RC 1 is now available for testing. Problems Corrected: 1) The ''ip route list'' command on recent Linux systems (Ubuntu 11.10, for example) displays the IPv4 routing table in a seemingly random order. In the ''show routing'' and ''dump'' commands, Shorewall and Shorewall-lite now sort the output into the traditional ''Most-specific to most-general'' order. 2) Shorewall 4.4.27 broke Shorewall-init functionality. It is restored in this release. 3) Previously, specifying ''No'' in the HAVEROUTE column of /etc/shorewall6/proxyndp resulted in a run-time error. The code has been corrected so that no error occurs. Thank you for testing, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Keep Your Developer Skills Current with LearnDevNow! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-d2d
Tom Tcrules entry: &1 192.168.0.1/24 eth0 generates the following iptables rule: -A PREROUTING -s 192.168.0.1/24 -d 192.168.0.254/128 -j MARK --and-mark 1 which produces the following error message: iptables-restore v1.4.12.2: invalid mask `128'' specified Steven. ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
On 02/04/2012 09:02 AM, Steven Jan Springl wrote:> Tcrules entry: > > &1 192.168.0.1/24 eth0 > > generates the following iptables rule: > for dest in $SW_ETH0_NETWORKS; doecho "-A tcpre -s 192.168.0.1/24 -d $dest -j MARK --and-mark 1" >&3 done> -A PREROUTING -s 192.168.0.1/24 -d 192.168.0.254/128 -j MARK --and-mark 1 > > which produces the following error message: > > iptables-restore v1.4.12.2: invalid mask `128'' specifiedSteven, Do you see something like this in the generated script? for dest in $SW_ETH0_NETWORKS; do echo "-A tcpre -s 192.168.0.1/24 -d $dest -j MARK --and-mark 1" >&3 done Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
On Feb 4, 2012, at 10:15 AM, Tom Eastep wrote:> On 02/04/2012 09:02 AM, Steven Jan Springl wrote: > > Do you see something like this in the generated script? > > for dest in $SW_ETH0_NETWORKS; do > echo "-A tcpre -s 192.168.0.1/24 -d $dest -j MARK --and-mark 1" >&3 > doneLooks like that is the problem. Patch attached. -Tom Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
On Saturday 04 Feb 2012 18:27:49 Tom Eastep wrote:> On Feb 4, 2012, at 10:15 AM, Tom Eastep wrote: > > On 02/04/2012 09:02 AM, Steven Jan Springl wrote: > > > > Do you see something like this in the generated script? > > > > for dest in $SW_ETH0_NETWORKS; do > > > > echo "-A tcpre -s 192.168.0.1/24 -d $dest -j MARK --and-mark 1" >&3 > > > > done > > Looks like that is the problem. Patch attached. > > -TomTom That''s fixed the problem. Thanks. Steven. ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
On Feb 4, 2012, at 11:34 AM, Steven Jan Springl wrote:> > That''s fixed the problem. >Thanks, Steven -Tom Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2