I am pleased to announce the availability of Shorewall release 3.4.0.
This release includes a number of new features including:
1) Shorewall can now be tailored to reduce its footprint on embedded
systems. As part of this change, actions are now completely
optional.
See http://www.shorewall.net/Modularization.html for details.
2) Exclusion is now possible in /etc/shorewall/hosts. This is required
for bridge/firewalls under kernel 2.6.20 and later.
See http://www.shorewall.net/NewBridge.html.
3) Shorewall and Shorewall Lite now include man pages. There is a
man page for shorewall(8), one for shorewall-lite(8) and one for
each configuration file. As part of this change, all documentation
has been removed from Shorewall configuration files. This should
make it easier from users to upgrade from one release to the next
since the configuration files will only change when column is added
or renamed.
See http://www.shorewall.net/manpages/Manpages.html
4) Shorewall now remembers the changes that it has made to routing as
a result of entries in /etc/shorewall/providers and
/etc/shorewall/route_rules and reverses those changes when
appropriate.
Those are only a few of the new features -- for the complete list, see the
release notes at
http://www.shorewall.net/pub/shorewall/3.4/shorewall-3.4.0/releasenotes.txt.
For users migrating from earlier versions, the upgrade issues are described
in the release notes and at http://www.shorewall.net/upgrade_issues.htm.
There are upgrade issues in the following cases:
a) If you have altered the default action for any policy in your
/etc/shorewall/actions file, you must move those specifications from the
actions file to shorewall.conf.
b) If you have defined your own version of the Limit action you must
remove or rename your version as Limit is now a Shorewall built-in
action.
c) If you have entries in /etc/shorewall/providers, you need to follow a
specific procedure when starting Shorewall 3.4.0 for the first time.
d) If you run Shorewall Lite, note that /etc/shorewall-lite/shorewall.conf
has been renamed to /etc/shorewall-lite/shorewall-lite.conf. The file
will be renamed as part of the upgrade process.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net''s Techsay panel and you''ll get the chance
to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV