> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > On 11/04/2016 12:28 AM, Simon Matter wrote: >>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 >>> >>> The Shorewall Team is pleased to announce the availability of >>> Shorewall 5.0.14. >> >> Hi Tom and Team, >> >> Thanks for the new release! >> >> I just found a little issue, it can be seen by comparing the >> samples as shown below. First I was trying what kind of flag the >> single "1" is, until I found the obvious. Could this be related to >> a problem in the update command? If so maybe it would be good to >> find a solution before people just update blindly? >> >> Thanks and Regards, Simon >> >> $ diff three-interfaces/snat two-interfaces/snat -Nau --- >> three-interfaces/snat 2016-11-03 23:06:38.000000000 +0100 +++ >> two-interfaces/snat 2016-11-03 23:06:38.000000000 +0100 @@ -1,5 >> +1,5 @@ # -# Shorewall - Sample SNAT/Masqueradee File for >> three-interface configuration. +# Shorewall - Sample >> SNAT/Masqueradee File for two-interface configuration. # Copyright >> (C) 2006-2016 by the Shorewall Team # # This library is free >> software; you can redistribute it and/or @@ -15,9 +15,9 @@ >> ########################################################################################################################################### >> >> > #ACTION SOURCE DEST >> PROTO PORT IPSEC MARK USER SWITCH ORIGDEST >> PROBABILITY # -# Rules generated from masq file >> /home/teastep/shorewall/trunk/Shorewall/Samples/three-interfaces/masq >> by Shorewall 5.0.13-RC1 - Sat Oct 15 11:43:47 PDT 2016 +# Rules >> generated from masq file >> /home/teastep/shorewall/trunk/Shorewall/Samples/two-interfaces/masq >> by Shorewall 5.0.13-RC1 - Sat Oct 15 11:41:40 PDT 2016 # MASQUERADE >> 10.0.0.0/8,\ 169.254.0.0/16,\ 172.16.0.0/12,\ - >> 192.168.0.0/16 eth0 + 1 92.168.0.0/16 >> eth0 >> >> >> > > Hi Simon, > > That isn't a bug in 'update' -- I obviously did that when I > reformatted the two-interface snat file producted by 'update'. But > that error will affect new installs that use the two-interface sample, > so I will want to correct it in the next day or so :-(
Hi Tom, While we are at it, and because it's the first time I tried the update command, is it expected behavior that all params are evaluated and replaced with the current values in the converted file? Thanks, Simon ------------------------------------------------------------------------------ Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today. http://sdm.link/xeonphi _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
