March 2006 - openSUSE Commits - openSUSE Mailing Lists

commit libzypp-zmd-backend
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package libzypp-zmd-backend checked in at Wed Mar 29 16:51:29 CEST 2006. -------- --- libzypp-zmd-backend/libzypp-zmd-backend.changes 2006-03-29 13:31:02.000000000 +0200 +++ libzypp-zmd-backend/libzypp-zmd-backend.changes 2006-03-29 15:01:29.000000000 +0200 @@ -1,0 +2,7 @@ +Wed Mar 29 15:00:06 CEST 2006 - kkaempf(a)suse.de + +- report proper error if .rpm file can't be found (#160402) +- dont ask for media 0 +- rev 2751 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libzypp-zmd-backend.spec ++++++ --- /var/tmp/diff_new_pack.P5E81x/_old 2006-03-29 16:49:38.000000000 +0200 +++ /var/tmp/diff_new_pack.P5E81x/_new 2006-03-29 16:49:38.000000000 +0200 @@ -22,7 +22,7 @@ Obsoletes: zmd-librc-backend Summary: ZMD backend for Package, Patch, Pattern, and Product Management Version: 7.1.1 -Release: 20 +Release: 21 Source: zmd-backend-%{version}.tar.bz2 Prefix: /usr @@ -69,6 +69,10 @@ %changelog -n libzypp-zmd-backend * Wed Mar 29 2006 - kkaempf(a)suse.de +- report proper error if .rpm file can't be found (#160402) +- dont ask for media 0 +- rev 2751 +* Wed Mar 29 2006 - kkaempf(a)suse.de - call the correct 'getZYpp()' function. - fix argument parsing in resolve-dependencies (#161699) - rev 2748 ++++++ zmd-backend-7.1.1.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/zmd-backend-7.1.1/src/MediaChangeCallback.h new/zmd-backend-7.1.1/src/MediaChangeCallback.h --- old/zmd-backend-7.1.1/src/MediaChangeCallback.h 2006-03-09 11:48:40.000000000 +0100 +++ new/zmd-backend-7.1.1/src/MediaChangeCallback.h 2006-03-29 14:57:27.000000000 +0200 @@ -6,7 +6,7 @@ | /_____||_| |_| |_| | | | \---------------------------------------------------------------------*/ -/** \file zmd/backend/MediaChangeCallback.cc +/** \file zmd/backend/MediaChangeCallback.h * */ @@ -48,23 +48,31 @@ DBG << "requestMedia(" << source << ", " << mediumNr << ", " << error << ", " << description << ")" << endl; - // request media via stdout + if (mediumNr > 0) { - std::cout << "10|" << mediumNr; + // request media via stdout - std::string product_name; + std::cout << "10|" << mediumNr; - // get name of the product - for (zypp::ResStore::iterator it = source.resolvables().begin(); it != source.resolvables().end(); it++) - { - // is it a product object? - if (zypp::isKind<zypp::Product>( *it )) + std::string product_name; + + // get name of the product + for (zypp::ResStore::iterator it = source.resolvables().begin(); it != source.resolvables().end(); it++) { - product_name = (*it)->name(); - break; - } + // is it a product object? + if (zypp::isKind<zypp::Product>( *it )) + { + product_name = (*it)->name(); + break; + } + } + + if (product_name.empty()) { + product_name = description; + } + + std::cout << "|" << product_name << std::endl; } - std::cout << "|" << product_name << std::endl; // and abort here. // This will end the 'transact' helper and its up to ZMD to evaluate the diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/zmd-backend-7.1.1/src/transact.cc new/zmd-backend-7.1.1/src/transact.cc --- old/zmd-backend-7.1.1/src/transact.cc 2006-03-28 22:25:32.000000000 +0200 +++ new/zmd-backend-7.1.1/src/transact.cc 2006-03-29 14:51:01.000000000 +0200 @@ -139,7 +139,7 @@ ZYPP_CAUGHT( expt_r ); result = 1; if (m_callback.mediaNr() != 0 // exception due to MediaChange callback ? - || !m_callback.description().empty()) + && !m_callback.description().empty()) { cerr << "Need media " << m_callback.mediaNr() << ": " << m_callback.description() << endl; } ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0

commit horde
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package horde checked in at Wed Mar 29 16:50:01 CEST 2006. -------- --- horde/horde.changes 2006-03-27 15:07:41.000000000 +0200 +++ horde/horde.changes 2006-03-29 15:00:17.000000000 +0200 @@ -1,0 +2,6 @@ +Wed Mar 29 15:07:49 CEST 2006 - mmarek(a)suse.cz + +- fix insecure eval() calls (backport from 3.0.10 release) + [#161768] (eval.patch) + +------------------------------------------------------------------- New: ---- horde-3.0.9-eval.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ horde.spec ++++++ --- /var/tmp/diff_new_pack.7FS8h7/_old 2006-03-29 16:49:24.000000000 +0200 +++ /var/tmp/diff_new_pack.7FS8h7/_new 2006-03-29 16:49:24.000000000 +0200 @@ -17,10 +17,11 @@ Autoreqprov: on Requires: mod_php_any php-gettext php-mcrypt php-imap php-pear php-pear-log php-session php-dom php php5-pear-auth_sasl php5-pear-date php5-pear-db php5-pear-file php5-pear-mail php5-pear-mail_mime Version: 3.0.9 -Release: 9 +Release: 10 Source0: %{name}-%{version}.tar.bz2 Source2: README.SuSE Patch1: %{name}-%{version}-log.patch +Patch2: %{name}-%{version}-eval.patch URL: http://www.horde.org/ BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildArch: noarch @@ -44,6 +45,7 @@ %prep %setup -q %patch1 +%patch2 grep -ErZl '/usr/(local/)?bin/php' . | \ xargs -0 sed -ri 's@/usr/(local/)?bin/php@/usr/bin/php5@' cp -a %{S:2} . @@ -84,6 +86,9 @@ %attr(0750, wwwrun, www) %dir /var/log/horde %changelog -n horde +* Wed Mar 29 2006 - mmarek(a)suse.cz +- fix insecure eval() calls (backport from 3.0.10 release) + [#161768] (eval.patch) * Mon Mar 27 2006 - mmarek(a)suse.cz - require php-dom, which is needed by the configuration tool [#159335] ++++++ horde-3.0.9-eval.patch ++++++ --- lib/Horde/Util.php +++ lib/Horde/Util.php @@ -71,7 +71,7 @@ if (func_num_args() == 0) { return false; } - $eval = false; + $include = false; $args = func_get_args(); $function = array_shift($args); if (is_array($function)) { @@ -82,17 +82,31 @@ ($function == 'include_once') || ($function == 'require') || ($function == 'require_once')) { - $eval = true; - } elseif (!function_exists($function) && - ($function != 'eval')) { + $include = true; + } elseif (!function_exists($function)) { return false; } ob_start(); - if ($eval) { - eval($function . " '" . implode(',', $args) . "';"); - } elseif ($function == 'eval') { - eval($args[0]); + if ($include) { + $file = implode(',', $args); + switch ($function) { + case 'include': + include $file; + break; + + case 'include_once': + include_once $file; + break; + + case 'require': + require $file; + break; + + case 'require_once': + require_once $file; + break; + } } else { call_user_func_array($function, $args); } --- services/help/index.php +++ services/help/index.php @@ -53,7 +53,7 @@ require HORDE_TEMPLATES . '/help/menu.inc'; } elseif ($show == 'about') { require $fileroot . '/lib/version.php'; - eval('$version = "' . ucfirst($module) . ' " . ' . String::upper($module) . '_VERSION;'); + $version = String::ucfirst($module) . ' ' . constant(String::upper($module) . '_VERSION'); $credits = Util::bufferOutput('include', $fileroot . '/docs/CREDITS'); $credits = String::convertCharset($credits, 'iso-8859-1', NLS::getCharset()); require HORDE_TEMPLATES . '/help/about.inc'; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0

commit gfxboot
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package gfxboot checked in at Wed Mar 29 16:49:33 CEST 2006. -------- --- arch/i386/gfxboot/gfxboot.changes 2006-03-28 18:04:09.000000000 +0200 +++ gfxboot/gfxboot.changes 2006-03-29 16:35:23.000000000 +0200 @@ -1,0 +2,5 @@ +Wed Mar 29 16:35:12 CEST 2006 - snwint(a)suse.de + +- better 'welcome' screen + +------------------------------------------------------------------- Old: ---- gfxboot-3.2.17.tar.bz2 New: ---- gfxboot-3.2.18.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gfxboot.spec ++++++ --- /var/tmp/diff_new_pack.18i6V2/_old 2006-03-29 16:48:20.000000000 +0200 +++ /var/tmp/diff_new_pack.18i6V2/_new 2006-03-29 16:48:20.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package gfxboot (Version 3.2.17) +# spec file for package gfxboot (Version 3.2.18) # # Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -17,10 +17,10 @@ Obsoletes: gfxboot-devel Autoreqprov: on Summary: Graphical Boot Logo for LILO and SYSLINUX -Version: 3.2.17 +Version: 3.2.18 Release: 1 BuildRoot: %{_tmppath}/%{name}-%{version}-build -Source: gfxboot-3.2.17.tar.bz2 +Source: gfxboot-3.2.18.tar.bz2 Source1: NLD.tar.bz2 Source2: SLES.tar.bz2 Source3: SuSE.tar.bz2 @@ -58,6 +58,8 @@ /usr/share/gfxboot %changelog -n gfxboot +* Wed Mar 29 2006 - snwint(a)suse.de +- better 'welcome' screen * Tue Mar 28 2006 - snwint(a)suse.de - added new 'welcome' screen * Mon Mar 27 2006 - snwint(a)suse.de ++++++ NLD.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/themes/NLD/Makefile new/themes/NLD/Makefile --- old/themes/NLD/Makefile 2006-03-28 17:54:35.000000000 +0200 +++ new/themes/NLD/Makefile 2006-03-29 16:29:36.000000000 +0200 @@ -17,7 +17,7 @@ DEFAULT_LANG = PIC_COMMON = timer_a.jpg -PIC_INSTALL = back.jpg welcome.jpg text*.jpg +PIC_INSTALL = back.jpg welcome.jpg text*.pcx PIC_BOOT = back-low.jpg FILES_INST = init languages $(TRANSLATIONS) 16x16.fnt kroete.dat \ ++++++ SLES.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/themes/SLES/Makefile new/themes/SLES/Makefile --- old/themes/SLES/Makefile 2006-03-28 17:54:26.000000000 +0200 +++ new/themes/SLES/Makefile 2006-03-29 16:29:26.000000000 +0200 @@ -17,7 +17,7 @@ DEFAULT_LANG = PIC_COMMON = timer_a.jpg -PIC_INSTALL = back.jpg welcome.jpg text*.jpg +PIC_INSTALL = back.jpg welcome.jpg text*.pcx PIC_BOOT = back-low.jpg FILES_INST = init languages $(TRANSLATIONS) 16x16.fnt kroete.dat \ ++++++ SuSE.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/themes/SuSE/Makefile new/themes/SuSE/Makefile --- old/themes/SuSE/Makefile 2006-03-28 16:18:18.000000000 +0200 +++ new/themes/SuSE/Makefile 2006-03-29 15:46:02.000000000 +0200 @@ -17,7 +17,7 @@ DEFAULT_LANG = PIC_COMMON = timer_a.jpg -PIC_INSTALL = back.jpg welcome.jpg text*.jpg +PIC_INSTALL = back.jpg welcome.jpg text*.pcx PIC_BOOT = back-low.jpg FILES_INST = init languages $(TRANSLATIONS) 16x16.fnt kroete.dat \ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/themes/SuSE/bsplash.inc new/themes/SuSE/bsplash.inc --- old/themes/SuSE/bsplash.inc 2006-03-28 17:53:38.000000000 +0200 +++ new/themes/SuSE/bsplash.inc 2006-03-29 16:31:18.000000000 +0200 @@ -22,14 +22,14 @@ /.b_tmp2 11 def /bsplash.list [ - [ 680 45 -5 0 100 "text2a.jpg" -1 0 0 .undef .undef .undef ] - [ 680 95 -5 0 100 "text2b.jpg" -1 0 0 .undef .undef .undef ] - [ 680 145 -5 0 100 "text2c.jpg" -1 0 0 .undef .undef .undef ] - [ 690 470 -5 0 100 "text1.jpg" -50 0 0 .undef .undef .undef ] - [ 70 40 0 0 100 "text3.jpg" -80 0 0 .undef .undef .undef ] - [ 90 425 0 2 50 "text4a.jpg" -150 0 0 .undef .undef .undef ] - [ 90 485 0 0 50 "text4b.jpg" -150 0 0 .undef .undef .undef ] - [ 90 535 0 -2 50 "text4c.jpg" -150 0 0 .undef .undef .undef ] + [ 680 45 -20 0 10 "text2a.pcx" -1 0 0 .undef .undef .undef ] + [ 680 95 -20 0 10 "text2b.pcx" -1 0 0 .undef .undef .undef ] + [ 680 145 -20 0 10 "text2c.pcx" -1 0 0 .undef .undef .undef ] + [ 690 470 -20 0 10 "text1.pcx" -7 0 0 .undef .undef .undef ] + [ 70 40 0 0 10 "text3.pcx" -10 0 0 .undef .undef .undef ] + [ 90 415 0 20 10 "text4a.pcx" -15 