- Update to version 4.5.21 For more details see changelog.txt and
releasenotes.txt
* ip[6]tables 1.4.20 introduced an incompatible change that
causes the program to fail if there is another instance of either
iptables or ip6tables already running. This behavior can be avoided
if the new -w option is specified.
To work around this problem, the compiler now uses the -w
option (when available) during capabilities determination so that
shorewall and shorewall6 compilations can proceed in parallel.
* Previously, the Shorewall-init installer unconditionally
installed the sysconfig file even when a different SYSCONFFILE was
specified. (Thomas D).
* /sbin/shorewall-init now includes the correct SYSCONFDIR name
in its error message that reports the absense of
${SYSCONFDIR}/shorewall-init. (Thomas D).
* /sbin/shorewall-init and the Shorewall-init SysV init scripts
now honor the setting of $OPTIONS.
* The -lite installers now look in ${SHAREDIR} for the
coreversion file rather than in /usr/share/.
* If a Shorewall-lite installation used an
/etc/shorewall-lite/vardir file to set a non-standard state
directory, the administrative system would send the firewall
and firewall.conf files to the wrong directory on the firewall
system.
* Previously, the compiler verified 'monthdays' specifications in
the rules TIME column, but failed to include --monthdays in the
generated rule. That omission has been corrected.
* The Multicast DNS macros (mDNS and mDNSbi) now allow the entire
non-priv port range (1024-65535) for the the dynamic unicast
port. Previously, only the Linux 2.6+ dynamic port range (forwarded request 202077 from toganm)