On 02/10/2018 09:30 AM, Erich Titl wrote: > Hi > > I am running the LEAF instance of shorewall and I just upgraded to > > AP# shorewall status > Shorewall-5.1.9 Status at AP - Sat Feb 10 17:25:56 UTC 2018 > > Shorewall is running > State:Started Sat Feb 10 17:11:57 UTC 2018 from /etc/shorewall/ > (/var/lib/shorewall/firewall compiled Sat Feb 10 17:11:55 UTC 2018 by > Shorewall version 5.1.9) > > and running shorewall update gives me > > .... > Applying Policies... > Checking /usr/share/shorewall/deprecated/action.Reject for chain Reject... > WARNING: "You are using the deprecated Reject default action. Please > see http://www.shorewall.net/Actions.html > Checking /usr/share/shorewall/deprecated/action.Drop for chain Drop... > WARNING: "You are using the deprecated Drop default action. Please > see http://www.shorewall.net/Actions.html > Shorewall configuration verified > > should we just drop those actions in our tree >
Hi Erich, You should not drop these actions so long as configurations are still using them. Until a user's DROP_DEFAULT and REJECT_DEFAULT settings are changed to not use these actions, removing them will break the user's configuration. I plan to drop those actions from the 5.2 version of Shorewall, but that won't be released for some months yet. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