0 0 .undef .undef .undef ] + [ 90 485 0 0 10 "text4b.pcx" -15 0 0 .undef .undef .undef ] + [ 90 535 0 -20 10 "text4c.pcx" -15 0 0 .undef .undef .undef ] ] def @@ -51,8 +51,8 @@ over .b_h get 2 index .b_steps get 3 index .b_dy get abs mul add savescreen over .b_back rot put - dup .b_w get over .b_h get savescreen over .b_tmp1 rot put - dup .b_w get over .b_h get savescreen over .b_tmp2 rot put + dup .b_w get 1 sub over .b_h get 1 sub savescreen over .b_tmp1 rot put + dup .b_w get 1 sub over .b_h get 1 sub savescreen over .b_tmp2 rot put } { pop } ifelse @@ -136,10 +136,11 @@ dup .b_tmp2 get over .b_tmp1 get over length memcpy % draw text - 0 0 moveto white over .b_mask get 2 index .b_tmp1 get blend + 0 0 moveto 0x333333 over .b_mask get 2 index .b_tmp1 get blend + 1 1 moveto white over .b_mask get 2 index .b_tmp1 get blend % blend result with background - dup .b_tmp1 get over .b_count get 255 mul 2 index .b_steps get div 2 index .b_tmp2 get blend + 0 0 moveto dup .b_tmp1 get over .b_count get 255 mul 2 index .b_steps get div 2 index .b_tmp2 get blend % show result dup .b_x get over .b_dx get 2 index .b_count get mul 10 div add Binary files old/themes/SuSE/text1.jpg and new/themes/SuSE/text1.jpg differ Binary files old/themes/SuSE/text1.pcx and new/themes/SuSE/text1.pcx differ Binary files old/themes/SuSE/text2a.jpg and new/themes/SuSE/text2a.jpg differ Binary files old/themes/SuSE/text2a.pcx and new/themes/SuSE/text2a.pcx differ Binary files old/themes/SuSE/text2b.jpg and new/themes/SuSE/text2b.jpg differ Binary files old/themes/SuSE/text2b.pcx and new/themes/SuSE/text2b.pcx differ Binary files old/themes/SuSE/text2c.jpg and new/themes/SuSE/text2c.jpg differ Binary files old/themes/SuSE/text2c.pcx and new/themes/SuSE/text2c.pcx differ Binary files old/themes/SuSE/text3.jpg and new/themes/SuSE/text3.jpg differ Binary files old/themes/SuSE/text3.pcx and new/themes/SuSE/text3.pcx differ Binary files old/themes/SuSE/text4a.jpg and new/themes/SuSE/text4a.jpg differ Binary files old/themes/SuSE/text4a.pcx and new/themes/SuSE/text4a.pcx differ Binary files old/themes/SuSE/text4b.jpg and new/themes/SuSE/text4b.jpg differ Binary files old/themes/SuSE/text4b.pcx and new/themes/SuSE/text4b.pcx differ Binary files old/themes/SuSE/text4c.jpg and new/themes/SuSE/text4c.jpg differ Binary files old/themes/SuSE/text4c.pcx and new/themes/SuSE/text4c.pcx differ ++++++ gfxboot-3.2.17.tar.bz2 -> gfxboot-3.2.18.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/gfxboot-3.2.17/Changelog new/gfxboot-3.2.18/Changelog --- old/gfxboot-3.2.17/Changelog 2006-03-28 18:02:45.000000000 +0200 +++ new/gfxboot-3.2.18/Changelog 2006-03-29 16:30:39.000000000 +0200 @@ -1,3 +1,6 @@ +29/3/2006: v3.2.18 + - better 'welcome' screen + 28/3/2006: v3.2.17 - added new 'welcome' screen diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/gfxboot-3.2.17/VERSION new/gfxboot-3.2.18/VERSION --- old/gfxboot-3.2.17/VERSION 2006-03-28 18:02:22.000000000 +0200 +++ new/gfxboot-3.2.18/VERSION 2006-03-29 16:30:20.000000000 +0200 @@ -1 +1 @@ -3.2.17 +3.2.18 diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/gfxboot-3.2.17/bincode.asm new/gfxboot-3.2.18/bincode.asm --- old/gfxboot-3.2.17/bincode.asm 2006-02-09 16:09:16.000000000 +0100 +++ new/gfxboot-3.2.18/bincode.asm 2006-03-29 16:08:41.000000000 +0200 @@ -9442,8 +9442,8 @@ add ecx,ecx xor edx,edx div ecx - or eax,eax - jz prim_usleep_90 + ; or eax,eax + ; jz prim_usleep_90 mov ecx,eax push ecx call get_time ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0

commit SuSEfirewall2
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package SuSEfirewall2 checked in at Wed Mar 29 16:49:19 CEST 2006. -------- --- SuSEfirewall2/SuSEfirewall2.changes 2006-03-06 16:33:04.000000000 +0100 +++ SuSEfirewall2/SuSEfirewall2.changes 2006-03-28 16:20:04.000000000 +0200 @@ -1,0 +2,5 @@ +Tue Mar 28 16:19:52 CEST 2006 - lnussel(a)suse.de + +- introduce FW_FORWARD_ALWAYS_INOUT_DEV for use with XEN (#154133) + +------------------------------------------------------------------- Old: ---- SuSEfirewall2-3.4_SVNr139.tar.bz2 New: ---- SuSEfirewall2-3.4_SVNr140.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ SuSEfirewall2.spec ++++++ --- /var/tmp/diff_new_pack.EqI8do/_old 2006-03-29 16:48:06.000000000 +0200 +++ /var/tmp/diff_new_pack.EqI8do/_new 2006-03-29 16:48:06.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package SuSEfirewall2 (Version 3.4_SVNr139) +# spec file for package SuSEfirewall2 (Version 3.4_SVNr140) # # Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -12,7 +12,7 @@ # icecream 0 Name: SuSEfirewall2 -Version: 3.4_SVNr139 +Version: 3.4_SVNr140 Release: 1 License: GPL Group: Productivity/Networking/Security @@ -205,6 +205,8 @@ rm -rf %{buildroot} %changelog -n SuSEfirewall2 +* Tue Mar 28 2006 - lnussel(a)suse.de +- introduce FW_FORWARD_ALWAYS_INOUT_DEV for use with XEN (#154133) * Mon Mar 06 2006 - lnussel(a)suse.de - log and drop multicast packets separately in order to prevent flooding other log targets (#155326) ++++++ SuSEfirewall2-3.4_SVNr139.tar.bz2 -> SuSEfirewall2-3.4_SVNr140.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/SuSEfirewall2-3.4_SVNr139/EXAMPLES.html new/SuSEfirewall2-3.4_SVNr140/EXAMPLES.html --- old/SuSEfirewall2-3.4_SVNr139/EXAMPLES.html 2006-01-03 11:08:36.000000000 +0100 +++ new/SuSEfirewall2-3.4_SVNr140/EXAMPLES.html 2006-03-28 16:18:35.000000000 +0200 @@ -1,12 +1,12 @@ <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> -<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>SuSEfirewall2 configuration examples</title><link rel="stylesheet" href="susebooks.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.69.0" /></head><body><div class="article" lang="en" xml:lang="en"><div class="titlepage"><div><div><h1 class="title"><a id="id2410433"></a>SuSEfirewall2 configuration examples</h1></div></div><hr /></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="#id2482864">1. Simple dialup</a></span></dt><dt><span class="section"><a href="#id2482885">2. Small home network</a></span></dt><dt><span class="section"><a href="#id2482907">3. Small home network with additional WLAN</a></span></dt><dt><span class="section"><a href="#id2460290">4. Small company with external mail and web server</a></span></dt><dt><span class="section"><a href="#id2460323">5. Company with IPsec tunnel to subsidiary</a></span></dt><dt><span class="section"><a href="#id2460397">6. Company with web server in DMZ</a></span></dt><dt><span class="section"><a href="#id2459845">7. Complex scenario</a></span></dt><dt><span class="section"><a href="#id2459967">8. Laptop in private network but with additional public IP adresses</a></span></dt></dl></div><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p> +<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>SuSEfirewall2 configuration examples</title><link rel="stylesheet" href="susebooks.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.69.1" /></head><body><div class="article" lang="en" xml:lang="en"><div class="titlepage"><div><div><h1 class="title"><a id="id2412343"></a>SuSEfirewall2 configuration examples</h1></div></div><hr /></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="#id2483278">1. Simple dialup</a></span></dt><dt><span class="section"><a href="#id2483299">2. Small home network</a></span></dt><dt><span class="section"><a href="#id2483321">3. Small home network with additional WLAN</a></span></dt><dt><span class="section"><a href="#id2460778">4. Small company with external mail and web server</a></span></dt><dt><span class="section"><a href="#id2460811">5. Company with IPsec tunnel to subsidiary</a></span></dt><dt><span class="section"><a href="#id2460887">6. Company with web server in DMZ</a></span></dt><dt><span class="section"><a href="#id2460309">7. Complex scenario</a></span></dt><dt><span class="section"><a href="#id2460432">8. Laptop in private network but with additional public IP adresses</a></span></dt></dl></div><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p> All options <span class="emphasis"><em>not</em></span> mentioned in a scenario should be left as they are in the default <code class="filename">sysconfig/SuSEfirewall2</code> config file. Backup default config: <code class="filename">/usr/share/doc/packages/SuSEfirewall2/SuSEfirewall2.sysconfig</code> - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2482864"></a>1. Simple dialup</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2483278"></a>1. Simple dialup</h2></div></div></div><p> A user with his nice SUSE Linux PC wants to be protected when connected to the internet via the ISDN dialup of his ISP. He wants to offer no services to the internet. He is not connected to any other network, nor @@ -15,7 +15,7 @@ </p><div class="informalexample"><pre class="programlisting"> FW_DEV_EXT="ippp0"</pre></div><p> - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2482885"></a>2. Small home network</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2483299"></a>2. Small home network</h2></div></div></div><p> A family owns multiple PCs, a SUSE Linux PC is connected to the internet via DSL. The family's LAN uses private IPs therefore masquerading has to be used. The Firewall provides no services whatsoever. The address of the @@ -27,7 +27,7 @@ FW_MASQUERADE="yes" FW_MASQ_NETS="192.168.10.0/24"</pre></div><p> - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2482907"></a>3. Small home network with additional WLAN</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2483321"></a>3. Small home network with additional WLAN</h2></div></div></div><p> Same network as above but additionally the Firewall is also connected to a wireless network. Hosts in the wireless network should get internet access but are not allowed to communicate with the internal network. The @@ -41,7 +41,7 @@ FW_MASQUERADE="yes" FW_MASQ_NETS="192.168.10.0/24 192.168.20.0/24"</pre></div><p> - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460290"></a>4. Small company with external mail and web server</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460778"></a>4. Small company with external mail and web server</h2></div></div></div><p> A company uses it's SUSE Linux PC to access the internet via an ISDN dialup of it's ISP. It has got a static IP address and a web server running on the PC plus it's mail-/pop3-server for the company. Squid is @@ -56,7 +56,7 @@ FW_SERVICES_INT_UDP="domain" FW_PROTECT_FROM_INT="yes"</pre></div><p> - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460323"></a>5. Company with IPsec tunnel to subsidiary</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460811"></a>5. Company with IPsec tunnel to subsidiary</h2></div></div></div><p> A small company wants access to the internet for it's client PCs. Additionally the subsidiariaries client PCs should get access to the local network through an IPsec tunnel. Internet traffic should be @@ -83,7 +83,7 @@ flow. </p></div><p> - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460397"></a>6. Company with web server