commit shorewall for openSUSE:Factory
Hello community, here is the log from the commit of package shorewall for openSUSE:Factory checked in at 2012-07-02 11:13:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/shorewall (Old) and /work/SRC/openSUSE:Factory/.shorewall.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "shorewall", Maintainer is "" Changes: -------- --- /work/SRC/openSUSE:Factory/shorewall/shorewall.changes 2012-06-16 11:45:27.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.shorewall.new/shorewall.changes 2012-07-02 11:13:56.000000000 +0200 @@ -1,0 +2,13 @@ +Sun Jul 1 11:24:54 UTC 2012 - toganm@opensuse.org + +- Update to 4.5.5.3 For more details see changelog.txt and + releasenotes.txt + * When logical interface names were used, an entry in tcrules + that included a classid could result in the compiler failing with + this Perl diagnostic: + + Can't use an undefined value as an ARRAY reference at + /usr/share/shorewall/Shorewall/Tc.pm line nnn, <$currentfile> + line 20. + +------------------------------------------------------------------- Old: ---- shorewall-4.5.5.1.tar.bz2 shorewall-core-4.5.5.1.tar.bz2 shorewall-docs-html-4.5.5.1.tar.bz2 shorewall-init-4.5.5.1.tar.bz2 shorewall-lite-4.5.5.1.tar.bz2 shorewall6-4.5.5.1.tar.bz2 shorewall6-lite-4.5.5.1.tar.bz2 New: ---- shorewall-4.5.5.3.tar.bz2 shorewall-core-4.5.5.3.tar.bz2 shorewall-docs-html-4.5.5.3.tar.bz2 shorewall-init-4.5.5.3.tar.bz2 shorewall-lite-4.5.5.3.tar.bz2 shorewall6-4.5.5.3.tar.bz2 shorewall6-lite-4.5.5.3.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ shorewall.spec ++++++ --- /var/tmp/diff_new_pack.G2eZVZ/_old 2012-07-02 11:13:58.000000000 +0200 +++ /var/tmp/diff_new_pack.G2eZVZ/_new 2012-07-02 11:13:58.000000000 +0200 @@ -17,7 +17,7 @@ Name: shorewall -Version: 4.5.5.1 +Version: 4.5.5.3 Release: 0 Summary: Shoreline Firewall is an iptables-based firewall for Linux systems License: GPL-2.0 ++++++ shorewall-4.5.5.1.tar.bz2 -> shorewall-4.5.5.3.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/Perl/Shorewall/Chains.pm new/shorewall-4.5.5.3/Perl/Shorewall/Chains.pm --- old/shorewall-4.5.5.1/Perl/Shorewall/Chains.pm 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/Perl/Shorewall/Chains.pm 2012-06-28 17:00:50.000000000 +0200 @@ -249,7 +249,7 @@ Exporter::export_ok_tags('internal'); -our $VERSION = '4.5_4'; +our $VERSION = '4.5_5'; # # Chain Table @@ -1038,6 +1038,7 @@ push @{$chainref->{rules}}, $ruleref; $chainref->{referenced} = 1; + $chainref->{optflags} |= DONT_MOVE if ( $ruleref->{target} || '' ) eq 'RETURN'; trace( $chainref, 'A', @{$chainref->{rules}}, "-A $chainref->{name} $_[1]" ) if $debug; $ruleref; @@ -1229,6 +1230,7 @@ if ( $jump ) { $ruleref->{jump} = $jump; $ruleref->{target} = $target; + $chainref->{optflags} |= DONT_MOVE if $target eq 'RETURN'; $ruleref->{targetopts} = $targetopts if $targetopts; } else { $ruleref->{target} = ''; @@ -4199,12 +4201,12 @@ if ( supplied $2 ) { $user = $2; - $user = resolve_id( $user, 'user' ) unless $user =~ /\d+$/; + $user = resolve_id( $user, 'user' ) unless $user =~ /\d+(-\d+)?$/; $rule .= "${invert}--uid-owner $user "; } if ( $group ne '' ) { - $group = resolve_id( $group, 'group' ) unless $group =~ /^\d+$/; + $group = resolve_id( $group, 'group' ) unless $group =~ /^\d+(-\d+)?$/; $rule .= "${invert}--gid-owner $group "; } } elsif ( $user =~ /^(!)?(.*)$/ ) { @@ -4212,10 +4214,10 @@ $user = $2; fatal_error "Invalid USER/GROUP (!)" if $user eq ''; - $user = resolve_id ($user, 'user' ) unless $user =~ /\d+$/; + $user = resolve_id ($user, 'user' ) unless $user =~ /\d+(-\d+)?$/; $rule .= "${invert}--uid-owner $user "; } else { - $user = resolve_id( $user, 'user' ) unless $user =~ /\d+$/; + $user = resolve_id( $user, 'user' ) unless $user =~ /\d+(-\d+)?$/; $rule .= "--uid-owner $user "; } @@ -6057,7 +6059,7 @@ # my $echain = newexclusionchain( $table ); - my $echainref = new_chain $table, $echain; + my $echainref = dont_move new_chain $table, $echain; # # Use the current rule and send all possible matches to the exclusion chain # diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/Perl/Shorewall/Config.pm new/shorewall-4.5.5.3/Perl/Shorewall/Config.pm --- old/shorewall-4.5.5.1/Perl/Shorewall/Config.pm 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/Perl/Shorewall/Config.pm 2012-06-28 17:00:50.000000000 +0200 @@ -164,7 +164,7 @@ Exporter::export_ok_tags('internal'); -our $VERSION = '4.5_4'; +our $VERSION = '4.5_5'; # # describe the current command, it's present progressive, and it's completion. @@ -519,7 +519,7 @@ KLUDGEFREE => '', STATEMATCH => '-m state --state', UNTRACKED => 0, - VERSION => "4.5.5.1", + VERSION => "4.5.5.3", CAPVERSION => 40504 , ); # @@ -1684,11 +1684,12 @@ if ( $keyword =~ /^IF/ ) { cond_error $linenumber, "Missing IF variable" unless $rest; my $invert = $rest =~ s/^!\s*//; - cond_error $linenumber, "Invalid IF variable ($rest)" unless ($rest =~ s/^\$// || $rest =~ /^__/ ) && $rest =~ /^\w+$/; push @ifstack, [ 'IF', $omitting, $omitting, $linenumber ]; + $lastomit = $omitting; + if ( $rest eq '__IPV6' ) { $omitting = $family == F_IPV4; } elsif ( $rest eq '__IPV4' ) { @@ -4185,10 +4186,10 @@ } if ( ( my $userbits = $config{PROVIDER_OFFSET} - $config{TC_BITS} ) > 0 ) { - $globals{USER_MASK} = make_mask( $userbits ) << $config{TC_BITS}; + $globals{USER_BITS} = $userbits; } else { - $globals{USER_MASK} = 0; + $globals{USER_MASK} = $globals{USER_BITS} = 0; } if ( supplied ( $val = $config{ZONE2ZONE} ) ) { @@ -4606,7 +4607,7 @@ $globals{TC_MASK} ); dumpout( "User", - $globals{USER_MASK}, + $globals{USER_BITS}, $globals{TC_MAX} + 1, $globals{USER_MASK}, $globals{USER_MASK} ); @@ -4628,6 +4629,12 @@ $globals{EXCLUSION_MASK}, $globals{EXCLUSION_MASK}, $globals{EXCLUSION_MASK} ); + + dumpout( "TProxy", + 1, + $globals{TPROXY_MARK}, + $globals{TPROXY_MARK}, + $globals{TPROXY_MARK} ); } END { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/Perl/Shorewall/Misc.pm new/shorewall-4.5.5.3/Perl/Shorewall/Misc.pm --- old/shorewall-4.5.5.1/Perl/Shorewall/Misc.pm 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/Perl/Shorewall/Misc.pm 2012-06-28 17:00:50.000000000 +0200 @@ -45,7 +45,7 @@ generate_matrix ); our @EXPORT_OK = qw( initialize ); -our $VERSION = '4.5_4'; +our $VERSION = '4.5_5'; my $family; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/Perl/Shorewall/Nat.pm new/shorewall-4.5.5.3/Perl/Shorewall/Nat.pm --- old/shorewall-4.5.5.1/Perl/Shorewall/Nat.pm 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/Perl/Shorewall/Nat.pm 2012-06-28 17:00:50.000000000 +0200 @@ -40,7 +40,7 @@ Exporter::export_ok_tags('rules'); -our $VERSION = '4.5_3'; +our $VERSION = '4.5_5'; my @addresses_to_add; my %addresses_to_add; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/Perl/Shorewall/Providers.pm new/shorewall-4.5.5.3/Perl/Shorewall/Providers.pm --- old/shorewall-4.5.5.1/Perl/Shorewall/Providers.pm 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/Perl/Shorewall/Providers.pm 