This is the latest development release and may be found at: http://shorewall.net/pub/shorewall/2.3/shorewall-2.3.1 ftp://shorewall.net/pub/shorewall/2.3/shorewall-2.3.1 This release changes the way that SAVE_IPSETS=Yes works to try to make it harder to shoot yourself in the foot. Read the release notes carefully. In addition, there are two problems corrected: 1) A typo in the ''tunnel'' script has been corrected (thanks to Patrik Varmecký). 2) Previously, if "shorewall save" was done with SAVE_IPSETS=Yes then Shorewall would fail fast start on reboot because the ipset modules were not loaded. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Tom Eastep wrote:> > 2) Previously, if "shorewall save" was done with SAVE_IPSETS=Yes then > Shorewall would fail fast start on reboot because the ipset modules > were not loaded.Those of you who downloaded 2.3.1 right after I sent the announcement didn''t get all of this change. Please check the md5sum of what you downloaded against http://shorewall.net/pub/shorewall/2.3/shorewall-2.3.1/2.3.1-md5sums to be sure that you have the correct code. If you don''t have the correct code, you can simply download http://shorewall.net/pub/shorewall/2.3/shorewall-2.3.1/errata/shorewall and install it in /sbin/shorewall. Sorry for the inconvenience. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key