in DMZ</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460887"></a>6. Company with web server in DMZ</h2></div></div></div><p> This company has got a more complex setup: @@ -149,7 +149,7 @@ target port of 53 (DNS) or 25 (Mail) to the local servers on the firewall. - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2459845"></a>7. Complex scenario</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460309"></a>7. Complex scenario</h2></div></div></div><p> </p><pre class="screen"> Internet @@ -207,7 +207,7 @@ # internet access to web server and trusted company access to internal Server FW_FORWARD_MASQ="0/0,10.0.10.2,tcp,80 0/0,10.0.10.2,tcp,443 \ 192.168.1.0/24,10.0.2.3,tcp,22"</pre></div><p> - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2459967"></a>8. Laptop in private network but with additional public IP adresses</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460432"></a>8. Laptop in private network but with additional public IP adresses</h2></div></div></div><p> </p><pre class="screen"> Internet diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/SuSEfirewall2-3.4_SVNr139/FAQ.html new/SuSEfirewall2-3.4_SVNr140/FAQ.html --- old/SuSEfirewall2-3.4_SVNr139/FAQ.html 2006-01-03 11:08:39.000000000 +0100 +++ new/SuSEfirewall2-3.4_SVNr140/FAQ.html 2006-03-28 16:18:39.000000000 +0200 @@ -1,37 +1,37 @@ <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> -<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>SuSEfirewall2 FAQ</title><link rel="stylesheet" href="susebooks.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.69.0" /></head><body><div class="article" lang="en" xml:lang="en"><div class="titlepage"><div><div><h1 class="title"><a id="id2410433"></a>SuSEfirewall2 FAQ</h1></div></div><hr /></div><div class="qandaset"><dl><dt>1. <a href="#id2459642"> +<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>SuSEfirewall2 FAQ</title><link rel="stylesheet" href="susebooks.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.69.1" /></head><body><div class="article" lang="en" xml:lang="en"><div class="titlepage"><div><div><h1 class="title"><a id="id2412343"></a>SuSEfirewall2 FAQ</h1></div></div><hr /></div><div class="qandaset"><dl><dt>1. <a href="#id2483245"> How do I allow access to my application XYZ on my firewall? - </a></dt><dt>2. <a href="#id2482887"> + </a></dt><dt>2. <a href="#id2483302"> How can I reduce the generated rule set as much as possible? - </a></dt><dt>3. <a href="#id2460331"> + </a></dt><dt>3. <a href="#id2460818"> How can I be sure that the firewall rules are active when I connect to the internet? - </a></dt><dt>4. <a href="#id2460385"> + </a></dt><dt>4. <a href="#id2460873"> How many interfaces are supported for each zone (EXT/DMZ/INT)? - </a></dt><dt>5. <a href="#id2460403"> + </a></dt><dt>5. <a href="#id2460891"> Why is communication between two interfaces in the same zone not working? - </a></dt><dt>6. <a href="#id2459774"> + </a></dt><dt>6. <a href="#id2460920"> I have set a web server in my DMZ. How do I configure SuSEfirewall2 to let people on the internet access my pages? - </a></dt><dt>7. <a href="#id2459807"> + </a></dt><dt>7. <a href="#id2460271"> What if my Server has a private IP address, how do I enable external access then? - </a></dt><dt>8. <a href="#id2459855">Some service does not work when the firewall is enabled. How do I find out what's wrong? - </a></dt><dt>9. <a href="#id2459929"> + </a></dt><dt>8. <a href="#id2460318">Some service does not work when the firewall is enabled. How do I find out what's wrong? + </a></dt><dt>9. <a href="#id2460392"> Some web site that offers port scanning claims my system is not protected properly as it still responds to ICMP echo requests (ping) - </a></dt><dt>10. <a href="#id2459952"> + </a></dt><dt>10. <a href="#id2460416"> Can't the evil guys detect whether my host is online if it responds to ICMP echo requests? - </a></dt><dt>11. <a href="#id2459972"> + </a></dt><dt>11. <a href="#id2460436"> SuSEfirewall2 drops most packets but it doesn't fully hide the presence of my machine. Isn't that a security hole? - </a></dt><dt>12. <a href="#id2459993"> + </a></dt><dt>12. <a href="#id2460457"> The ipsec0 interface I had with kernel 2.4 is gone. How do I assign IPsec traffic to a different zone now? - </a></dt><dt>13. <a href="#id2460044"> + </a></dt><dt>13. <a href="#id2460508"> Why is SuSEfirewall2 so slow? / Can't you just use iptables-restore? - </a></dt></dl><table border="0" summary="Q and A Set"><col align="left" width="1%" /><tbody><tr class="question"><td align="left" valign="top"><a id="id2459642"></a><a id="id2459644"></a><b>1.</b></td><td align="left" valign="top"><p> + </a></dt></dl><table border="0" summary="Q and A Set"><col align="left" width="1%" /><tbody><tr class="question"><td align="left" valign="top"><a id="id2483245"></a><a id="id2483247"></a><b>1.</b></td><td align="left" valign="top"><p> How do I allow access to my application XYZ on my firewall? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> @@ -48,7 +48,7 @@ into <code class="varname">FW_SERVICES_EXT_TCP</code> and execute <span><strong class="command">SuSEfirewall2</strong></span> again. - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2482887"></a><a id="id2482889"></a><b>2.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2483302"></a><a id="id2483304"></a><b>2.</b></td><td align="left" valign="top"><p> How can I reduce the generated rule set as much as possible? