Here is the current known problem list. Fixes are available at
http://www.shorewall.net/pub/shorewall/3.4/shorewall-3.4.4/errata/
Only problem 4) is likely to have any widespread impact.
1) Traffic shaping fails when the ''sed'' utility is supplied
by
Busybox.
Either:
a) Replace /usr/share/shorewall/lib.tc with the ''lib.tc''
file from
the errata/Shorewall sub-directory;
or
b) Patch /usr/share/shorewall/lib.tc with the
''patch-3.4.4-1.diff''
file from the errata/Shorewall sub-directory.
2) Version 3.4.4 erroneously accepts the values On, Off, on, off, ON
and OFF for the IP_FORWARDING option. These values are treated
like ''Keep'' which means that they are effectively ignored.
Either:
a) Replace /usr/share/shorewall/lib.config with the
''lib.config''
file from the errata/Shorewall sub-directory;
or
b) Patch /usr/share/shorewall/lib.config with the
''patch-3.4.4-2.diff'' file from the errata/Shorewall
sub-directory.
3) If ''routeback'' and ''detectnets'' are
specified on an interface,
limited broadcasts (to 255.255.255.255) are dropped when forwarded
through the interface. This can cause broadcast-based
applications to fail when running through a bridge with
''detectnets''.
Either:
a) Replace /usr/share/shorewall/compiler with the
''compiler''
file from the errata/Shorewall sub-directory;
or
b) Patch /usr/share/shorewall/compiler with the
''patch-3.4.4-3.diff'' file from the errata/Shorewall
sub-directory.
4) The ''shorewall hits'' command produces no output.
Either:
a) Replace /sbin/shorewall with the ''shorewall'' file from
the
errata/Shorewall sub-directory;
or
b) Patch /sbin/shorewall with the ''patch-3.4.4-4.diff''
file from the
errata/Shorewall sub-directory.
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/