Shorewall 5.1.7 RC 1 is now available for testing.

Problems Corrected Since Beta 2:

1)  Previously, there was a typo in IPv4 Example 5 in the
    shorewall-snat(5) manpage. The DEST column contained

        eth0+myset[dst]

    which should have been

        eth0:+myset[dst]

    That has been corrected.

2)  Previously, specifying an ipset name in the DEST column of the IPv4
    snat file had no effect. That has been corrected so that only
    connections whose destination matches the ipset are affected by the
    rule.

3)  Previously, passing an invalid vlsm to the 'ipcalc' command coult
    result in a series of shell diagnostics beginning with:

      shorewall: 3730: /home/teastep/bin/shorewall: Invalid VLSM: not
                                                    found

    That has been corrected so that the correct message is issued:

      ERROR: Invalid VLSM

    (Tuomo Soini)

4)  ADD_IP_ALIASES has defaulted to Yes for both Shorewall and
    Shorewall6, leading to 'not found' errors during
    start/reload/restart. Now, ADD_IP_ALIASES=No is the default for
    IPv6 and may not be changed.

5)  When Shorewall-init was configured to save ipsets, it could leave
    behind an empty or useless .tmp file if no ipsets were saved. Now
    that file is removed automatically.

New Features since 5.1.7 Beta 2:

1)  The Shorewall Event actions (IfEvent, SetEvent and ResetEvent) now
    accept DNAT and REDIRECT as the <action> argument. For DNAT, a
    server address must be specified in the DEST column. A server port
    may NOT be specified in the DEST column, so the port number cannot
    be changed by the action.

Thank you for testing,

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to