-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Shorewall 5.0.10 Beta 2 is now available for testing.
Problems Corrected since Beta 1:
1) Previously, the 'update' commmand could result in updated files
having the user's default permissions rather than the permissions
of the original file. That has been corrected.
2) A number of update and update-compatibility issues have been
corrected:
a) <user>: (e.g., "fred:") is once again accepted in USER columns.
b) The USER column in the mangle file can once again be specified
when :T is the chain designator.
c) The 'notrack' file is now correctly appended to the 'mangle'
file during update.
d) IPMARK entries in 'tcrules' are now correctly converted into
the 'mangle' file.
New Features since Beta 1:
1) A new 'dbl' (Dynamic Blacklist) option is now available in the
'interfaces' file. Possible settings are:
none - equivalent to specifying 'nodbl'.
src - packets entering the firewall on the interface have their
source IP address checked against the ipset-based
blacklist.
dst - packets entering the firewall on the interface have their
destination IP address checked against the ipset-based
blacklist.
src-dst - packets entering the firewall on the interface have their
source IP address checked against the ipset-based
blacklist. Packets originating on the fireawll and
leaving through the interface have their destination IP
address checked against the ipset-based blacklist.
The normal setting for an internet-facing interface will be either
'src' or 'src-dst'. The normal setting for an internal interface
will be either 'none' or 'dst'.
Thank you for testing,
- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org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=rfkr
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
