-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 05/19/2017 07:36 AM, Thomas Deutschmann wrote: > Hi, > > while preparing the move to shorewall-5.1.x in Gentoo (yes, I know > we are late, sorry for that!) I noticed that the new default > configuration file (/etc/shorewall/shorewall.conf) will change > from > > LOGFORMAT="Shorewall:%s:%s:" > > to > > LOGFORMAT="%s %s " > > > Looks like commit c561f8eb0387003ba5e853265e76b2d92e258949 > introduced the change. > > I am wondering a little bit about that change: > > 1) It will break existing syslogger filters > > 2) It will break existing scripts parsing logs for firewall > content > > 3) Value doesn't represent default value (man page still says 'if > not set, we will use "Shorewall:%s:%s:" format' > > So did you really change the value by intention and want to keep it > in default shorewall.conf? >
The change was intentional; it allows for longer zone names than the previous setting. If an existing user performs a 'shorewall update' and LOGFORMAT is not set in the existing .conf file, then the setting will be updated to use "Shorewall:%s:%s", so that existing filters and parsing scripts will continue to work. What I can do to further help, is to update the manpages and Migration Considerations to describe the regular expressions that Shorewall and Shorewall6 use to locate Shorewall[6] log messages. - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJZHwjdAAoJEJbms/JCOk0QFwUP/ipLwjRylDaxL6L6Gt+exj7b 5/DoGbHYxkWJjaePrPJvySI/tbz0sN/ahcDHRK4eoxmWhkosSybCgaLWtPtRkRIM pBvwLfSs6PDgF140VYwdxiaHLZj1l8XBWxyQaSHZWd7ODpN1maPxw5R9qT3OqA7L 3oGsv6jpMSZYgTgz0i51lUVG6f8KrUZ/L+jGggawLTRX0wGAfQo8VeGovNIMXnzZ 7XD7V8wALBgDGFontBceO78pl02YnLRRWk6BlcWHQmbcKPxX7jBn47I/fYbloaIn LGobIMj3s8AlLoz87OCgSmvm1l8RltLmHxq3aNI4Nb033SNsU2Keg/qfuuFOeEeT XpZTBXeeICVy0eHNg3SvuHkHxNAO5aVkUaVmWbgrwHz9axAwA/Wj2UU3RA6DN47i zeYWhI5HJA0r1iZV7oM+hBHUhXHNHrUZaL6dKHKiN/SGaLZ6wzp3oU1w42k2kgX6 oyinEk+svLb1jq6UjW4XqBEqFv+szdfcUu2m2y1eNy/+a3jNBl8ksX1mkTOPzvLy VlXwE2D3V+ob8mOTXOV7mLdQp1xT50Uh57rlQF1hQZ4B48pB8ydQE2VrHugdgTTB pSkLUzOeBiKgvJ2Vj9RuOG1U+3nRDpPubr+qwvqI+cOQikIZGHCITU5ZBf6rR/mU GYaeXXj2WXceTOSPc8Ca =VOH9 -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