2012-06-28 17:00:50.000000000 +0200 @@ -64,6 +64,7 @@ my $first_default_route; my $first_fallback_route; my $maxload; +my $tproxies; my %providers; @@ -99,6 +100,7 @@ $first_default_route = 1; $first_fallback_route = 1; $maxload = 0; + $tproxies = 0; %providers = ( local => { number => LOCAL_TABLE , mark => 0 , optional => 0 ,routes => [], rules => [] } , main => { number => MAIN_TABLE , mark => 0 , optional => 0 ,routes => [], rules => [] } , @@ -462,10 +464,11 @@ } if ( $local ) { - fatal_error "GATEWAY not valid with 'local' provider" unless $gatewaycase eq 'none'; - fatal_error "'track' not valid with 'local'" if $track; - fatal_error "DUPLICATE not valid with 'local'" if $duplicate ne '-'; + fatal_error "GATEWAY not valid with 'local' provider" unless $gatewaycase eq 'none'; + fatal_error "'track' not valid with 'local'" if $track; + fatal_error "DUPLICATE not valid with 'local'" if $duplicate ne '-'; } elsif ( $tproxy ) { + fatal_error "Only one 'tproxy' provider is allowed" if $tproxies++; fatal_error "GATEWAY not valid with 'tproxy' provider" unless $gatewaycase eq 'none'; fatal_error "'track' not valid with 'tproxy'" if $track; fatal_error "DUPLICATE not valid with 'tproxy'" if $duplicate ne '-'; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/Perl/Shorewall/Rules.pm new/shorewall-4.5.5.3/Perl/Shorewall/Rules.pm --- old/shorewall-4.5.5.1/Perl/Shorewall/Rules.pm 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/Perl/Shorewall/Rules.pm 2012-06-28 17:00:50.000000000 +0200 @@ -53,7 +53,7 @@ ); our @EXPORT_OK = qw( initialize ); -our $VERSION = '4.5_3'; +our $VERSION = '4.5_5'; # # Globals are documented in the initialize() function # diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/Perl/Shorewall/Tc.pm new/shorewall-4.5.5.3/Perl/Shorewall/Tc.pm --- old/shorewall-4.5.5.1/Perl/Shorewall/Tc.pm 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/Perl/Shorewall/Tc.pm 2012-06-28 17:00:50.000000000 +0200 @@ -1642,7 +1642,7 @@ ); add_ijump( $mangle_table->{tcpost} , - j => 'CONNMARK --save-mark --ctmask ' . in_hex( $globals{TC_MASK} ), + j => 'CONNMARK --save-mark --mask ' . in_hex( $globals{TC_MASK} ), mark => '! --mark 0/' . in_hex( $globals{TC_MASK} ) ); } @@ -1765,7 +1765,7 @@ my $rate = "$tcref->{rate}kbit"; my $quantum = calculate_quantum $rate, calculate_r2q( $devref->{out_bandwidth} ); - $classids{$classid}=$device; + $classids{$classid}=$devname; my $priority = $tcref->{priority} << 8; my $parent = in_hexp $tcref->{parent}; @@ -1856,7 +1856,7 @@ my $devicenumber = in_hexp $devref->{number}; my $classid = join( ':', $devicenumber, $classnum); - $classids{$classid}=$device; + $classids{$classid}=$devname; } } } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/Perl/Shorewall/Zones.pm new/shorewall-4.5.5.3/Perl/Shorewall/Zones.pm --- old/shorewall-4.5.5.1/Perl/Shorewall/Zones.pm 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/Perl/Shorewall/Zones.pm 2012-06-28 17:00:50.000000000 +0200 @@ -93,7 +93,7 @@ ); our @EXPORT_OK = qw( initialize ); -our $VERSION = '4.5_4'; +our $VERSION = '4.5_5'; # # IPSEC Option types diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/changelog.txt new/shorewall-4.5.5.3/changelog.txt --- old/shorewall-4.5.5.1/changelog.txt 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/changelog.txt 2012-06-28 17:00:50.000000000 +0200 @@ -1,3 +1,33 @@ +Changes in 4.5.5.3 + +1) Correct a Perl trap caused by using logical names with 'classify'. + +2) Ensure that exclusion chains always have the 'DONT_MOVE' flag set. + +Changes in 4.5.5.2 + +1) Allow UID/GID ranges in the USER/GROUP column (undocumented) + +2) Don't use '--ctmark' when saving marks. + +3) Display PROXY_MARK in 'show marks'. + +4) Another fix for nested ?IFs + +Changes in 4.5.5.1 + +1) Fix handling of multiple fallback providers. + +2) Allow logical device names in the REDIRECTED column. + +Changes in 4.5.5 Final + +1) Restore fix to configure script. + +2) Fix installer's handling of SYSCONFDIR + +3) Add DIGEST support. + Changes in 4.5.5 RC 1 1) Change in 'ignore' behavior. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/configfiles/providers.annotated new/shorewall-4.5.5.3/configfiles/providers.annotated --- old/shorewall-4.5.5.1/configfiles/providers.annotated 2012-06-14 22:14:33.000000000 +0200 +++ new/shorewall-4.5.5.3/configfiles/providers.annotated 2012-06-28 17:02:35.000000000 +0200 @@ -151,7 +151,7 @@ # shorewall-tcrules(5). See http://www.shorewall.net/ # Shorewall_Squid_Usage.html. When specified, the MARK, DUPLICATE and # GATEWAY columns should be empty, INTERFACE should be set to 'lo' and -# tproxy should be the only OPTION. +# tproxy should be the only OPTION. Only one tproxy provider is allowed. # # COPY - [{none|interface[,interface]...}] # diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/configure new/shorewall-4.5.5.3/configure --- old/shorewall-4.5.5.1/configure 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/configure 2012-06-28 17:00:50.000000000 +0200 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=4.5.5.1 +VERSION=4.5.5.3 case "$BASH_VERSION" in [4-9].*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/configure.pl new/shorewall-4.5.5.3/configure.pl --- old/shorewall-4.5.5.1/configure.pl 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/configure.pl 2012-06-28 17:00:50.000000000 +0200 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '4.5.5.1' + VERSION => '4.5.5.3' }; my %params; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/install.sh new/shorewall-4.5.5.3/install.sh --- old/shorewall-4.5.5.1/install.sh 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/install.sh 2012-06-28 17:00:50.000000000 +0200 @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.5.5.1 +VERSION=4.5.5.3 # # Change to the directory containing this script diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/known_problems.txt new/shorewall-4.5.5.3/known_problems.txt --- old/shorewall-4.5.5.1/known_problems.txt 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/known_problems.txt 2012-06-28 17:00:50.000000000 +0200 @@ -16,3 +16,53 @@ failure. Corrected in Shorewall 4.5.5.1. + +4) When ipp2p is used in the /etc/shorewall/tcpri file, the generated + code for saving the packet mark is clearing the connection marks + fields not having to do with traffic shaping. + + Corrected in Shorewall 4.5.5.2. + +5) Shorewall 4.4.11 allows UID and GID ranges to be specified in the + USER:GROUP column of the rules file. That undocumented feature + is not present in Shorewall 4.5. + + Corrected in Shorewall 4.5.5.2. + +6) The special TPROXY mark value is not shown in the output of + 'shorewall show marks'. + + Corrected in Shorewall 4.5.5.2. + +7) Assuming that A = 0 and B = 1, the following conditionals produce + incorrect results: + + ?IF $A + ?IF $B + <text> + ?ENDIF + ?ENDIF + + The <text> is included when it should be omitted. + + Corrected in Shorewall 4.5.5.2. + +8) When logical interface names are used, an entry in tcrules that + includes a classid can result in the compiler failing with this + Perl diagnostic: + + Can't use an undefined value as an ARRAY reference at + /usr/share/shorewall/Shorewall/Tc.pm line nnn, <$currentfile> + line 20. + + Workarounds: + + a: Use only physical names for interfaces appearing in the + tcrules file when classids are needed. + + b: Follow classids in the rules file with ':T' (e.g., 1:4:T). + + Corrected in Shorewall 4.5.5.3. + + + diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-accounting.5 new/shorewall-4.5.5.3/manpages/shorewall-accounting.5 --- old/shorewall-4.5.5.1/manpages/shorewall-accounting.5 2012-06-14 22:12:51.