Shorewall users - Jan 2011 - Shorewall 4.4.17 Beta 1

Beta 1 is now available for testing.

----------------------------------------------------------------------------
P R O B L E M S   C O R R E C T E D   I N   T H I S  R E L E A S E
----------------------------------------------------------------------------

1)  Previously, a ''done.'' message could be printed at the end
of
    command processing even when the command had failed. Now, such a
    message only appears if the command completed successfully.

----------------------------------------------------------------------------
K N O W N   P R O B L E M S   R E M A I N I N G
----------------------------------------------------------------------------

1)  On systems running Upstart, shorewall-init cannot reliably secure
    the firewall before interfaces are brought up.

----------------------------------------------------------------------------
N E W   F E A T U R E S   I N   T H I S  R E L E A S E
----------------------------------------------------------------------------

1)  The shell variables set in /etc/shorewall/params
    (/etc/shorewall6/params) are now available at run-time with
    EXPORTPARAMS=No. The EXPORTPARAMS option is now deprecated and the
    released /etc/shorewall/shorewall.conf and
    /etc/shorewall/shorewall6.conf have been modified to specify
    EXPORTPARAMS=No.

2)  The INCLUDE command may now be used in the following extension
    scripts:

        clear
        findgw
        init
        isusable
        refresh
        refreshed
        restored
        start
        started
        stop
        stopped
        tcclear

     The command is executed during compilation so that the INCLUDEd
     file is copied into the generated script. This same technique is
     also now used for INCLUDE directives in the params
     file when EXPORTPARAMS=Yes. Previously, INCLUDE directives were
     strongly discouraged with EXPORTPARAMS=Yes because the INCLUDE was
     performed on the firewall system rather than on the administrative
     system.

Thank you for testing,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________



------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl

Tom

In the attached config. INCLUDE is specified in the init file.

This produces the following message:

/var/lib/shorewall/.start: line 1372: .: /etc/shorewall/: is a directory

Line 1372 is:

   . $(find_file $(expand $@))

Is the message expected?

Steven.


------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl

On 1/18/11 1:36 PM, Steven Jan Springl wrote:
> Tom
> 
> In the attached config. INCLUDE is specified in the init file.
> 
> This produces the following message:
> 
> /var/lib/shorewall/.start: line 1372: .: /etc/shorewall/: is a directory
> 
> Line 1372 is:
> 
>    . $(find_file $(expand $@))
> 
> Is the message expected?
Steven,

This patch gives a more satisfactory diagnostic.

Thanks,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________



------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl

On Tuesday 18 January 2011 22:46:28 Tom Eastep wrote:
> This patch gives a more satisfactory diagnostic.
>
> Thanks,
> -Tom
Tom

Confirmed. Thanks.

Steven.


------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl