Shorewall 4.4.22.2 is available for download. Problems Corrected: 1) On older distributions where ''shorewall show capabilities'' indicates ''Connection Tracking Match: Not Available'', Shorewall 4.4.22 and 4.4.22.1 generated invalid iptables-restore input. 2) Previously, the compiler always placed ''#!/bin/sh'' on the first line of the generated script. It now uses the setting of SHOREWALL_SHELL on that line rather than ''/bin/sh''. Note that SHOREWALL_SHELL defaults to ''/bin/sh'' so this change only affects those who specify a different shell. The first corrected defect is a regression in 4.4.22 and should not affect any current distribution. The second one only affects users of Shorewall-init who also set SHOREWALL_SHELL to a value other than /bin/sh; without this fix, operations performed by Shorewall-init use /sbin/sh rather than $SHOREWALL_SHELL. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
On Tuesday 09 August 2011 17:32:01 Tom Eastep wrote:> Shorewall 4.4.22.2 is available for download. > > Problems Corrected: > > 1) On older distributions where ''shorewall show capabilities'' > indicates ''Connection Tracking Match: Not Available'', Shorewall > 4.4.22 and 4.4.22.1 generated invalid iptables-restore input. >Tom In the attached config. the REDIRECT rule produces the following messages when the ''Connection Tracking Match'' is manually set to ''not available'': Use of uninitialized value $list in pattern match (m//) at /usr/share/shorewall/Shorewall/Config.pm line 1273, <$currentfile> line 14. Use of uninitialized value $list in split at /usr/share/shorewall/Shorewall/Config.pm line 1275, <$currentfile> line 14. Use of uninitialized value $input in pattern match (m//) at /usr/share/shorewall/Shorewall/Chains.pm line 4105, <$currentfile> line 14. Steven. ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
On Aug 9, 2011, at 2:24 PM, Steven Jan Springl wrote:> On Tuesday 09 August 2011 17:32:01 Tom Eastep wrote: >> Shorewall 4.4.22.2 is available for download. >> >> Problems Corrected: >> >> 1) On older distributions where ''shorewall show capabilities'' >> indicates ''Connection Tracking Match: Not Available'', Shorewall >> 4.4.22 and 4.4.22.1 generated invalid iptables-restore input. >> > > Tom > > In the attached config. the REDIRECT rule produces the following messages when > the ''Connection Tracking Match'' is manually set to ''not available'': > > Use of uninitialized value $list in pattern match (m//) > at /usr/share/shorewall/Shorewall/Config.pm line 1273, <$currentfile> line > 14. > > Use of uninitialized value $list in split > at /usr/share/shorewall/Shorewall/Config.pm line 1275, <$currentfile> line > 14. > > Use of uninitialized value $input in pattern match (m//) > at /usr/share/shorewall/Shorewall/Chains.pm line 4105, <$currentfile> line > 14.Steven, The attached patch seems to correct this. -Tom Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
On Aug 9, 2011, at 4:25 PM, Tom Eastep wrote:> > The attached patch seems to correct this.And, as always, thank you -Tom Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
On Wednesday 10 August 2011 04:38:30 Tom Eastep wrote:> On Aug 9, 2011, at 4:25 PM, Tom Eastep wrote: > > The attached patch seems to correct this. > > And, as always, thank you > > -Tom >Tom Confirmed, the patch fixes the issue. Thanks. Steven. ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
On Wed, 2011-08-10 at 13:52 +0100, Steven Jan Springl wrote:> Confirmed, the patch fixes the issue.Thanks, Steven -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
Tom In the attached config. when MANGLE_FORWARD is not set in capabilities and there is an entry in ecn the following message is generated: Use of uninitialized value in hash element at /usr/share/shorewall/Shorewall/Chains.pm line 1119. Steven. ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
On Wed, 2011-08-10 at 15:22 +0100, Steven Jan Springl wrote:> In the attached config. when MANGLE_FORWARD is not set in capabilities and > there is an entry in ecn the following message is generated: > > Use of uninitialized value in hash element > at /usr/share/shorewall/Shorewall/Chains.pm line 1119.Steven, The attached patch replaces the Perl diagnostic with a WARNING message. Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
On Wednesday 10 August 2011 15:43:24 Tom Eastep wrote:> On Wed, 2011-08-10 at 15:22 +0100, Steven Jan Springl wrote: > > In the attached config. when MANGLE_FORWARD is not set in capabilities > > and there is an entry in ecn the following message is generated: > > > > Use of uninitialized value in hash element > > at /usr/share/shorewall/Shorewall/Chains.pm line 1119. > > Steven, > > The attached patch replaces the Perl diagnostic with a WARNING message. > > Thanks, > -TomTom Confirmed, the patch has fixed the issue. Thanks. Steven. ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
On Wed, 2011-08-10 at 17:22 +0100, Steven Jan Springl wrote:> Confirmed, the patch has fixed the issue.Thanks, Steven -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ uberSVN''s rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev