Hey all:
I was trolling around fedora extras, and discovered that Shorewall was no longer
listed
as un-maintained, 2.4.5 was released on Sept. 5, in the repo Oct. 8.
I''m going to monitor
the time it takes from when Tom releases, to its appearance in the extras repo.
http://fedoraproject.org/extras/4/i386/repodata/repoview/shorewall-0-2.4.5-2.fc4.html
Knowing that I used the 2.4.5-1 rpm, I did a "yum update" and
shorewall was updated to
2.4.5-2, from the repo. Fedora user''s with complex setups may not wish
this to happen
before they''re ready to migrate to the next release. To prevent this
behavior, in the
fedora-extras.repo file, add "exclude=shorewall".
The only other difference I came across was this patch:
cat redhat/SOURCES/shorewall-2.4.4-init.patch
--------------
diff -Naur shorewall-2.4.4.original/init.sh shorewall-2.4.4/init.sh
--- shorewall-2.4.4.original/init.sh 2005-07-13 16:59:06.000000000 -0400
+++ shorewall-2.4.4/init.sh 2005-09-28 14:04:12.000000000 -0400
@@ -33,17 +33,18 @@
# shorewall restart Restarts the firewall
# shorewall stop Stops the firewall
# shorewall status Displays firewall status
+# shorewall reload Restarts the firewall
#
-# chkconfig: 2345 25 90
+# chkconfig: - 25 90
# description: Packet filtering firewall
### BEGIN INIT INFO
# Provides: shorewall
# Required-Start: $network
# Required-Stop:
-# Default-Start: 2 3 5
-# Default-Stop: 0 1 6
+# Default-Start:
+# Default-Stop: 0 1 2 3 4 5 6
# Description: starts and stops the shorewall firewall
### END INIT INFO
@@ -77,6 +78,11 @@
exec /sbin/shorewall $OPTIONS start
;;
+ reload)
+
+ exec /sbin/shorewall restart
+ ;;
+
stop|restart|status)
exec /sbin/shorewall $@
---------------
Which, if I read that correctly, there is no default start values, so shorewall
will not start
on a reboot. ls /etc/rc.d/rc3.d | grep shore
K90shorewall
Good thing I didn''t reboot....
So I "chkconfig --level 235 shorewall on"
and I get this:
ls /etc/rc.d/rc3.d | grep shore
S50shorewall
That is not the "25" in the chkconfig line....Anybody know why?
Just want to give the fedora users a heads up, before someone gets caught off
guard.
Jerry
-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information