On 6/6/2014 11:43 AM, Tom Eastep wrote: > On 6/6/2014 7:56 AM, pi-rho wrote: > >> >> I believe I've found the cause and have attached a patch which corrects >> the issue (usr/shorewall/Shorewall/Misc.pm). > > Applied. Thanks! >
This defect had already been fixed in Shorewall 4.5.21.9 under a
different description:
4) When FASTACCEPT=Yes, ESTABLISHED,RELATED accept rules were
incorrectly omitted from an interfaces's _in and _fwd chains when
'rpfilter' was specified in the interfaces's entry in
/etc/shorewall[6]/interfaces.
The release notes in 4.6.1 still mention your patch, but there was no
change to the code.
Thanks,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/NeoTech
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
