Tom Eastep
2016-12-06 17:43:04 UTC
Shorewall 5.0.15 is now available for download. This will be the last
of the Shorewall 5.0 series; I will be releasing Shorewall 5.1.0 Beta
1 in the next week or so.
Problems Corrected:
1) This release includes defect repair through Shorewall 5.0.14.1.
2) Previously, when the 'update' command transformed a superseded
file's contents into a newer file, with the exception of the
'notrack' -> 'conntrack' conversion, the transformation was
incomplete:
a) All shell variables were expanded in the converted file.
b) Any lines omitted by compiler directives ( ?if.... etc. ) were
also omitted from the converted file.
These deficiencies have been corrected. Now, shell variables are
preserved in the converted file and omitted lines are now
translated.
EXCEPTIONS: Because the translations of the 'blacklist' and
'routestopped' files are not 1:1, omitted lines and compiler
directives are not transferred to the converted files. If either
are present, the compiler issues a warning:
WARNING: "Omitted rules and compiler directives were not
translated
3) In earlier versions, when USE_DEFAULT_RT=No in shorewall6.conf,
the generated script would attempt to copy fe80:* routes from the
DUPLICATE routing table to provider tables, which could fail.
Now, the generated script ignores these routes.
4) Previously, if the 'restore' command failed, the failure was not
corrected reflected in the exit status. The exit status now
correctly indicates the outcome of the command.
5) A defect in OPTIMIZE level 4 processing, could previously result in
the incorrect omission of a -i, -o, -s or -d rule option in an
optimized rules. That defect has been corrected.
New Features:
1) The 'show macro' command now uses the configured PAGER, if any.
2) The PAGER may now be deactivated through use of the '-p' option
(e.g., "shorewall -p show" ).
Thank you for using Shorewall,
- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
of the Shorewall 5.0 series; I will be releasing Shorewall 5.1.0 Beta
1 in the next week or so.
Problems Corrected:
1) This release includes defect repair through Shorewall 5.0.14.1.
2) Previously, when the 'update' command transformed a superseded
file's contents into a newer file, with the exception of the
'notrack' -> 'conntrack' conversion, the transformation was
incomplete:
a) All shell variables were expanded in the converted file.
b) Any lines omitted by compiler directives ( ?if.... etc. ) were
also omitted from the converted file.
These deficiencies have been corrected. Now, shell variables are
preserved in the converted file and omitted lines are now
translated.
EXCEPTIONS: Because the translations of the 'blacklist' and
'routestopped' files are not 1:1, omitted lines and compiler
directives are not transferred to the converted files. If either
are present, the compiler issues a warning:
WARNING: "Omitted rules and compiler directives were not
translated
3) In earlier versions, when USE_DEFAULT_RT=No in shorewall6.conf,
the generated script would attempt to copy fe80:* routes from the
DUPLICATE routing table to provider tables, which could fail.
Now, the generated script ignores these routes.
4) Previously, if the 'restore' command failed, the failure was not
corrected reflected in the exit status. The exit status now
correctly indicates the outcome of the command.
5) A defect in OPTIMIZE level 4 processing, could previously result in
the incorrect omission of a -i, -o, -s or -d rule option in an
optimized rules. That defect has been corrected.
New Features:
1) The 'show macro' command now uses the configured PAGER, if any.
2) The PAGER may now be deactivated through use of the '-p' option
(e.g., "shorewall -p show" ).
Thank you for using Shorewall,
- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________