[Shorewall-users] Shorewall 5.1.1 Beta 2

[Tom Eastep]

Shorewall 5.1.1 Beta 2 is now available for testing.

Problems Corrected:

1) In Beta 1, optional interfaces that were not provider interfaces
caused a fatal error to be raised erroneously.

New Features:

1) The new 'Exact' setting for USE_DEFAULT_RT has been replaced with
a new configuration option.

Since the creation of the USE_DEFAULT_RT option, when
USE_DEFAULT_RT=Yes, 'balance=1' is assumed on all provider
interfaces unless 'fallback', 'load', 'primary', 'loose' or
'tproxy' is specified. This makes it awkward to define a provider
that does not generate a default route in either the 'balance' or
'default' routing tables; it is necessary to specify 'loose' then
add the routing rules that are suppressed by that option.

To address this issue, it is now possible to specify
BALANCE_PROVIDERS=No. When USE_DEFAULT_RT=Yes and
BALANCE_PROVIDERS=No and none of the above-listed options is
specified, the provider will generate no entry in the 'balance' or
'default routing tables.

All of the released shorewall[6].conf files now specify
BALANCE_PROVIDERS=No. The default value is Yes, to provide backward
compatibility with earlier releases. The setting is ignored when
USE_DEFAULT_RT=No.

Thank you for testing,

- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________