[Shorewall-devel] send patchs (for CROSSBEAM)

Paul Gear
Sun, 22 May 2005 13:16:41 -0000

Tom Eastep wrote:
> ...
> Thanks, Juan
>
> Guys: I''ll put Juan''s patch in 2.4.0 and I''ll
let you decide if you want
> to release it in 2.0 and 2.2.
> ...
> I have added the CROSSBEAM patch to 2.4.0 but I''m withholding the
> POLICY_ACCEPT_STARTING patch for now. I really don''t like the idea
of
>  an option that opens the firewall completely like this one does.
>
> I suspect that an option in shorewall.conf that works in conjunction
> with /etc/shorewall/routestopped would be more appropriate for both
> the 2.2 and 2.4 series (since 2.2.3, communication *between* hosts
> listed in routestopped is now enabled during [re]start).

It seems to me that both of these are very similar circumstances to my
issue a few weeks/months back about restarting shorewall on a
high-availability firewall running heartbeat.  In that case, it seems
that a more general approach that works in conjunction with routestopped
would be warranted.  Once we get CVS converted over to sf.net, i''ll do
a
bit of work on integrating them.

--
Paul
<http://paulgear.webhop.net>
--
Did you know?  Most email-borne viruses use a false sender address, so
you cannot track down the sender using that address.  Instead, keep your
virus scanning software up-to-date and just delete any suspicious emails
you receive.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature