Beta 3 is now available for testing. http://www.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.0-Beta3 ftp://ftp.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.0-Beta3 ---------------------------------------------------------------------------- P R O B L E M S C O R R E C T E D I N 4 . 4 . 0 Beta 3 ---------------------------------------------------------------------------- 1) Previously, if Address Type Match was not available and an interface on the firewall was (mis-)configured as shown below, then REJECT policies in Shorewall-perl would drop packets addressed to the interface rather than reject them. 3: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 ... inet 127.0.0.1/32 scope host venet0 inet 206.124.146.176/32 brd 206.124.146.176 ... Note that a /32 should never be configured with a broadcast address. 2) Due to a syntax ambiguity arising from the new dynamic zone implementation, ''shorewall show dynamic'' produced no output. It now shows the contents of the dynamic blacklist as in earlier Shorewall releases. 3) The ''findgw'' script produced an error if VERBOSITY > 0. ---------------------------------------------------------------------------- K N O W N P R O B L E M S R E M A I N I N G ---------------------------------------------------------------------------- None. ---------------------------------------------------------------------------- N E W F E A T U R E S I N 4 . 4 . 0 Beta 3 ---------------------------------------------------------------------------- 1) Three new macros have been contributed by Alex Wilms. macro.BGP macro.Citrix macro.OSPF macro.Razor 2) The Shorewall compiler now checks for availability of the LOG target if the configuration does any logging. This change involves a new version of the capabilities file so users employing a capabilties file should re-generate that file before trying to start/restart Shorewall. -The Shorewall Team -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------