(The Shoreline Firewall) is an iptables based firewall (a light-weight Shorewall6 version that will run compiled firewall scripts generated on a system with Shorewall6 installed).
| changelog.txt (shorewall6-lite-5.2.3.6.tar.bz2) | : | changelog.txt (shorewall6-lite-5.2.6.tar.bz2) |
|---|
|
| Changes in 5.2.3.6 | | Changes in 5.2.6 Final |
| | |
| 1) Update release documents | | 1) Update release documents |
| | |
|
| 2) Don't try to save/restore libvirt rules when DOCKER=Yes. | | 2) Add the compiler -D option to usage output. |
| | |
|
| Changes in 5.2.3.5 | | 3) Fix policy chain optimization when EXPAND_POLICIES=No. |
| | |
|
| 1) Correct typo in FTP.xml. | | Changes in 5.2.6 RC 1 |
| | |
|
| 2) Correct recommended mss with ipcomp. | | 1) Update release documents |
| | |
|
| 3) Correct manpage links in documentation and manpages. | | 2) Rename snat PORTS column |
| | |
|
| 4) Allow the bypass option in an NFQUEUE policy. | | 3) Add ?FORMAT 2 support for the snat file. |
| | |
|
| 5) Correct IPv6 Address Range parsing. | | 4) Merge from 5.2.5.2 |
| | |
|
| 6) Correct documentation links. | | 5) Work around iptables --queue-cpu-fanout bug. |
| | |
|
| Changes in 5.2.3.4 | | Changes in 5.2.6 Beta 1 |
| | |
|
| 1) Update release documents. | | 1) Update release documents |
| | |
| | 2) Implement 'dport' action option |
| | |
| | 2) Make 'show actions' more robust |
| | |
| | 3) Process the firewall.conf file on Shorewall-lite |
| | |
| | Changes in 5.2.5 Final |
| | |
| | 1) Update release documents |
| | |
| | 2) Zone name too long error message added. |
| | |
| | Changes in 5.2.5 RC 1 |
| | |
| | 1) Update release documents |
| | |
| | 2) Update module versions |
| | |
| | 3) Omit STATE-oriented rules from wildcard policy chains. |
| | |
| | Changes in 5.2.5 Beta 2 |
| | |
| | 1) Update release documents |
| | |
| | 2) Read the params file during 'allow' processing. |
| | |
| | 3) Store exported config params in a named array. |
| | |
| | 4) Add the 'log' option to the DYNAMIC_BLACKLIST setting. |
| | |
| | 5) Add the 'blacklist!' command. |
| | |
| | 6) Add the 'noupdate' DYNAMIC_BLACKLIST option. |
| | |
| | Changes in 5.2.5 Beta 1 |
| | |
| | 1) Update release documents |
| | |
| | 2) Don't install /etc/network/if-down.d/shorewall on Debian. |
| | |
| | 3) Create DBL ipset with 'timeout 0' |
| | |
| | Changes in 5.2.4.5 |
| | |
| | 1) Update release documents |
| | |
| | 2) Clarify 'optional' in shorewall-interfaces(5). |
| | |
|
| 2) Correct handling of multi-queue NFQUEUE as a policy. | | 3) Allow AUTOMAKE to work correctly with symbolic links. |
| | |
|
| 3) Correct handling of multi-queue NFQUEUE as a macro parameter. | | Changes in 5.2.4.4 |
| | |
|
| 4) Make 'AUTOMAKE=No' the update default. | | 1) Update release documents |
| | |
| | 2) Fix hang during 'shorewall[6] start' |
| | |
| | 3) Re-enable automatic creation of dynamic blacklisting ipsets. |
| | |
| | Changes in 5.2.4.3 |
| | |
| | 1) Update release documents |
| | |
| | 2) Delete unnecessary check in IPv6 interface_is_usable() |
| | |
| | 3) Honor 'wait=<seconds> when enabling an interface. |
| | |
| | 4) Don't create the DBL ipset during stop if it doesn't exist |
| | |
| | 5) Only destroy the ipsets that will be restored |
| | |
| | 6) Load ipsets before stopping firewalls in shorewall-init. |
| | |
| | 7) Dramatically speed up optimize level 16. |
| | |
| | Changes in 5.2.4.2 |
| | |
| | 1) Update release documents |
| | |
| | 2) Correct handling of 'down' events on Debian where IFUPDOWN=1 |
| | in the Shorewall-init configuration file |
| | (/etc/default/shorewall-init). |
| | |
|
| 5) Correct the description of the 'bypass' NFQUEUE option in | | 3) Avoid dupicate 'up' events when a dual-stack interface comes |
| shorewall-rules(5). | | on Debian with Shorewall-init IFUPDOWN=1. |
| | |
|
| Changes in 5.2.3.3 | | Changes in 5.2.4.1 |
| | |
| | 1) Update release documents |
| | |
| | 2) Correct HTTP links to point to the current project website. |
| | |
| | 3) Use relative links in the website. |
| | |
| | 4) Change URLs to point to the current web site. |
| | |
| | 5) Sort specific hash keys and values if -t is specified. |
| | |
| | 6) Add cautions to the ipsets document. |
| | |
| | 7) Prevent firewalls from being cleared/stopped during OpenSuSE |
| | upgrades. |
| | |
| | 8) Avoid ifupdown extraneous log messages. |
| | |
| | Changes in 5.2.4 Final |
| | |
| 1) Update release documents. | | 1) Update release documents. |
| | |
|
| 2) Document fix for an ipset in the SPORT column. | | 2) Update the IPSets document. |
| | |
|
| Changes in 5.2.3.2 | | Changes in 5.2.4 RC 1 |
| | |
| 1) Update release documents. | | 1) Update release documents. |
| | |
|
| 2) Document fix for masq file auto-update. | | 2) Correct QOS Example document's mangle file contents. |
| | |
|
| Changes in 5.2.3.1 | | 3) Update the Configuration File basics document. |
| | |
| | Changes in 5.2.4 Beta 1 |
| | |
| 1) Update release documents. | | 1) Update release documents. |
| | |
|
| 2) Correct issue with policy file zone exclusion. | | 2) Allow required ICMPv6 packets in stopped state. |
| | |
| | 3) Add DOCKER_BRIDGE option in shorewall.conf. |
| | |
| | 4) Retire 'trace', 'debug' and 'nolock'. |
| | |
| | 5) Remove 'load' from the output of 'shorewall[6] help' |
| | |
| | 6) Update the CompiledPrograms.xml article |
| | |
| | 7) Replace 'shorewall.net' with 'shorewall.org'. |
| | |
| Changes in 5.2.3 Final | | Changes in 5.2.3 Final |
| | |
| 1) Update release documents. | | 1) Update release documents. |
| | |
| 2) Correct problem corrected (mention helper). | | 2) Correct problem corrected (mention helper). |
| | |
| Changes in 5.2.3 RC 1 | | Changes in 5.2.3 RC 1 |
| | |
| 1) Update release documents. | | 1) Update release documents. |
| | | |
| End of changes. 21 change blocks. |
|---|
| 22 lines changed or deleted | | 129 lines changed or added |
|---|
"Fossies" - the Fresh Open Source Software Archive 