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><div class="itemizedlist"><ul type="disc"><li><p> Set <code class="varname">FW_PROTECT_FROM_INTERNAL</code> to <code class="literal">"no"</code> @@ -65,7 +65,7 @@ Then you will have got much less rules, but also a lesser security. Better spend 50$ on a faster processor and more ram instead of using an old 486 as firewall. - </p></li></ul></div></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460331"></a><a id="id2460333"></a><b>3.</b></td><td align="left" valign="top"><p> + </p></li></ul></div></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460818"></a><a id="id2460820"></a><b>3.</b></td><td align="left" valign="top"><p> How can I be sure that the firewall rules are active when I connect to the internet? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> @@ -78,11 +78,11 @@ packet filtering rules are actually installed with the command <span><strong class="command">SuSEfirewall2 status</strong></span> - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460385"></a><a id="id2460387"></a><b>4.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460873"></a><a id="id2460875"></a><b>4.</b></td><td align="left" valign="top"><p> How many interfaces are supported for each zone (EXT/DMZ/INT)? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> Any number you want - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460403"></a><a id="id2460405"></a><b>5.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460891"></a><a id="id2460893"></a><b>5.</b></td><td align="left" valign="top"><p> Why is communication between two interfaces in the same zone not working? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> @@ -93,7 +93,7 @@ traffic with <code class="varname">FW_FORWARD</code>. Keep in mind that this affects all interfaces in all zones. - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2459774"></a><a id="id2459776"></a><b>6.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460920"></a><a id="id2460922"></a><b>6.</b></td><td align="left" valign="top"><p> I have set a web server in my DMZ. How do I configure SuSEfirewall2 to let people on the internet access my pages? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> @@ -103,7 +103,7 @@ just configure <code class="varname">FW_FORWARD_TCP</code> like this: </p><div class="informalexample"><pre class="programlisting">FW_FORWARD="0/0,1.1.1.1,tcp,80"</pre></div><p> - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2459807"></a><a id="id2459809"></a><b>7.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460271"></a><a id="id2460273"></a><b>7.</b></td><td align="left" valign="top"><p> What if my Server has a private IP address, how do I enable external access then? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> @@ -118,7 +118,7 @@ FW_MASQUERADE="yes" FW_FORWARD_MASQ="0/0,10.0.0.1,tcp,80"</pre></div><p> - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2459855"></a><a id="id2459857"></a><b>8.</b></td><td align="left" valign="top"><p>Some service does not work when the firewall is enabled. How do I find out what's wrong? + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460318"></a><a id="id2460320"></a><b>8.</b></td><td align="left" valign="top"><p>Some service does not work when the firewall is enabled. How do I find out what's wrong? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> Enable logging of all dropped packets and disable the log limit in @@ -146,7 +146,7 @@ If everything works again don't forget to set the log options back to normal to not fill up you log files. - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2459929"></a><a id="id2459931"></a><b>9.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460392"></a><a id="id2460394"></a><b>9.</b></td><td align="left" valign="top"><p> Some web site that offers port scanning claims my system is not protected properly as it still responds to ICMP echo requests (ping) </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> @@ -155,20 +155,20 @@ seriously impact the ability to track down network problems. It is therefore not considered nice behaviour for an internet citizen to drop pings. - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2459952"></a><a id="id2459954"></a><b>10.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460416"></a><a id="id2460418"></a><b>10.</b></td><td align="left" valign="top"><p> Can't the evil guys detect whether my host is online if it responds to ICMP echo requests? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> Yes but they can detect that anyways. The router at your provider behaves different depending on whether someone is dialed in or not. - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2459972"></a><a id="id2459975"></a><b>11.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460436"></a><a id="id2460438"></a><b>11.</b></td><td align="left" valign="top"><p> SuSEfirewall2 drops most packets but it doesn't fully hide the presence of my machine. Isn't that a security hole? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> You machine is never fully invisible, see previous question. The purpose of dropping packets is not to hide your machine but to slow down port scans. - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2459993"></a><a id="id2459996"></a><b>12.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460457"></a><a id="id2460459"></a><b>12.</b></td><td align="left" valign="top"><p> The <code class="literal">ipsec0</code> interface I had with kernel 2.4 is gone. How do I assign IPsec traffic to a different zone now? