Now that Shorewall 3.4 has stablized, it is time to drop support for
Shorewall 3.0. I have released Shorewall 3.0.10 which adds the accumulated
errata fixes and enhancements to 3.0.9.
Problems corrected in 3.0.10
1) Previously, when conntrack match support was not available, the
''norfc1918'' option on an interface or host group was
incorrectly
filtering IPSEC traffic whose source IP address was reserved by RFC
1918.
2) Previously, "ipp2p:udp" was incorrectly rejected in the PROTO
column of an action definition.
Other changes in 3.0.10
1) When syslogd is run with the -C option (which in some
implementations causes syslogd to log to an in-memory circular
buffer), /sbin/shorewall will now use the ''logread''
command to read
the log from that buffer. This is for combatibility with OpenWRT.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/