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-accounting.5 2012-06-28 17:00:53.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-accounting .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ACCOUNTIN" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ACCOUNTIN" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-actions.5 new/shorewall-4.5.5.3/manpages/shorewall-actions.5 --- old/shorewall-4.5.5.1/manpages/shorewall-actions.5 2012-06-14 22:12:53.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-actions.5 2012-06-28 17:00:55.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-actions .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ACTIONS" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ACTIONS" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-blacklist.5 new/shorewall-4.5.5.3/manpages/shorewall-blacklist.5 --- old/shorewall-4.5.5.1/manpages/shorewall-blacklist.5 2012-06-14 22:12:55.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-blacklist.5 2012-06-28 17:00:57.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-blacklist .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-BLACKLIST" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-BLACKLIST" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-blrules.5 new/shorewall-4.5.5.3/manpages/shorewall-blrules.5 --- old/shorewall-4.5.5.1/manpages/shorewall-blrules.5 2012-06-14 22:12:57.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-blrules.5 2012-06-28 17:00:59.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-blrules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-BLRULES" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-BLRULES" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-ecn.5 new/shorewall-4.5.5.3/manpages/shorewall-ecn.5 --- old/shorewall-4.5.5.1/manpages/shorewall-ecn.5 2012-06-14 22:13:03.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-ecn.5 2012-06-28 17:01:05.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-ecn .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ECN" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ECN" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-exclusion.5 new/shorewall-4.5.5.3/manpages/shorewall-exclusion.5 --- old/shorewall-4.5.5.1/manpages/shorewall-exclusion.5 2012-06-14 22:13:05.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-exclusion.5 2012-06-28 17:01:07.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-exclusion .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-EXCLUSION" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-EXCLUSION" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-hosts.5 new/shorewall-4.5.5.3/manpages/shorewall-hosts.5 --- old/shorewall-4.5.5.1/manpages/shorewall-hosts.5 2012-06-14 22:13:07.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-hosts.5 2012-06-28 17:01:09.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-hosts .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-HOSTS" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-HOSTS" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-init.8 new/shorewall-4.5.5.3/manpages/shorewall-init.8 --- old/shorewall-4.5.5.1/manpages/shorewall-init.8 2012-06-14 22:13:09.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-init.8 2012-06-28 17:01:11.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-init .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-INIT" "8" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-INIT" "8" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-interfaces.5 new/shorewall-4.5.5.3/manpages/shorewall-interfaces.5 --- old/shorewall-4.5.5.1/manpages/shorewall-interfaces.5 2012-06-14 22:13:11.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-interfaces.5 2012-06-28 17:01:14.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-interfaces .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-INTERFACE" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-INTERFACE" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-ipsets.5 new/shorewall-4.5.5.3/manpages/shorewall-ipsets.5 --- old/shorewall-4.5.5.1/manpages/shorewall-ipsets.5 2012-06-14 22:13:13.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-ipsets.5 2012-06-28 17:01:16.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-ipsets .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-IPSETS" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-IPSETS" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-maclist.5 new/shorewall-4.5.5.3/manpages/shorewall-maclist.5 --- old/shorewall-4.5.5.1/manpages/shorewall-maclist.5 2012-06-14 22:13:16.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-maclist.5 2012-06-28 17:01:18.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-maclist .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-MACLIST" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-MACLIST" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-masq.5 new/shorewall-4.5.5.3/manpages/shorewall-masq.5 --- old/shorewall-4.5.5.1/manpages/shorewall-masq.5 2012-06-14 22:13:18.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-masq.5 2012-06-28 17:01:20.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-masq .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-MASQ" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-MASQ" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-modules.5 new/shorewall-4.5.5.3/manpages/shorewall-modules.5 --- old/shorewall-4.5.5.1/manpages/shorewall-modules.5 2012-06-14 22:13:20.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-modules.5 2012-06-28 17:01:22.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-modules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-MODULES" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-MODULES" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-nat.5 new/shorewall-4.5.5.3/manpages/shorewall-nat.5 --- old/shorewall-4.5.5.1/manpages/shorewall-nat.5 2012-06-14 22:13:22.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-nat.5 2012-06-28 17:01:24.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-nat .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-NAT" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-NAT" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-nesting.5 new/shorewall-4.5.5.3/manpages/shorewall-nesting.5 --- old/shorewall-4.5.5.1/manpages/shorewall-nesting.5 2012-06-14 22:13:24.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-nesting.5 2012-06-28 17:01:26.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-nesting .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-NESTING" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-NESTING" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-netmap.5 new/shorewall-4.5.5.3/manpages/shorewall-netmap.5 --- old/shorewall-4.5.5.1/manpages/shorewall-netmap.5 2012-06-14 22:13:26.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-netmap.5 2012-06-28 17:01:28.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-netmap .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-NETMAP" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-NETMAP" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-notrack.5 new/shorewall-4.5.5.3/manpages/shorewall-notrack.5 --- old/shorewall-4.5.5.1/manpages/shorewall-notrack.5 2012-06-14 22:13:28.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-notrack.5 2012-06-28 17:01:30.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall6-notrack .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL6\-NOTRACK" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL6\-NOTRACK" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-params.5 new/shorewall-4.5.5.3/manpages/shorewall-params.5 --- old/shorewall-4.5.5.1/manpages/shorewall-params.5 2012-06-14 22:13:30.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-params.5 2012-06-28 17:01:32.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-params .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-PARAMS" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-PARAMS" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-policy.5 new/shorewall-4.5.5.3/manpages/shorewall-policy.5 --- old/shorewall-4.5.5.1/manpages/shorewall-policy.5 2012-06-14 22:13:32.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-policy.5 2012-06-28 17:01:34.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-policy .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-POLICY" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-POLICY" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-providers.5 new/shorewall-4.5.5.3/manpages/shorewall-providers.5 --- old/shorewall-4.5.5.1/manpages/shorewall-providers.5 2012-06-14 22:13:34.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-providers.5 2012-06-28 17:01:36.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-providers .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-PROVIDERS" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-PROVIDERS" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -218,7 +218,9 @@ Added in Shorewall 4\&.5\&.4\&. Used for supporting the TPROXY action in shorewall\-tcrules(5)\&. See \m[blue]\fBhttp://www\&.shorewall\&.net/Shorewall_Squid_Usage\&.html\fR\m[]\&. When specified, the MARK, DUPLICATE and GATEWAY columns should be empty, INTERFACE should be set to \*(Aqlo\*(Aq and \fBtproxy\fR -should be the only OPTION\&. +should be the only OPTION\&. Only one +\fBtproxy\fR +provider is allowed\&. .RE .RE .PP diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-proxyarp.5 new/shorewall-4.5.5.3/manpages/shorewall-proxyarp.5 --- old/shorewall-4.5.5.1/manpages/shorewall-proxyarp.5 2012-06-14 22:13:36.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-proxyarp.5 2012-06-28 17:01:38.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-proxyarp .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-PROXYARP" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-PROXYARP" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-routes.5 new/shorewall-4.5.5.3/manpages/shorewall-routes.5 --- old/shorewall-4.5.5.1/manpages/shorewall-routes.5 2012-06-14 22:13:40.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-routes.5 2012-06-28 17:01:42.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-routes .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ROUTES" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ROUTES" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-routestopped.5 new/shorewall-4.5.5.3/manpages/shorewall-routestopped.5 --- old/shorewall-4.5.5.1/manpages/shorewall-routestopped.5 2012-06-14 22:13:38.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-routestopped.5 2012-06-28 17:01:40.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-routestopped .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ROUTESTOP" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ROUTESTOP" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-rtrules.5 new/shorewall-4.5.5.3/manpages/shorewall-rtrules.5 --- old/shorewall-4.5.5.1/manpages/shorewall-rtrules.5 2012-06-14 22:13:42.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-rtrules.5 2012-06-28 17:01:44.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-rtrules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-RTRULES" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-RTRULES" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-rules.5 new/shorewall-4.5.5.3/manpages/shorewall-rules.5 --- old/shorewall-4.5.5.1/manpages/shorewall-rules.5 2012-06-14 22:13:45.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-rules.5 2012-06-28 17:01:47.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-rules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-RULES" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-RULES" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-secmarks.5 new/shorewall-4.5.5.3/manpages/shorewall-secmarks.5 --- old/shorewall-4.5.5.1/manpages/shorewall-secmarks.5 2012-06-14 22:13:47.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-secmarks.5 2012-06-28 17:01:49.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-secmarks .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-SECMARKS" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-SECMARKS" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-tcclasses.5 new/shorewall-4.5.5.3/manpages/shorewall-tcclasses.5 --- old/shorewall-4.5.5.1/manpages/shorewall-tcclasses.5 2012-06-14 22:13:49.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-tcclasses.5 2012-06-28 17:01:51.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcclasses .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCCLASSES" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCCLASSES" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-tcdevices.5 new/shorewall-4.5.5.3/manpages/shorewall-tcdevices.5 --- old/shorewall-4.5.5.1/manpages/shorewall-tcdevices.5 2012-06-14 22:13:51.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-tcdevices.5 2012-06-28 17:01:53.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcdevices .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCDEVICES" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCDEVICES" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-tcfilters.5 new/shorewall-4.5.5.3/manpages/shorewall-tcfilters.5 --- old/shorewall-4.5.5.1/manpages/shorewall-tcfilters.5 2012-06-14 22:13:53.