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> @@ -184,7 +184,7 @@ FW_SERVICES_EXT_UDP="isakmp" FW_PROTECT_FROM_INT="no"</pre></div><p> - </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460044"></a><a id="id2460046"></a><b>13.</b></td><td align="left" valign="top"><p> + </p></td></tr><tr class="question"><td align="left" valign="top"><a id="id2460508"></a><a id="id2460510"></a><b>13.</b></td><td align="left" valign="top"><p> Why is SuSEfirewall2 so slow? / Can't you just use iptables-restore? </p></td></tr><tr class="answer"><td align="left" valign="top"><b></b></td><td align="left" valign="top"><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/SuSEfirewall2-3.4_SVNr139/README.html new/SuSEfirewall2-3.4_SVNr140/README.html --- old/SuSEfirewall2-3.4_SVNr139/README.html 2006-01-03 11:08:42.000000000 +0100 +++ new/SuSEfirewall2-3.4_SVNr140/README.html 2006-03-28 16:18:42.000000000 +0200 @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> -<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>SuSEfirewall2</title><link rel="stylesheet" href="susebooks.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.69.0" /></head><body><div class="article" lang="en" xml:lang="en"><div class="titlepage"><div><div><h1 class="title"><a id="id2410433"></a>SuSEfirewall2</h1></div></div><hr /></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="#id2459640">1. Introduction</a></span></dt><dt><span class="section"><a href="#id2482919">2. Quickstart</a></span></dt><dd><dl><dt><span class="section"><a href="#id2482924">2.1. YaST2 firewall module</a></span></dt><dt><span class="section"><a href="#id2460296">2.2. Manual configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#id2460355">3. Some words about security</a></span></dt><dt><span class="section"><a href="#id2459800">4. Reporting bugs</a></span></dt><dt><span class="section"><a href="#id2459824">5. Links</a></span></dt></dl></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2459640"></a>1. Introduction</h2></div></div></div><p> +<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>SuSEfirewall2</title><link rel="stylesheet" href="susebooks.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.69.1" /></head><body><div class="article" lang="en" xml:lang="en"><div class="titlepage"><div><div><h1 class="title"><a id="id2412343"></a>SuSEfirewall2</h1></div></div><hr /></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="#id2460133">1. Introduction</a></span></dt><dt><span class="section"><a href="#id2483332">2. Quickstart</a></span></dt><dd><dl><dt><span class="section"><a href="#id2483337">2.1. YaST2 firewall module</a></span></dt><dt><span class="section"><a href="#id2460784">2.2. Manual configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#id2460842">3. Some words about security</a></span></dt><dt><span class="section"><a href="#id2460264">4. Reporting bugs</a></span></dt><dt><span class="section"><a href="#id2460288">5. Links</a></span></dt></dl></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460133"></a>1. Introduction</h2></div></div></div><p> <code class="literal">SuSEfirewall2</code> is a shell script wrapper for the Linux firewall setup tool (<code class="literal">iptables</code>). It's controlled by a @@ -12,14 +12,14 @@ </p><div class="itemizedlist"><ul type="disc"><li><p>sets up secure filter rules by default</p></li><li><p>easy to configure</p></li><li><p>requires only a small configuration effort</p></li><li><p>zone based setup. Interfaces are grouped into zones</p></li><li><p>supports an arbitrary number of zones</p></li><li><p>supports forwarding, masquerading, port redirection</p></li><li><p>supports RPC services with dynamically assigned ports</p></li><li><p>allows special treatment of IPsec packets</p></li><li><p>IPv6 support (no forwarding/masquerading)</p></li><li><p>allows insertion of custom rules through hooks</p></li></ul></div><p> - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2482919"></a>2. Quickstart</h2></div></div></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h3 class="title"><a id="id2482924"></a>2.1. YaST2 firewall module</h3></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2483332"></a>2. Quickstart</h2></div></div></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h3 class="title"><a id="id2483337"></a>2.1. YaST2 firewall module</h3></div></div></div><p> The YaST2 firewall module is the recommended tool for configuring SuSEfirewall2. It offers the most common features with a nice user interface and help texts. It also takes care of proper activation of the init scripts. - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h3 class="title"><a id="id2460296"></a>2.2. Manual configuration</h3></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h3 class="title"><a id="id2460784"></a>2.2. Manual configuration</h3></div></div></div><p> Enable the SuSEfirewall2 boot scripts: @@ -37,7 +37,7 @@ <code class="filename">EXAMPLES</code> file in <code class="filename">/usr/share/doc/packages/SuSEfirewall2</code> - </p></div></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460355"></a>3. Some words about security</h2></div></div></div><p> + </p></div></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460842"></a>3. Some words about security</h2></div></div></div><p> SuSEfirewall2 is a frontend for iptables which sets up kernel packet filters, nothing more and nothing less. This means that you are not @@ -76,13 +76,13 @@ Check your log files regularly for unusual