Shorewall 5.0.7 Beta 4 is now available for testing. Problems Corrected Since Beta 3:
1) The '&' (and) and '|' (or) symbols were previously ignored when
the action was CONNMARK (mangle file). These symbols now work as
documented.
2) When 'DOCKER=Yes', 'check -r' would previously fail. The command
now works correctly.
New Features Since Beta 3:
1) A new 'audit' action option has been added. Such actions are
expected to have at least two parameters; the first is a
target and the second is either omitted or is 'audit'.
Two existing standard actions (RST and NotSyn) have this
characteristic and they have been converted to use the 'audit'
option, eliminating embedded Perl within their bodies.
2) Within an action body, if a parameter is omitted in a DEFAULTS
statement, then the value of the corresponding action and Shorewall
variables is '-', while if the parameter is specified as '-' in
the parameter list, the value of the variables is '' if
expanded before the DEFAULTS statement.
Additionally, when an expression is evaluated, the value 0
evaluates as false; so '?IF @n' and 'IF $n' both fail if the nth
parameter is passed with value zero.
To make testing of the presense of parameters more efficient and
uniform, an new function has been added for use in ?IF and
?ELSEIF:
?IF [!] passed(<variable>)
where <variable> is an action or Shoreall variable.
'passed(@n)' and 'passed($n)' evaluate to true if the nth parameter
is not empty and its contents are other than '-'. If '!' is
present, the result is inverted.
In this simple form, the expression is evaluated by the compiler
without having to invoke the (expensive) Perl exec() function. The
'passed' function may also be used in more complex expressions, but
exec() will be invoked to evaluate those expressions.
3) The MARK and CONNMARK targets are now available in the rules file,
macros, and actions. Mark ranges are not currently supported with
these targets.
Thank you for testing,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
