-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Shorewall 5.0.14 Beta 2 is now available for testing.
Problems Corrected since Beta 1:
1) When the address variable for an optional interface was used, and
the interface did not have an IP address when the firewall was
started, then enabling the interface did not previously
create/alter the rules that use the address variable. Also, if the
IP address of a disabled interface changed, enabling the interface
did not update/add rules using the interface's gateway address
variable.
Now, if the IP address of a disabled optional interface
changes from its value (if any) when the netfilter ruleset was
instantiated, then after a successful 'enable', the ruleset is
automatically reloaded if the interface's address variable was
used.
Similarly, if 'detect' is specified as the GATEWAY for an optional
provider, then if the gateway at the time that the provider is
successfully enabled is different from that (if any) when the
netfilter ruleset was instantiated, then the ruleset is
automatically reloaded if the provider interface's run-time gateway
variable was used.
As part of this change, if an IP address is specified as the
GATEWAY for a provider, then the run-time gateway variable for the
provider's interface is expanded at compile time rather than at
runtime.
Example:
#PROVIDER NUMBER MARK DUPLICATE INTRFACE GATEWAY OPTIONS COPY
foo 1 1 - eth0 1.2.3.4 primary -
Then %eth0 will be expanded at compile time to '1.2.3.4'.
2) Several problems reported against Beta 1:
a) MASQUERADE+ was mis-handled in the snat file.
b) NONAT masq rules were translated incorrectly.
The fix for incorrect translation of +INLINE will be in the next
pre-release.
Thank you for testing,
- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
iQIcBAEBCAAGBQJYElYjAAoJEJbms/JCOk0QThoP/1lrXBQk0Z8dd0/MhRTP3KyM
6JjoRqshx1WQZc5mAs7PWeOWZl7XE9jiqVp3yIIRGcOeXat6Td+s9lykIz/DzR2A
PtcTGesYV6ILs7VU6jZGsrGGPi9YCrVwgyqKppu/tD14mOoSS88a6xSf/EIE1Shv
XSgANJIg0v9a1pEGd7gpNEIo4rYL1ryBT6ofE6Zuo9FPdKSnx1P540wx6qGORgLW
QzAL1zbjnfr53IiZ1K3tAPoDyxTfv8Hy2SMARjflAJmXv4sm1ks1izyMnWNtE5o8
ktbfI4QnRSDkI4aGvtv+pRYPTO1Yr9pmvlj4HjQxiPZEPOrDLdcoxrrgyeG36uX/
ctp754LEig+g8zmzdbqlM5W1T183XHVH3N8pachmNdal4cE/ve3q8Kj0VO9QazJX
OR4hwuZSSsjQ+e3TdeLJoJEWV+i1lT4aHn+/l5G8prep+IsliC6tEKQsWxxtHO8i
qGLv/0Uvfj73WlW/AtncKTCWnLC+2jO6XqrY6jTNuLOx6BFh8FnZm46m7smxIU6+
l+VXCBd0DFkdTh/tuQu6sPd0805RW3kevrXOfYHnI3JLtwhJjQ9BQXKOsXJ8+ej6
CSXlPk6RWr3ubq9CBAsLnUSgiqPtb+s+ZZI1EJSQiEit2isREFCyf6i72QtKnwrH
kV/Dx+tjmk7ZxDrFh0hS
=dbk3
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
The Command Line: Reinvented for Modern Developers
Did the resurgence of CLI tooling catch you by surprise?
Reconnect with the command line and become more productive.
Learn the new .NET and ASP.NET CLI. Get your free copy!
http://sdm.link/telerik
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel
