Tom Eastep
2007-Sep-21 20:31 UTC
Warning: Support for the ''detectnets'' interface option to be removed from Shorewall-perl
The ''detectnets'' interface option has always been a rather silly feature. For incoming packets, it duplicates the function of the ''routefilter'' option. It provides no value on output since it enforces the same thing that the routing table does. In other words, if you set ''routefilter'' and ''log_martians'' you get the same effect. I''ve decided to remove the ''detectnet'' option from future versions of Shorewall-perl. Shorewall-perl 4.0.4 will issue a warning message that the option is going away; Shorewall-perl will issue a warning message that support for the option has been dropped. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
Tom Eastep
2007-Sep-22 03:53 UTC
Re: Warning: Support for the ''detectnets'' interface option to be removed from Shorewall-perl
Tom Eastep wrote:> > I''ve decided to remove the ''detectnet'' option from future versions of > Shorewall-perl. Shorewall-perl 4.0.4 will issue a warning message that the > option is going away; Shorewall-perl will issue a warning message that > support for the option has been dropped. >Shorewall-perl _4.0.5_ will issue the warning that support for the option has been dropped. -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/