[Shorewall-devel] send patchs

Juan J. Prieto
Fri, 20 May 2005 10:12:15 -0000

Hi all,

  I''m working on a patch for shorewall to make it run with a Crossbeam
X40 machine (www.crossbeamsystems.com) and I would like to know where to
send it, is this list the correct location?.

  The patch is necesary because of Crossbeam X series running mode: when
you make a shorewall start, restart or clear, there are a packet
dropping until shorewall is Started or cleaned. At this moment the CPM
Crossbeam module send a reset signal to the APM module (where the Linux
system is running shorewall). With this patch, if you declare
CROSSBEAM=yes in shorewall.conf, first shorewall will set main policies
to ACCEPT, then setcontinue in chains INPUT, FORWARD and OUTPUT, insert
particular rules for Crossbeam backbone, and finally set main policies
to DROP.

  Also, some of our clients need to permit all new traffic during
iptables compilling (shorewall start or restart) because they have a
great number of zones and rules, so I have had to add a new
configuration variable POLICY_ACCEPT_STARTING. If it is set to
''Yes'',
then DROP default policy will be added at the end of compilling period.

  Regards.


cheer up, Tom!

--
Juan Jes?s Prieto - Consultor?a TI
jjprieto@eneotecnologia.com
http://www.eneotecnologia.com
---------------------------------------
fingerprint: BFC2 0370 7708 F800 0BEC  60A4 EC71 4BB1 CC85 99F5