There have been several requests for Shorewall to support CODEL. In this
release, I have added support for FQ CODEL (Fair-queuing
Controlled-Delay) as an alternative to SFQ and RED.
Also corrected the following:
1) Beginning with Shorewall 4.5.10, if the name of an optional
interface contained one or more characters that are not valid in a
shell function name, then the generated script would fail with a
"syntax error: bad function name" shell diagnostic.
That problem has been corrected so that a valid function name is
generated.
2) Previously, the following type of configuration resulted in an
incorrect ruleset:
/etc/shorewall/zones
...
bar
foo:bar
/etc/shorewall/interfaces
...
bar xyz+
foo xyz
...
That configuration is now handled correctly.
Thank you for testing,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
------------------------------------------------------------------------------
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122912
Tom When TC_ENABLED=Simple, Shorewall accepts the following tcpri entry: 1 - - 1.1.1.1 - ftp If a port number is appended to the helper: 1 - - 1.1.1.1 - ftp-21 The following error message is produced: ERROR: The helper is not enabled /etc/shorewall2A10/tcpri (line 18) Steven. ------------------------------------------------------------------------------ Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft MVPs and experts. ON SALE this month only -- learn more at: http://p.sf.net/sfu/learnmore_123012
On 12/30/2012 11:17 AM, Steven Jan Springl wrote:> When TC_ENABLED=Simple, Shorewall accepts the following tcpri entry: > > 1 - - 1.1.1.1 - ftp > > If a port number is appended to the helper: > > 1 - - 1.1.1.1 - ftp-21 > > The following error message is produced: > > ERROR: The helper is not enabled /etc/shorewall2A10/tcpri (line 18)Steven, I''m having difficulty reproducing this -- please forward a capabilities file. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft MVPs and experts. ON SALE this month only -- learn more at: http://p.sf.net/sfu/learnmore_123012
On Sunday 30 Dec 2012 19:44:30 Tom Eastep wrote:> On 12/30/2012 11:17 AM, Steven Jan Springl wrote: > > When TC_ENABLED=Simple, Shorewall accepts the following tcpri entry: > > > > 1 - - 1.1.1.1 - ftp > > > > If a port number is appended to the helper: > > > > 1 - - 1.1.1.1 - ftp-21 > > > > The following error message is produced: > > > > ERROR: The helper is not enabled /etc/shorewall2A10/tcpri (line 18) > > Steven, > > I''m having difficulty reproducing this -- please forward a capabilities > file. > > -TomTom I have attached the shorewall config. which includes the capabilities file. Steven. ------------------------------------------------------------------------------ Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft MVPs and experts. ON SALE this month only -- learn more at: http://p.sf.net/sfu/learnmore_123012
On 12/30/12 11:49 AM, Steven Jan Springl wrote:> On Sunday 30 Dec 2012 19:44:30 Tom Eastep wrote: >> On 12/30/2012 11:17 AM, Steven Jan Springl wrote: >>> When TC_ENABLED=Simple, Shorewall accepts the following tcpri entry: >>> >>> 1 - - 1.1.1.1 - ftp >>> >>> If a port number is appended to the helper: >>> >>> 1 - - 1.1.1.1 - ftp-21 >>> >>> The following error message is produced: >>> >>> ERROR: The helper is not enabled /etc/shorewall2A10/tcpri (line 18) >> >> I''m having difficulty reproducing this -- please forward a capabilities >> file. > > I have attached the shorewall config. which includes the capabilities file. >The attached patch corrects the problem. Thanks Steven, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft MVPs and experts. ON SALE this month only -- learn more at: http://p.sf.net/sfu/learnmore_123012
On Sunday 30 Dec 2012 20:38:45 Tom Eastep wrote:> On 12/30/12 11:49 AM, Steven Jan Springl wrote: > > On Sunday 30 Dec 2012 19:44:30 Tom Eastep wrote: > >> On 12/30/2012 11:17 AM, Steven Jan Springl wrote: > >>> When TC_ENABLED=Simple, Shorewall accepts the following tcpri entry: > >>> > >>> 1 - - 1.1.1.1 - ftp > >>> > >>> If a port number is appended to the helper: > >>> > >>> 1 - - 1.1.1.1 - ftp-21 > >>> > >>> The following error message is produced: > >>> > >>> ERROR: The helper is not enabled /etc/shorewall2A10/tcpri (line 18) > >> > >> I''m having difficulty reproducing this -- please forward a capabilities > >> file. > > > > I have attached the shorewall config. which includes the capabilities > > file. > > The attached patch corrects the problem. > > Thanks Steven, > -TomTom Confirmed, the patch fixes the issue. Thanks. Steven. ------------------------------------------------------------------------------ Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft MVPs and experts. ON SALE this month only -- learn more at: http://p.sf.net/sfu/learnmore_123012
On 12/30/12 1:02 PM, Steven Jan Springl wrote:> > Confirmed, the patch fixes the issue. >Thanks Steven, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft MVPs and experts. ON SALE this month only -- learn more at: http://p.sf.net/sfu/learnmore_123012