On Sun, 27 Dec 2009 08:10:06 -0800
Tom Eastep <[email protected]> wrote:

> On Sun, 27 Dec 2009 07:58:39 -0800
> Tom Eastep <[email protected]> wrote:
> 
> > Shorewall 4.5.0 is now ready for testing.
> > 
> > ----------------------------------------------------------------------------
> >                        K N O W N  P R O B L E M S
> > ----------------------------------------------------------------------------
> > 
> > 1)  There is a syntax error in /sbin/shorewall. Patch is attached.
> > 
> > 2)  Specifying icmp or icmpv6 in /etc/shorewall/tcpri results in an
> > error. I'll provide a fix later today.
> > 
> 
> This is GIT commit 6fa5af81645312bcb2aef842f99167687adb2341.
> 
> Patch is also attached.

I should mention that if you use simple traffic shaping on a slow
congested link that is monitored with LSM, it is a good idea to add
this line to /etc/shorewall/tcpri:

        1       icmp    8

Otherwise, you may find the link bouncing up and down like a rubber
ball.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: PGP signature

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to