Shorewall users - Jul 2013 - Shorewall 4.5.19 Beta 2

4.5.19 Beta 2 is now available for download. Note that the release notes
included in the packages still say "Beta 1" in the heading.

Changes since Beta 1:

Problems Corrected:

1)  Logging rules once again work correctly in all cases where port
    lists larger than 15 entries are present.

New Features:

1)  A form of ''events'' or ''triggers'' is now
available. Events are
    implemented using the ip[6]tables ''recent'' match so they
are
    actually lists of IP addresses with associated timestamps and
    packet counts. They may be tested in a number of ways:

    - Any matching packets to/from an address ever?
    - Any matching packets to/from an address in the last N seconds?
    - M or more matching packets to/from an address?
    - M or more matching packets to/from an address in the last N
      seconds?

    See http://www.shorewall.net/Events.html for details and usage
    examples.

Thank you for testing,
-Tom

-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________



------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk

On 07/11/2013 03:28 PM, Tom Eastep wrote:
> New Features:
> 
> 1)  A form of ''events'' or ''triggers'' is
now available. Events are
>     implemented using the ip[6]tables ''recent'' match so
they are
>     actually lists of IP addresses with associated timestamps and
>     packet counts. They may be tested in a number of ways:
> 
>     - Any matching packets to/from an address ever?
>     - Any matching packets to/from an address in the last N seconds?
>     - M or more matching packets to/from an address?
>     - M or more matching packets to/from an address in the last N
>       seconds?
> 
>     See http://www.shorewall.net/Events.html for details and usage
>     examples.
> 
I neglected to update /usr/share/shorewall6/actions.std to allow events
to be used with Shorewall6. Updated file attached.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________



------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk