Revisions of shorewall
buildservice-autocommit
accepted
request 280759
from
Togan Muftuoglu (toganm)
(revision 189)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 280758
from
Togan Muftuoglu (toganm)
(revision 188)
- Update to version 4.6.5.4 For more details see changelog.txt and releasenotes.txt * The '-c' option of the 'dump' and 'show routing' commands is now documented. * The handling of the 'DIGEST' environmental variable has been corrected in the Shorewall installer. Previously, specifying that option would not correctly update the Chains module which led to a Perl compilation failure. * Handling of ipset names in PORT columns has been corrected. Previously, such usage resulted in an invalid iptables rule being generated.
buildservice-autocommit
accepted
request 265684
from
Togan Muftuoglu (toganm)
(revision 187)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 265683
from
Togan Muftuoglu (toganm)
(revision 186)
- Update to version 4.6.5.3 For more details see changelog.txt and releasenotes.txt * The Shorewall-init scripts were using the incorrect variable to set the state directory. Correction provided by Roberto Sanchez. * For normal dynamic zones, the 'add' command failed with a diagnostic such as: ERROR: Zone ast, interface net0 does not have a dynamic host list * When a mark range was used in the marks (tcrules) file, a run-time error occurred while attempting to load the generated ruleset.
buildservice-autocommit
accepted
request 264965
from
Togan Muftuoglu (toganm)
(revision 185)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 264937
from
Dominique Leuenberger (dimstar)
(revision 184)
- Do not buildrequire openSUSE-release: it's a daily changing package and causes thus frequent rebuilds for no reason. configure and install both try to guess the target from /etc/os-release. So we simply inject BUILD=suse for the openSUSE case.
buildservice-autocommit
accepted
request 262801
from
Togan Muftuoglu (toganm)
(revision 183)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 262800
from
Togan Muftuoglu (toganm)
(revision 182)
- Update to version 4.6.5.2 For more details see changelog.txt and releasenotes.txt * LOG_BACKEND=LOG failed at run-time for all but the most recent kernels. - Changes in 4.6.5.1 * The generated script can now detect an gateway address assigned by later versions of that program (Alan Barrett). * In 4.6.5, the bash-based configure script would issue the following diagnostic if SERVICEDIR was not specified in the shorewallrc file: ./configure: line 199: [SERVICEDIR]=: command not found This was compounded by the fact that all of the released shorewallrc files still specified SYSTEMDDIR rather than SERVICEDIR (Evangelos Foutras) * The shorewallrc.archlinux file now reflects a change in SBINDIR that occurred in Arch Linux in mid 2013 (Evangelos Foutras).
buildservice-autocommit
accepted
request 259742
from
Togan Muftuoglu (toganm)
(revision 181)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 259741
from
Togan Muftuoglu (toganm)
(revision 180)
- Update to versioin 4.6.4.3 For more details see changelog.txt and releasenotes.txt * The fix for LOG_BACKEND in 4.6.4.2 worked on some older distributions but not on newer ones. This release fixes the problem in the remaining cases.
buildservice-autocommit
accepted
request 250657
from
Togan Muftuoglu (toganm)
(revision 179)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 250656
from
Togan Muftuoglu (toganm)
(revision 178)
- Update to version 4.6.3.4 For more details see changelog.txt and releasenotes.txt * The 'Universal' configurations previously failed to start with the diagnostic ERROR: No network interface available: Firewall state not changed * A defect introduced in 4.6.3 prevented Shorewall-init from starting when required interfaces were present. * Some defect repair from 4.6.2.5 was inadvertently omitted from 4.6.3. In particular, the fix for Shorewall-init on systems running systemd was omitted. Those fixes have now been merged into this release.
buildservice-autocommit
accepted
request 249074
from
Togan Muftuoglu (toganm)
(revision 177)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 249073
from
Togan Muftuoglu (toganm)
(revision 176)
- Update to version 4.6.3.3 For more details see changelog.txt and releasenotes.txt * Including a PREROUTING SECTION in the accounting file unconditionally resulted in a fatal error: ERROR: The PREROUTING SECTION is not allowed when ACCOUNTING_TABLE=filter * Previously, the compiler could generate many superfluous rules to enforce the 'tcpflags', 'nosmurfs' and 'maclist' interface options.
buildservice-autocommit
accepted
request 247479
from
Togan Muftuoglu (toganm)
(revision 175)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 247477
from
Togan Muftuoglu (toganm)
(revision 174)
- Update to version 4.6.3.2 For more details see changelog.txt and releasenotes.txt * The shorewall[6]-actions manpages previously contained incorrect examples of the usage of table names with builtin actions. Incorrect: FOOBAR,filter,mangle Correct: FOOBAR builtin,filters,mangle * Previously, if /etc/iproute2/rt_tables was not writeable, then KEEP_RT_TABLES=No behaved like KEEP_RT_TABLES=Yes. Now, a warning message is issued if that file is not writeable and KEEP_RT_TABLES is set to No. WARNING: /etc/iproute2/rt_tables is missing or is not writeable * In earlier 4.6.3 versions, the help text from shorewall-lite and shorewall6-lite included two versions of the 'run' command. run <command> [ <parameter> ... ] .. run <function> [ <parameter> ... ] The second one has now been deleted. * New Features: Eric Teeter has contributed a Citrix Goto Meeting macro.
buildservice-autocommit
accepted
request 247002
from
Togan Muftuoglu (toganm)
(revision 173)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 247001
from
Togan Muftuoglu (toganm)
(revision 172)
- Update to version 4.6.3.1 For more details see changelog.txt and releasenotes.tx * The DNSAmp action released in 4.6.3 matched more packets than it should have. That has now been corrected. * The handling of REJECT in IP[6]TABLES rules has been clarified inthe shorewall-rules(5) and shorewall6-rules(5) manpages. * The following misleading error message has now been corrected: ERROR: The xxx TARGET is now allowed in the filter table The message now reads: ERROR: The xxx TARGET is not allowed in the filter table - Spec fixes * Fixed shorewall-init requires so it needs shoreline-firewall which is an alias for shorewall shorewall6 shorewall-lite and shorewall6-lite packages * shorewall-init package was missing a rc link
buildservice-autocommit
accepted
request 244767
from
Togan Muftuoglu (toganm)
(revision 171)
baserev update by copy to link target
Togan Muftuoglu (toganm)
accepted
request 244766
from
Togan Muftuoglu (toganm)
(revision 170)
- Update to version 4.6.2.5 For more details see changelog.txt and releasenotes.txt * Previously, when an interface specified the 'physical=' option and the physical interface name was specified in the INTERFACES column of the providers file, compilation would fail with diagnostics similar to the following: Use of uninitialized value $physicalal in pattern match (m//) at /usr/lib/perl5/vendor_perl/5.18.1/ Shorewall/Providers.pm line 463, <$currentfile> line ERROR:ERROR A provider interface must have at least one associated zone /zoneopt/etc/shorewall/providers (line 2) * Shorewall-init now works correctly on systems with systemd. By Louis Lagendijk. - Remove backported patches * PHYSICALNAME.patch * 0001-Modify-the-preceding-fix-to-work-with-wildcard-inter.patch
Displaying revisions 101 - 120 of 289