Here is the current known problem list. Fixes are available at http://www.shorewall.net/pub/shorewall/3.4/shorewall-3.4.4/errata/
Only problem 4) is likely to have any widespread impact.
1) Traffic shaping fails when the 'sed' utility is supplied by
Busybox.
Either:
a) Replace /usr/share/shorewall/lib.tc with the 'lib.tc' file from
the errata/Shorewall sub-directory;
or
b) Patch /usr/share/shorewall/lib.tc with the 'patch-3.4.4-1.diff'
file from the errata/Shorewall sub-directory.
2) Version 3.4.4 erroneously accepts the values On, Off, on, off, ON
and OFF for the IP_FORWARDING option. These values are treated
like 'Keep' which means that they are effectively ignored.
Either:
a) Replace /usr/share/shorewall/lib.config with the 'lib.config'
file from the errata/Shorewall sub-directory;
or
b) Patch /usr/share/shorewall/lib.config with the
'patch-3.4.4-2.diff' file from the errata/Shorewall
sub-directory.
3) If 'routeback' and 'detectnets' are specified on an interface,
limited broadcasts (to 255.255.255.255) are dropped when forwarded
through the interface. This can cause broadcast-based
applications to fail when running through a bridge with
'detectnets'.
Either:
a) Replace /usr/share/shorewall/compiler with the 'compiler'
file from the errata/Shorewall sub-directory;
or
b) Patch /usr/share/shorewall/compiler with the
'patch-3.4.4-3.diff' file from the errata/Shorewall
sub-directory.
4) The 'shorewall hits' command produces no output.
Either:
a) Replace /sbin/shorewall with the 'shorewall' file from the
errata/Shorewall sub-directory;
or
b) Patch /sbin/shorewall with the 'patch-3.4.4-4.diff' file from the
errata/Shorewall sub-directory.
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ [EMAIL PROTECTED]
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
