4.4.27.2 is now available for download. Problem Corrected:
1) A long-standing problem with Shorewall's 'save' facility has been
discovered. The defect can cause rules to be dropped during 'save'
so that they are not available to be reapplied during
'restore'. This can occur in 'safe-restart' when the prompt is not
acknowledged or when it is acknowledged with 'n'.
The problem can occur when:
a) There are IPSEC zones or hosts present; and
b) GOTO Target support is available in the kernel and iptables.
Example of rule that will be dropped:
-A eth2_fwd -m policy --dir in --pol ipsec -g AAA_frwd
The defective code has been corrected so that rules are no longer
dropped.
Thank you for using Shorewall,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ RSA(R) Conference 2012 Mar 27 - Feb 2 Save $400 by Jan. 27 Register now! http://p.sf.net/sfu/rsa-sfdev2dev2
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
