Shorewall 2.4.3 is now available at your favorite download site. Problems Corrected: 1. Shorewall is no longer dependent on the ''which'' utility. 2. The ''shorewall add'' command failed if there existed a zone in the configuration that specified the ''ipsec'' option in /etc/shorewall/hosts. 3. Shorewall is no longer dependent on /bin/echo. 4. A CLASSIFY rule with $FW in the SOURCE column (tcrules) no longer results in a "shorewall start" error. 5. You may now use port lists in the DEST PORT and SOURCE PORT columns of the /etc/shorewall/accounting file. 6. The "shorewall show capabilities" command now accurately reports the availability of "Packet type match" independent of the setting of PKTTYPE in shorewall.conf. 7. Thanks to Tuomo Soini, all of the files have been significantly cleaned up in terms of formatting and extra white-space. New Features: 1. New Allow.Submission and Allow.NTPbrd actions have been added. Users of the Allow.NTP action that use NTP broadcasting should switch to use of Allow.NTPbrd instead. 2. The kernel version string is now included in the output of "shorewall status". -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
I get a lot of warnings off an update rpm -Uvh on a SuSE system - user "teastep" doesn''t exist I beg to differ, he''s alive and well in Washington ... (used the Washington state HTTP) download Tom Eastep <teastep@shorewall.net> Sent by: shorewall-users-admin@lists.sourceforge.net 08/16/05 08:12 AM Please respond to shorewall-users@lists.sourceforge.net To Shorewall Announcements <shorewall-announce@lists.sourceforge.net>, Shorewall Users <shorewall-users@lists.sourceforge.net> cc Subject [Shorewall-users] Shorewall 2.4.3 Shorewall 2.4.3 is now available at your favorite download site. Problems Corrected: 1. Shorewall is no longer dependent on the ''which'' utility. 2. The ''shorewall add'' command failed if there existed a zone in the configuration that specified the ''ipsec'' option in /etc/shorewall/hosts. 3. Shorewall is no longer dependent on /bin/echo. 4. A CLASSIFY rule with $FW in the SOURCE column (tcrules) no longer results in a "shorewall start" error. 5. You may now use port lists in the DEST PORT and SOURCE PORT columns of the /etc/shorewall/accounting file. 6. The "shorewall show capabilities" command now accurately reports the availability of "Packet type match" independent of the setting of PKTTYPE in shorewall.conf. 7. Thanks to Tuomo Soini, all of the files have been significantly cleaned up in terms of formatting and extra white-space. New Features: 1. New Allow.Submission and Allow.NTPbrd actions have been added. Users of the Allow.NTP action that use NTP broadcasting should switch to use of Allow.NTPbrd instead. 2. The kernel version string is now included in the output of "shorewall status". -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Bill.Light@kp.org wrote:> > I get a lot of warnings off an update rpm -Uvh on a SuSE system - > user "teastep" doesn''t exist >This is going to be a "feature" of Shorewall until Sourceforge removes the 5 hour delay between updates to developer CVS and updates to anonymous CVS. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Tom Eastep wrote:>Shorewall 2.4.3 is now available at your favorite download site. > > >Mandrake packages at http://www.monkeynoodle.org/comp/net/shorewall/ -- Jack at Monkeynoodle dot Org : It''s a Scientific Venture! "I spent all me tin with the ladies drinking gin, so across the Western ocean I must wander." -- All for Me Grog, traditional ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
If I perform a rpm upgrade , rpm -Uvh shorewall-...............,rpm existing configration files will be overwrite ? ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
Adrian Mak escribió:> If I perform a rpm upgrade , rpm -Uvh shorewall-...............,rpm > existing configration files will be overwrite ? >no.. and upgrade will not overwirte your config files. remember to use "F" instaed of "U" ;-) -- Cristian Rodriguez R. perl -e ''$_=pack(c5,0105,0107,0123,0132,(1<<3)+2);y[A-Z][N-ZA-M];print;''