Shorewall users - Apr 2006 - Safest 3.1.x or 3.2.x release to consider for production?

Hello all,

I''m interested in the ''compile'' functionality of the
dev versions of
Shorewall, and I''d like to choose the one most likely to work for a
network
of about 30 users, doing simple proxyarp''ing and port blocking.

Just looking for a developer''s opinion on the version which would best
suit
my needs. I''ve had a good look through the release notes for each one,
and
see a lot of problems corrected ''from the previous version'',
but no known
problems listed in each distro''s "known_problems.txt" file.
Is there a
reason for this? (ie, am I being paranoid)

Looking forward to your reply,

Jan Mulders

Jan Mulders escribió:
> Hello all,
> 
> I''m interested in the ''compile'' functionality of
the dev versions of
> Shorewall, and I''d like to choose the one most likely to work for
a network
> of about 30 users, doing simple proxyarp''ing and port blocking.
> 
> Just looking for a developer''s opinion on the version which would
best suit
> my needs. I''ve had a good look through the release notes for each
one, and
> see a lot of problems corrected ''from the previous
version'', but no known
> problems listed in each distro''s "known_problems.txt"
file. Is there a
> reason for this? (ie, am I being paranoid)
> 
> Looking forward to your reply,
> 
> Jan Mulders
> 
if you feel brave and know what are you doing, run always the latest
beta if you need that functionality.

about known_problems.txt ... Assume beta software always have
known_problems.;-) (that''s the reason why it''s called
"beta" :P ) but
file isn''t filled due the lack of time.(I guess)

If you are running beta, please send us feedback to the shorewall-devel
mail list.

On Friday 07 April 2006 15:37, Jan Mulders wrote:
> Hello all,
>
> I''m interested in the ''compile'' functionality of
the dev versions of
> Shorewall, and I''d like to choose the one most likely to work for
a network
> of about 30 users, doing simple proxyarp''ing and port blocking.
>
> Just looking for a developer''s opinion on the version which would
best suit
> my needs. I''ve had a good look through the release notes for each
one, and
> see a lot of problems corrected ''from the previous
version'', but no known
> problems listed in each distro''s "known_problems.txt"
file. Is there a
> reason for this? (ie, am I being paranoid)
The only known problem with 3.2.0 Beta 4 occurs on LEAF Bering and the LEAF 
Bering maintainer has a fix for it (it only occurs on systems with no 
''mktemp'' utility or on systems where
''mktemp'' can''t create a directory). I
haven''t had the time to update the ''known problems''
file or the ''errata''
subdirectory since I just fixed the problem during my lunch break.

That having been said, I think that there are definitely problems remaining 
with 3.2.0 Beta4 that will be found as people try to use it in more 
environments. Remeber that working on Beta problems always comes after all 
other Shorewall-related work so if you run into a problem with the Beta, 
don''t expect me to drop everything and fix it.

There are currently no known problems with 3.0.6.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

I thought as much with the ''beta software''. ;-)

I''ll stick with the standard 3.0.x version for a little, then when I
find I
really need the functionality and everything else about my config is fixed,
I''ll jump onto the Beta bandwagon.

I''ll send you feedback once I''ve upgraded. Thanks.

Jan

On 08/04/06, Cristian Rodriguez <judas_iscariote@shorewall.net>
wrote:
>
> Jan Mulders escribió:
> > Hello all,
> >
> > I''m interested in the ''compile''
functionality of the dev versions of
> > Shorewall, and I''d like to choose the one most likely to work
for a
> network
> > of about 30 users, doing simple proxyarp''ing and port
blocking.
> >
> > Just looking for a developer''s opinion on the version which
would best
> suit
> > my needs. I''ve had a good look through the release notes for
each one,
> and
> > see a lot of problems corrected ''from the previous
version'', but no
> known
> > problems listed in each distro''s
"known_problems.txt" file. Is there a
> > reason for this? (ie, am I being paranoid)
> >
> > Looking forward to your reply,
> >
> > Jan Mulders
> >
>
> if you feel brave and know what are you doing, run always the latest
> beta if you need that functionality.
>
> about known_problems.txt ... Assume beta software always have
> known_problems.;-) (that''s the reason why it''s called
"beta" :P ) but
> file isn''t filled due the lack of time.(I guess)
>
> If you are running beta, please send us feedback to the shorewall-devel
> mail list.
>
>
>
>
>
>
>
>