Shorewall 5.0.7 RC 1 is now available for testing. Changes since Beta 4:
1) The compiler now handles multiple invocations of the same mangle
action correctly.
2) Previously, the specified linklayer, overhead, mtu, mpu and tsize
were not applied to ingress qdiscs that provide IN-BANDWIDTH
limiting. That has been corrected so that these options also apply
to inbound traffic.
IMPORTANT: If you have specified linklayer, overhead, etc., then
after this fix installed, your inbound speed will be less than it
was before the fix. You are advised to re-test and possibly adjust
your IN-BANDWIDTH accordingly.
3) The syntax which Shorewall previously used to define ingress
filters is misinterpreted by the tc utility, with the result that
rather than dropping packets exceeding the IN-BANDWIDTH, the filter
instead reclassified them. That caused 'packet reclassify loop'
errors during periods of high inbound traffic. The compiler now
generates the options in the 'tc add filter' command in an order
that tc handles correctly.
4) If a log level was specified in one of the *_DEFAULT options,
the compiler would previously raise a fatal error when applying the
default action. That has been corrected.
Thank you for testing,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785351&iu=/4140
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
