This RC corrects a couple of problems in RC1 and or earlier releases.
You may download from:

http://www.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.7-RC2
ftp://ftp.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.7-RC2

Problems corrected in this RC:

1.  When optimization 4 was enabled (OPTIMIZE = 4, 5, 6 or 7), then
    iptables-restore failed under the following circumstances.:

    a) There is a zone defined in /etc/shorewall/hosts with a network
       address other than 0.0.0.0/0.

    b) There is a DNAT or REDIRECT rule that specifies an IP address
       (host or network) in the SOURCE column.

2.  Under the following conditions, a Perl run-time diagnostic is
    issued:

        - Optimization 2 is enabled
        - An interface is associated with a single zone Z
        - The interface is described with an option such as 'dhcp' that
          requires netfilter rules
        - The Z->fw or fw->Z policy is ACCEPT

    In addition to causing the diagnostic, this set of circumstances
    causes the rules implementing the option(s) to be omitted from the
    generated ruleset.

3.  Previously, the 'nosmurfs' option was ignored in IPv6
    compilations. As part of this fix, 'nosmurfs' handling when
    SMURF_LOG_LEVEL is specified has been improved for both IPv4 and
    IPv6 and the 'smurfs' chain is no longer created and populated when
    there are no 'nosmurfs' interfaces or networks.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to