Shorewall 4.6.13 Beta 1 is now available for testing. I had hoped to make 4.6.12 the last of the 4.6 releases, but my current experience with Shorewall 5 suggests that the 'update' command needs further enhancement so that users can prepare for Shorewall 5 while still running a 4.6 release.
Problems Corrected:
1) The 'rules' file manpages have been corrected regarding the packets
that are processed by rules in the NEW section.
2) Parsing of IPv6 address ranges has been corrected. Previously, use
of ranges resulted in 'Invalid IPv6 Address' errors.
3) The shorewall6-hosts man page has been corrected to show the
proper contents of the HOST(S) column.
4) Previously, INLINE statements in the mangle file were not
recognized if a chain designator (:F, :P, etc.) followed
INLINE(...). As a consequence, additional matches following a
semicolon were interpreted as column/value pairs unless
INLINE_MATCHES=Yes, resulting in compilation failure.
New Features:
1) 'update -t' now converts both the tcrules and tos files.
2) 'second' and 'minute' are now allowed in the LOGLIMIT
specification in place of 'sec' and 'min' respectively.
3) The 'update' command now converts additional deprecated option
settings:
- LOGRATE/LOGBURST are converted to the equivalent LOGLIMIT
setting.
- BLACKLISTNEWONLY is now converted to the equivalent BLACKLIST
setting.
4) Two settings now have more reasonable defaults if they don't appear
in the .conf file being updated:
- USE_DEFAULT_RT now defaults to No
- EXPORTMODULES now defaults to No.
Thank you for testing,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
