Jonathan Underwood wrote:
OK, understood, I won't apply anything regarding iproute2.
Presumably the following hunk is still useful though:
diff -Naur -X /home/teastep/shorewall/trunk/tools/build/exclude.txt
shorewall-perl-4.0.7.1/Shorewall/Chains.pm
shorewall-perl-4.0.7.2/Shorewall/Chains.pm
--- shorewall-perl-4.0.7.1/Shorewall/Chains.pm 2007-12-28
21:38:42.000000000 -0800
+++ shorewall-perl-4.0.7.2/Shorewall/Chains.pm 2008-01-02
08:07:57.000000000 -0800
@@ -1131,7 +1131,7 @@
validate_mark $testval;
- $testval .= '/0xFF' unless ( $testval =~ '/' );
+ $testval = join( '/', $testval, in_hex( $mask ) ) unless (
$testval =~ '/' );
"$match $testval ";
Yes. The following is the only hunk which should be omitted:
diff -Naur -X /home/teastep/shorewall/trunk/tools/build/exclude.txt
shorewall-perl-4.0.7.1/Shorewall/Tc.pm shorewall-perl-4.0.7.2/Shorewall/Tc.pm
--- shorewall-perl-4.0.7.1/Shorewall/Tc.pm 2007-11-16 07:57:37.000000000
-0800
+++ shorewall-perl-4.0.7.2/Shorewall/Tc.pm 2008-01-02 08:02:43.000000000
-0800
@@ -458,7 +458,7 @@
if ( $inband ) {
emit ( "run_tc qdisc add dev $device handle ffff: ingress",
- "run_tc filter add dev $device parent ffff: protocol ip prio 50
u32 match ip src 0.0.0.0/0 police rate ${inband}kbit burst 10k drop flowid :1"
+ "run_tc filter add dev $device parent ffff: protocol ip prio 50
u32 match ip src 0.0.0.0/0 police rate ${inband}kbit burst 10k drop"
);
}
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ [EMAIL PROTECTED]
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