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-tcfilters.5 2012-06-28 17:01:56.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcfilters .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCFILTERS" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCFILTERS" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-tcinterfaces.5 new/shorewall-4.5.5.3/manpages/shorewall-tcinterfaces.5 --- old/shorewall-4.5.5.1/manpages/shorewall-tcinterfaces.5 2012-06-14 22:13:56.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-tcinterfaces.5 2012-06-28 17:01:58.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcinterfaces .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCINTERFA" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCINTERFA" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-tcpri.5 new/shorewall-4.5.5.3/manpages/shorewall-tcpri.5 --- old/shorewall-4.5.5.1/manpages/shorewall-tcpri.5 2012-06-14 22:13:58.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-tcpri.5 2012-06-28 17:02:00.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcpri .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCPRI" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCPRI" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-tcrules.5 new/shorewall-4.5.5.3/manpages/shorewall-tcrules.5 --- old/shorewall-4.5.5.1/manpages/shorewall-tcrules.5 2012-06-14 22:14:00.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-tcrules.5 2012-06-28 17:02:02.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcrules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCRULES" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCRULES" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-tos.5 new/shorewall-4.5.5.3/manpages/shorewall-tos.5 --- old/shorewall-4.5.5.1/manpages/shorewall-tos.5 2012-06-14 22:14:02.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-tos.5 2012-06-28 17:02:04.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tos .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TOS" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TOS" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-tunnels.5 new/shorewall-4.5.5.3/manpages/shorewall-tunnels.5 --- old/shorewall-4.5.5.1/manpages/shorewall-tunnels.5 2012-06-14 22:14:04.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-tunnels.5 2012-06-28 17:02:06.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tunnels .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TUNNELS" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TUNNELS" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-vardir.5 new/shorewall-4.5.5.3/manpages/shorewall-vardir.5 --- old/shorewall-4.5.5.1/manpages/shorewall-vardir.5 2012-06-14 22:14:06.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-vardir.5 2012-06-28 17:02:08.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-vardir .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-VARDIR" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-VARDIR" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall-zones.5 new/shorewall-4.5.5.3/manpages/shorewall-zones.5 --- old/shorewall-4.5.5.1/manpages/shorewall-zones.5 2012-06-14 22:14:11.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall-zones.5 2012-06-28 17:02:13.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-zones .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ZONES" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ZONES" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall.8 new/shorewall-4.5.5.3/manpages/shorewall.8 --- old/shorewall-4.5.5.1/manpages/shorewall.8 2012-06-14 22:14:09.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall.8 2012-06-28 17:02:11.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL" "8" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL" "8" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/manpages/shorewall.conf.5 new/shorewall-4.5.5.3/manpages/shorewall.conf.5 --- old/shorewall-4.5.5.1/manpages/shorewall.conf.5 2012-06-14 22:13:01.000000000 +0200 +++ new/shorewall-4.5.5.3/manpages/shorewall.conf.5 2012-06-28 17:01:03.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall.conf .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\&.CONF" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\&.CONF" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/releasenotes.txt new/shorewall-4.5.5.3/releasenotes.txt --- old/shorewall-4.5.5.1/releasenotes.txt 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/releasenotes.txt 2012-06-28 17:00:50.000000000 +0200 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 4 . 5 . 5 . 1 + S H O R E W A L L 4 . 5 . 5 . 3 ------------------------------------ - J u n e 1 7 , 2 0 1 2 + J u n e 2 8 , 2 0 1 2 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -15,6 +15,42 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- +4.5.5.3 + +1) When logical interface names were used, an entry in tcrules that + included a classid could result in the compiler failing with this + Perl diagnostic: + + Can't use an undefined value as an ARRAY reference at + /usr/share/shorewall/Shorewall/Tc.pm line nnn, <$currentfile> + line 20. + +4.5.5.2 + +1) Previously, when ipp2p was used in the /etc/shorewall/tcpri file, + the generated code for saving the packet mark was clearing the + connection marks fields not having to do with traffic shaping. It + now only alters the traffic-shaping part of the connection mark. + +2) Shorewall 4.4.11 allowed UID and GID ranges to be specified in the + USER:GROUP column of the rules file. That undocumented capability + has been restored for the benefit of Debian users upgrading from + Squeeze to Wheezy. + +3) The special TPROXY mark value is now shown in the output of + 'shorewall show marks'. + +4) Assuming that A = 0 and B = 1, the following conditionals + previously produced incorrect results: + + ?IF $A + ?IF $B + <text> + ?ENDIF + ?ENDIF + + The <text> was included when it should have been omitted. + 4.5.5.1 1) The change in Shorewall 4.5.4 that cleared the 'default' table if @@ -28,7 +64,7 @@ 2) When a logical device name was specified in the REDIRECTED INTERFACES column of /etc/shorewall/tcdevices, that name was used - in the generated script rather than the devices's physical + in the generated script rather than the device's physical name. Unless the two were the same, this caused start/restart failure. Shorewall now uses the physical name. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/shorewall.spec new/shorewall-4.5.5.3/shorewall.spec --- old/shorewall-4.5.5.1/shorewall.spec 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/shorewall.spec 2012-06-28 17:00:50.000000000 +0200 @@ -1,6 +1,6 @@ %define name shorewall %define version 4.5.5 -%define release 1 +%define release 3 Summary: Shoreline Firewall is an iptables-based firewall for Linux systems. Name: %{name} @@ -118,6 +118,10 @@ %doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples %changelog +* Thu Jun 28 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.5-3 +* Fri Jun 22 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.5-2 * Tue Jun 12 2012 Tom Eastep tom@shorewall.net - Updated to 4.5.5-1 * Sat Jun 09 2012 Tom Eastep tom@shorewall.net diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.5.1/uninstall.sh new/shorewall-4.5.5.3/uninstall.sh --- old/shorewall-4.5.5.1/uninstall.sh 2012-06-14 22:12:48.000000000 +0200 +++ new/shorewall-4.5.5.3/uninstall.sh 2012-06-28 17:00:50.000000000 +0200 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.5.5.1 +VERSION=4.5.5.3 usage() # $1 = exit status { ++++++ shorewall-core-4.5.5.1.tar.bz2 -> shorewall-core-4.5.5.3.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.5.1/changelog.txt new/shorewall-core-4.5.5.3/changelog.txt --- old/shorewall-core-4.5.5.1/changelog.txt 2012-06-14 15:39:21.000000000 +0200 +++ new/shorewall-core-4.5.5.3/changelog.txt 2012-06-28 17:00:50.000000000 +0200 @@ -1,3 +1,33 @@ +Changes in 4.5.5.3 + +1) Correct a Perl trap caused by using logical names with 'classify'. + +2) Ensure that exclusion chains always have the 'DONT_MOVE' flag set. + +Changes in 4.5.5.2 + +1) Allow UID/GID ranges in the USER/GROUP column (undocumented) + +2) Don't use '--ctmark' when saving marks. + +3) Display PROXY_MARK in 'show marks'. + +4) Another fix for nested ?IFs + +Changes in 4.5.5.1 + +1) Fix handling of multiple fallback providers. + +2) Allow logical device names in the REDIRECTED column. + +Changes in 4.5.5 Final + +1) Restore fix to configure script. + +2) Fix installer's handling of SYSCONFDIR + +3) Add DIGEST support. + Changes in 4.5.5 RC 1 1) Change in 'ignore' behavior. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.5.1/configure new/shorewall-core-4.5.5.3/configure --- old/shorewall-core-4.5.5.1/configure 2012-06-14 15:39:21.000000000 +0200 +++ new/shorewall-core-4.5.5.3/configure 2012-06-28 17:00:50.000000000 +0200 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=4.5.5.1 +VERSION=4.5.5.3 case "$BASH_VERSION" in [4-9].*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.5.1/configure.pl new/shorewall-core-4.5.5.3/configure.pl --- old/shorewall-core-4.5.5.1/configure.pl 2012-06-14 15:39:21.000000000 +0200 +++ new/shorewall-core-4.5.5.3/configure.pl 2012-06-28 17:00:50.000000000 +0200 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '4.5.5.1' + VERSION => '4.5.5.3' }; my %params; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.5.1/install.sh new/shorewall-core-4.5.5.3/install.sh --- old/shorewall-core-4.5.5.1/install.sh 2012-06-14 15:39:21.000000000 +0200 +++ new/shorewall-core-4.5.5.3/install.sh 2012-06-28 17:00:50.000000000 +0200 @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.5.5.1 +VERSION=4.5.5.3 usage() # $1 = exit status { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.5.1/known_problems.txt new/shorewall-core-4.5.5.3/known_problems.txt --- old/shorewall-core-4.5.5.1/known_problems.txt 2012-06-14 15:39:21.000000000 +0200 +++ new/shorewall-core-4.5.5.3/known_problems.txt 2012-06-28 17:00:50.000000000 +0200 @@ -16,3 +16,53 @@ failure. Corrected in Shorewall 4.5.5.1. + +4) When ipp2p is used in the /etc/shorewall/tcpri file, the generated + code for saving the packet mark is clearing the connection marks + fields not having to do with traffic shaping. + + Corrected in Shorewall 4.5.5.2. + +5) Shorewall 4.4.11 allows UID and GID ranges to be specified in the + USER:GROUP column of the rules file. That undocumented feature + is not present in Shorewall 4.5. + + Corrected in Shorewall 4.5.5.2. + +6) The special TPROXY mark value is not shown in the output of + 'shorewall show marks'. + + Corrected in Shorewall 4.5.5.2. + +7) Assuming that A = 0 and B = 1, the following conditionals produce + incorrect results: + + ?IF $A + ?IF $B + <text> + ?ENDIF + ?ENDIF + + The <text> is included when it should be omitted. + + Corrected in Shorewall 4.5.5.2. + +8) When logical interface names are used, an entry in tcrules that + includes a classid can result in the compiler failing with this + Perl diagnostic: + + Can't use an undefined value as an ARRAY reference at + /usr/share/shorewall/Shorewall/Tc.pm line nnn, <$currentfile> + line 20. + + Workarounds: + + a: Use only physical names for interfaces appearing in the + tcrules file when classids are needed. + + b: Follow classids in the rules file with ':T' (e.g., 1:4:T). + + Corrected in Shorewall 4.5.5.3. + + + diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.5.1/releasenotes.txt new/shorewall-core-4.5.5.3/releasenotes.txt --- old/shorewall-core-4.5.5.1/releasenotes.txt 2012-06-14 15:39:21.000000000 +0200 +++ new/shorewall-core-4.5.5.3/releasenotes.txt 2012-06-28 17:00:50.000000000 +0200 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 4 . 5 . 5 . 1 + S H O R E W A L L 4 . 5 . 5 . 3 ------------------------------------ - J u n e 1 7 , 2 0 1 2 + J u n e 2 8 , 2 0 1 2 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -15,6 +15,42 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- +4.5.5.3 + +1) When logical interface names were used, an entry in tcrules that + included a classid could result in the compiler failing with this + Perl diagnostic: + + Can't use an undefined value as an ARRAY reference at + /usr/share/shorewall/Shorewall/Tc.pm line nnn, <$currentfile> + line 20. + +4.5.5.2 + +1) Previously, when ipp2p was used in the /etc/shorewall/tcpri file, + the generated code for saving the packet mark was clearing the + connection marks fields not having to do with traffic shaping. It + now only alters the traffic-shaping part of the connection mark. + +2) Shorewall 4.4.11 allowed UID and GID ranges to be specified in the + USER:GROUP column of the rules file. That undocumented capability + has been restored for the benefit of Debian users upgrading from + Squeeze to Wheezy. + +3) The special TPROXY mark value is now shown in the output of + 'shorewall show marks'. + +4) Assuming that A = 0 and B = 1, the following conditionals + previously produced incorrect results: + + ?IF $A + ?IF $B + <text> + ?ENDIF + ?ENDIF + + The <text> was included when it should have been omitted. + 4.5.5.1 1) The change in Shorewall 4.5.4 that cleared the 'default' table if @@ -28,7 +64,7 @@ 2) When a logical device name was specified in the REDIRECTED INTERFACES column of /etc/shorewall/tcdevices, that name was used - in the generated script rather than the devices's physical + in the generated script rather than the device's physical name. Unless the two were the same, this caused start/restart failure. Shorewall now uses the physical name. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.5.1/shorewall-core.spec new/shorewall-core-4.5.5.3/shorewall-core.spec --- old/shorewall-core-4.5.5.1/shorewall-core.spec 2012-06-14 15:39:21.000000000 +0200 +++ new/shorewall-core-4.5.5.3/shorewall-core.spec 2012-06-28 17:00:50.000000000 +0200 @@ -1,6 +1,6 @@ %define name shorewall-core %define version 4.5.5 -%define release 1 +%define release 3 Summary: Shoreline Firewall is an iptables-based firewall for Linux systems. Name: %{name} @@ -62,6 +62,10 @@ %doc COPYING INSTALL changelog.txt releasenotes.txt %changelog +* Thu Jun 28 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.5-3 +* Fri Jun 22 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.5-2 * Tue Jun 12 2012 Tom Eastep tom@shorewall.net - Updated to 4.5.5-1 * Sat Jun 09 2012 Tom Eastep tom@shorewall.net diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.5.1/uninstall.sh new/shorewall-core-4.5.5.3/uninstall.sh --- old/shorewall-core-4.5.5.1/uninstall.sh 2012-06-14 15:39:21.000000000 +0200 +++ new/shorewall-core-4.5.5.3/uninstall.sh 2012-06-28 17:00:50.000000000 +0200 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.5.5.1 +VERSION=4.5.5.3 usage() # $1 = exit status { ++++++ shorewall-docs-html-4.5.5.1.tar.bz2 -> shorewall-docs-html-4.5.5.3.tar.bz2 ++++++ ++++ 6151 lines of diff (skipped) ++++++ shorewall-init-4.5.5.1.tar.bz2 -> shorewall-init-4.5.5.3.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.5.1/changelog.txt new/shorewall-init-4.5.5.3/changelog.txt --- old/shorewall-init-4.5.5.1/changelog.txt 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-init-4.5.5.3/changelog.txt 2012-06-28 17:00:50.000000000 +0200 @@ -1,3 +1,33 @@ +Changes in 4.5.5.3 + +1) Correct a Perl trap caused by using logical names with 'classify'. + +2) Ensure that exclusion chains always have the 'DONT_MOVE' flag set. + +Changes in 4.5.5.2 + +1) Allow UID/GID ranges in the USER/GROUP column (undocumented) + +2) Don't use '--ctmark' when saving marks. + +3) Display PROXY_MARK in 'show marks'. + +4) Another fix for nested ?IFs + +Changes in 4.5.5.1 + +1) Fix handling of multiple fallback providers. + +2) Allow logical device names in the REDIRECTED column. + +Changes in 4.5.5 Final + +1) Restore fix to configure script. + +2) Fix installer's handling of SYSCONFDIR + +3) Add DIGEST support. + Changes in 4.5.5 RC 1 1) Change in 'ignore' behavior. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.5.1/configure new/shorewall-init-4.5.5.3/configure --- old/shorewall-init-4.5.5.1/configure 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-init-4.5.5.3/configure 2012-06-28 17:00:50.000000000 +0200 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=4.5.5.1 +VERSION=4.5.5.3 case "$BASH_VERSION" in [4-9].*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.5.1/configure.pl new/shorewall-init-4.5.5.3/configure.pl --- old/shorewall-init-4.5.5.1/configure.pl 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-init-4.5.5.3/configure.pl 2012-06-28 17:00:50.000000000 +0200 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '4.5.5.1' + VERSION => '4.5.5.3' }; my %params; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.5.1/install.sh new/shorewall-init-4.5.5.3/install.sh --- old/shorewall-init-4.5.5.1/install.sh 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-init-4.5.5.3/install.sh 2012-06-28 17:00:50.000000000 +0200 @@ -23,7 +23,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.5.5.1 +VERSION=4.5.5.3 usage() # $1 = exit status { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.5.1/releasenotes.txt new/shorewall-init-4.5.5.3/releasenotes.txt --- old/shorewall-init-4.5.5.1/releasenotes.txt 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-init-4.5.5.3/releasenotes.txt 2012-06-28 17:00:50.000000000 +0200 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 4 . 5 . 5 . 1 + S H O R E W A L L 4 . 5 . 5 . 3 ------------------------------------ - J u n e 1 7 , 2 0 1 2 + J u n e 2 8 , 2 0 1 2 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -15,6 +15,42 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- +4.5.5.3 + +1) When logical interface names were used, an entry in tcrules that + included a classid could result in the compiler failing with this + Perl diagnostic: + + Can't use an undefined value as an ARRAY reference at + /usr/share/shorewall/Shorewall/Tc.pm line nnn, <$currentfile> + line 20. + +4.5.5.2 + +1) Previously, when ipp2p was used in the /etc/shorewall/tcpri file, + the generated code for saving the packet mark was clearing the + connection marks fields not having to do with traffic shaping. It + now only alters the traffic-shaping part of the connection mark. + +2) Shorewall 4.4.11 allowed UID and GID ranges to be specified in the + USER:GROUP column of the rules file. That undocumented capability + has been restored for the benefit of Debian users upgrading from + Squeeze to Wheezy. + +3) The special TPROXY mark value is now shown in the output of + 'shorewall show marks'. + +4) Assuming that A = 0 and B = 1, the following conditionals + previously produced incorrect results: + + ?IF $A + ?IF $B + <text> + ?ENDIF + ?ENDIF + + The <text> was included when it should have been omitted. + 4.5.5.1 1) The change in Shorewall 4.5.4 that cleared the 'default' table if @@ -28,7 +64,7 @@ 2) When a logical device name was specified in the REDIRECTED INTERFACES column of /etc/shorewall/tcdevices, that name was used - in the generated script rather than the devices's physical + in the generated script rather than the device's physical name. Unless the two were the same, this caused start/restart failure. Shorewall now uses the physical name. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.5.1/shorewall-init.spec new/shorewall-init-4.5.5.3/shorewall-init.spec --- old/shorewall-init-4.5.5.1/shorewall-init.spec 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-init-4.5.5.3/shorewall-init.spec 2012-06-28 17:00:50.000000000 +0200 @@ -1,6 +1,6 @@ %define name shorewall-init %define version 4.5.5 -%define release 1 +%define release 3 Summary: Shorewall-init adds functionality to Shoreline Firewall (Shorewall). Name: %{name} @@ -125,6 +125,10 @@ %doc COPYING changelog.txt releasenotes.txt %changelog +* Thu Jun 28 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.5-3 +* Fri Jun 22 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.5-2 * Tue Jun 12 2012 Tom Eastep tom@shorewall.net - Updated to 4.5.5-1 * Sat Jun 09 2012 Tom Eastep tom@shorewall.net diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.5.1/uninstall.sh new/shorewall-init-4.5.5.3/uninstall.sh --- old/shorewall-init-4.5.5.1/uninstall.sh 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-init-4.5.5.3/uninstall.sh 2012-06-28 17:00:50.000000000 +0200 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.5.5.1 +VERSION=4.5.5.3 usage() # $1 = exit status { ++++++ shorewall-lite-4.5.5.1.tar.bz2 -> shorewall-lite-4.5.5.3.