset -704 lines). -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ---------------------------------------------------------------------------- -- BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA The must-attend event for mobile developers. Connect with experts. Get tools for creating Super Apps. See the latest technologies. Sessions, hands-on labs, demos & much more. Register early & save! http://p.sf.net/sfu/rim-blackberry-1 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users ------------------------------------------------------------------------------ BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA The must-attend event for mobile developers. Connect with experts. Get tools for creating Super Apps. See the latest technologies. Sessions, hands-on labs, demos & much more. Register early & save! http://p.sf.net/sfu/rim-blackberry-1 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
