[Shorewall-users] Shorewall 5.0.13.3

[Tom Eastep]

Shorewall 5.0.13.3 is now available for download. After I had built
and tagged 5.0.13.2, I discovered another issue so that's why we are
skipping from .1 to .3.

Problems Corrected:

5.0.13.3

1) When the effective verbosity was < 2 and the 'disconnect' option
was specified in DYNAMIC_BLACKLIST, a successful 'blacklist'
command would issue the following error message and would produce
no other output.

sed: -e expression #1, char 8: unknown command: `/'

5.0.13.2

1) Fix number 1 in 5.0.13.1 uncovered a latent defect that was not
discovered until after release. The defect caused the compiler to
crash when all of the following were true:

1) LOAD_HELPERS_ONLY=Yes and a capabilities file was not being
used.

2) SAVE_IPSETS=Yes or SAVE_IPSETS=ipv4 in shorewall.conf.

3) Ipset-based dynamic blacklisting was being used.

4) No other ipset-based rules appeared in the configuration.

This defect has been corrected.

Thank you for using Shorewall.

- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________

[Steven Jan Springl]

Tom

The attached config. produces the following messages:

Compiling /etc/shorewall92/mangle...

Use of uninitialized value in bitwise and (&)
at /usr/share/shorewall/Shorewall/Rules.pm line 4826, <$currentfile>
line 6.

Use of uninitialized value in concatenation (.) or string
at /usr/share/shorewall/Shorewall/Rules.pm line 4826, <$currentfile>
line 6.

Steven.

[Tom Eastep]

Post by Steven Jan Springl
Tom
Compiling /etc/shorewall92/mangle...
Use of uninitialized value in bitwise and (&) at
/usr/share/shorewall/Shorewall/Rules.pm line 4826, <$currentfile>
line 6.
Use of uninitialized value in concatenation (.) or string at
/usr/share/shorewall/Shorewall/Rules.pm line 4826, <$currentfile>
line 6.

With the attached patch, the compiler correctly flags the presence of
an output interface in a PREROUTING rule.

Thanks, Steven.

- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________

[Steven Jan Springl]

On Sun, 23 Oct 2016 10:13:20 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Post by Steven Jan Springl
Tom
Compiling /etc/shorewall92/mangle...
Use of uninitialized value in bitwise and (&) at
/usr/share/shorewall/Shorewall/Rules.pm line 4826, <$currentfile>
line 6.
Use of uninitialized value in concatenation (.) or string at
/usr/share/shorewall/Shorewall/Rules.pm line 4826, <$currentfile>
line 6.

With the attached patch, the compiler correctly flags the presence of
an output interface in a PREROUTING rule.
Thanks, Steven.
- -Tom

Tom

Confirmed, the patch fixes the issue.

Thanks.

Steven.