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/changelog.txt new/shorewall-lite-4.5.5.3/changelog.txt --- old/shorewall-lite-4.5.5.1/changelog.txt 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/changelog.txt 2012-06-28 17:00:51.000000000 +0200 @@ -1,3 +1,33 @@ +Changes in 4.5.5.3 + +1) Correct a Perl trap caused by using logical names with 'classify'. + +2) Ensure that exclusion chains always have the 'DONT_MOVE' flag set. + +Changes in 4.5.5.2 + +1) Allow UID/GID ranges in the USER/GROUP column (undocumented) + +2) Don't use '--ctmark' when saving marks. + +3) Display PROXY_MARK in 'show marks'. + +4) Another fix for nested ?IFs + +Changes in 4.5.5.1 + +1) Fix handling of multiple fallback providers. + +2) Allow logical device names in the REDIRECTED column. + +Changes in 4.5.5 Final + +1) Restore fix to configure script. + +2) Fix installer's handling of SYSCONFDIR + +3) Add DIGEST support. + Changes in 4.5.5 RC 1 1) Change in 'ignore' behavior. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/configure new/shorewall-lite-4.5.5.3/configure --- old/shorewall-lite-4.5.5.1/configure 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/configure 2012-06-28 17:00:51.000000000 +0200 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=4.5.5.1 +VERSION=4.5.5.3 case "$BASH_VERSION" in [4-9].*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/configure.pl new/shorewall-lite-4.5.5.3/configure.pl --- old/shorewall-lite-4.5.5.1/configure.pl 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/configure.pl 2012-06-28 17:00:51.000000000 +0200 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '4.5.5.1' + VERSION => '4.5.5.3' }; my %params; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/install.sh new/shorewall-lite-4.5.5.3/install.sh --- old/shorewall-lite-4.5.5.1/install.sh 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/install.sh 2012-06-28 17:00:51.000000000 +0200 @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.5.5.1 +VERSION=4.5.5.3 usage() # $1 = exit status { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/manpages/shorewall-lite-vardir.5 new/shorewall-lite-4.5.5.3/manpages/shorewall-lite-vardir.5 --- old/shorewall-lite-4.5.5.1/manpages/shorewall-lite-vardir.5 2012-06-14 15:44:51.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/manpages/shorewall-lite-vardir.5 2012-06-28 17:06:20.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-lite-vardir .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-LITE\-VAR" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-LITE\-VAR" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/manpages/shorewall-lite.8 new/shorewall-lite-4.5.5.3/manpages/shorewall-lite.8 --- old/shorewall-lite-4.5.5.1/manpages/shorewall-lite.8 2012-06-14 15:44:53.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/manpages/shorewall-lite.8 2012-06-28 17:06:22.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-lite .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-LITE" "8" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-LITE" "8" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/manpages/shorewall-lite.conf.5 new/shorewall-lite-4.5.5.3/manpages/shorewall-lite.conf.5 --- old/shorewall-lite-4.5.5.1/manpages/shorewall-lite.conf.5 2012-06-14 15:44:48.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/manpages/shorewall-lite.conf.5 2012-06-28 17:06:17.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-lite.conf .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 06/14/2012 +.\" Date: 06/28/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-LITE\&.CO" "5" "06/14/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-LITE\&.CO" "5" "06/28/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/releasenotes.txt new/shorewall-lite-4.5.5.3/releasenotes.txt --- old/shorewall-lite-4.5.5.1/releasenotes.txt 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/releasenotes.txt 2012-06-28 17:00:51.000000000 +0200 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 4 . 5 . 5 . 1 + S H O R E W A L L 4 . 5 . 5 . 3 ------------------------------------ - J u n e 1 7 , 2 0 1 2 + J u n e 2 8 , 2 0 1 2 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -15,6 +15,42 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- +4.5.5.3 + +1) When logical interface names were used, an entry in tcrules that + included a classid could result in the compiler failing with this + Perl diagnostic: + + Can't use an undefined value as an ARRAY reference at + /usr/share/shorewall/Shorewall/Tc.pm line nnn, <$currentfile> + line 20. + +4.5.5.2 + +1) Previously, when ipp2p was used in the /etc/shorewall/tcpri file, + the generated code for saving the packet mark was clearing the + connection marks fields not having to do with traffic shaping. It + now only alters the traffic-shaping part of the connection mark. + +2) Shorewall 4.4.11 allowed UID and GID ranges to be specified in the + USER:GROUP column of the rules file. That undocumented capability + has been restored for the benefit of Debian users upgrading from + Squeeze to Wheezy. + +3) The special TPROXY mark value is now shown in the output of + 'shorewall show marks'. + +4) Assuming that A = 0 and B = 1, the following conditionals + previously produced incorrect results: + + ?IF $A + ?IF $B + <text> + ?ENDIF + ?ENDIF + + The <text> was included when it should have been omitted. + 4.5.5.1 1) The change in Shorewall 4.5.4 that cleared the 'default' table if @@ -28,7 +64,7 @@ 2) When a logical device name was specified in the REDIRECTED INTERFACES column of /etc/shorewall/tcdevices, that name was used - in the generated script rather than the devices's physical + in the generated script rather than the device's physical name. Unless the two were the same, this caused start/restart failure. Shorewall now uses the physical name. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/shorewall-lite.spec new/shorewall-lite-4.5.5.3/shorewall-lite.spec --- old/shorewall-lite-4.5.5.1/shorewall-lite.spec 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/shorewall-lite.spec 2012-06-28 17:00:51.000000000 +0200 @@ -1,6 +1,6 @@ %define name shorewall-lite %define version 4.5.5 -%define release 1 +%define release 3 %define initdir /etc/init.d Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems. @@ -105,6 +105,10 @@ %doc COPYING changelog.txt releasenotes.txt %changelog +* Thu Jun 28 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.5-3 +* Fri Jun 22 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.5-2 * Tue Jun 12 2012 Tom Eastep tom@shorewall.net - Updated to 4.5.5-1 * Sat Jun 09 2012 Tom Eastep tom@shorewall.net diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.5.1/uninstall.sh new/shorewall-lite-4.5.5.3/uninstall.sh --- old/shorewall-lite-4.5.5.1/uninstall.sh 2012-06-14 15:39:22.000000000 +0200 +++ new/shorewall-lite-4.5.5.3/uninstall.sh 2012-06-28 17:00:51.000000000 +0200 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.5.5.1 +VERSION=4.5.5.3 usage() # $1 = exit status { ++++++ shorewall-4.5.5.1.tar.bz2 -> shorewall6-4.5.5.3.tar.bz2 ++++++ ++++ 99674 lines of diff (skipped) ++++++ shorewall-lite-4.5.5.1.tar.bz2 -> shorewall6-lite-4.5.5.3.tar.bz2 ++++++ ++++ 6721 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org
participants (1)
-
root@hilbert.suse.de