entries. </p></li></ul></div><p> - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2459800"></a>4. Reporting bugs</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460264"></a>4. Reporting bugs</h2></div></div></div><p> Report any problems via <a href="http://www.suse.de/feedback" target="_top">http://www.suse.de/feedback</a>. For discussion about SuSEfirewall2 join the <a href="http://www.suse.com/us/private/support/online_help/mailinglists/index.html" target="_top">suse-security</a> mailinglist. - </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2459824"></a>5. Links</h2></div></div></div><p> + </p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id2460288"></a>5. Links</h2></div></div></div><p> <a href="EXAMPLES.html" target="_top">Examples</a> </p><p> <a href="FAQ.html" target="_top">Frequently Asked Questions</a> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/SuSEfirewall2-3.4_SVNr139/SuSEfirewall2 new/SuSEfirewall2-3.4_SVNr140/SuSEfirewall2 --- old/SuSEfirewall2-3.4_SVNr139/SuSEfirewall2 2006-03-06 16:30:49.000000000 +0100 +++ new/SuSEfirewall2-3.4_SVNr140/SuSEfirewall2 2006-03-28 16:17:06.000000000 +0200 @@ -570,6 +570,16 @@ done } +xen_forward_hack() +{ + local dev iptables + for iptables in "$IPTABLES" "$IP6TABLES"; do + for dev in $FW_FORWARD_ALWAYS_INOUT_DEV; do + $iptables -A FORWARD -i $dev -o $dev -j ACCEPT + done + done +} + function set_basic_rules() { load_modules ip_tables ip_conntrack $FW_LOAD_MODULES @@ -632,6 +642,8 @@ $IP6TABLES -A INPUT -j "$ACCEPT" -i lo $IP6TABLES -A OUTPUT -j "$ACCEPT" -o lo + xen_forward_hack + # workaround for ip6tables without state matching if [ "$IP6TABLES_HAVE_STATE" != 1 ]; then for itype in $stateless_icmpv6_types $safe_icmpv6_replies; do diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/SuSEfirewall2-3.4_SVNr139/SuSEfirewall2.sysconfig new/SuSEfirewall2-3.4_SVNr140/SuSEfirewall2.sysconfig --- old/SuSEfirewall2-3.4_SVNr139/SuSEfirewall2.sysconfig 2006-03-02 14:44:33.000000000 +0100 +++ new/SuSEfirewall2-3.4_SVNr140/SuSEfirewall2.sysconfig 2006-03-28 16:29:10.000000000 +0200 @@ -950,3 +950,20 @@ # FW_LOAD_MODULES="ip_conntrack_ftp ip_nat_ftp" # FW_LOAD_MODULES= + +## Type: string +## Default: +# +# 33.) +# Bridge interfaces without IP address +# +# Traffic on bridge interfaces like the one used by xen appears to +# enter and leave on the same interface. Add such interfaces here in +# order to install special permitting rules for them. +# +# Format: list of interface names separated by space +# +# Example: +# FW_FORWARD_ALWAYS_INOUT_DEV="xenbr0" +# +FW_FORWARD_ALWAYS_INOUT_DEV= ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0

commit yast2-storage
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package yast2-storage checked in at Wed Mar 29 13:40:18 CEST 2006. -------- --- /work/SRC/all/yast2-storage/yast2-storage.changes 2006-03-28 19:50:03.000000000 +0200 +++ /work/src/done/STABLE/yast2-storage/yast2-storage.changes 2006-03-29 13:34:26.000000000 +0200 @@ -1,0 +2,6 @@ +Wed Mar 29 13:34:18 CEST 2006 - fehr(a)suse.de + +- fix logging initialisation in inst-sys +- version 2.13.41 + +------------------------------------------------------------------- Old: ---- yast2-storage-2.13.40.tar.bz2 New: ---- yast2-storage-2.13.41.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yast2-storage.spec ++++++ --- /var/tmp/diff_new_pack.aeSZa0/_old 2006-03-29 13:37:57.000000000 +0200 +++ /var/tmp/diff_new_pack.aeSZa0/_new 2006-03-29 13:37:57.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package yast2-storage (Version 2.13.40) +# spec file for package yast2-storage (Version 2.13.41) # # Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -11,12 +11,12 @@ # norootforbuild Name: yast2-storage -Version: 2.13.40 +Version: 2.13.41 Release: 1 License: GPL Group: System/YaST BuildRoot: %{_tmppath}/%{name}-%{version}-build -Source0: yast2-storage-2.13.40.tar.bz2 +Source0: yast2-storage-2.13.41.tar.bz2 prefix: /usr BuildRequires: blocxx-devel docbook-xsl-stylesheets doxygen evms gcc-c++ libxcrypt-devel libxslt openssl-devel perl-XML-Writer sablot sgml-skel swig update-desktop-files yast2 yast2-devtools yast2-installation yast2-perl-bindings yast2-testsuite Requires: yast2 parted yast2-installation yast2-storage-lib yast2-perl-bindings @@ -40,7 +40,7 @@ %prep -%setup -n yast2-storage-2.13.40 +%setup -n yast2-storage-2.13.41 %build %{prefix}/bin/y2tool y2autoconf @@ -164,6 +164,9 @@ %doc %{prefix}/share/doc/packages/yast2-storage/libstorage %changelog -n yast2-storage +* Wed Mar 29 2006 - fehr(a)suse.de +- fix logging initialisation in inst-sys +- version 2.13.41 * Tue Mar 28 2006 - fehr(a)suse.de - speed up detection of encryption type on large fs (#158950) - version 2.13.40 ++++++ yast2-storage-2.13.40.tar.bz2 -> yast2-storage-2.13.41.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/yast2-storage-2.13.40/VERSION new/yast2-storage-2.13.41/VERSION --- old/yast2-storage-2.13.40/VERSION 2006-03-28 19:50:58.000000000 +0200 +++ new/yast2-storage-2.13.41/VERSION 2006-03-29 13:33:41.000000000 +0200 @@ -1 +1 @@ -2.13.40 +2.13.41 diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/yast2-storage-2.13.40/storage/src/modules/Storage.ycp new/yast2-storage-2.13.41/storage/src/modules/Storage.ycp --- old/yast2-storage-2.13.40/storage/src/modules/Storage.ycp 2006-03-28 15:18:16.000000000 +0200 +++ new/yast2-storage-2.13.41/storage/src/modules/Storage.ycp 2006-03-29 13:34:53.000000000 +0200 @@ -19,7 +19,7 @@ * wurde versucht * "intelligent" zu gestallten und ist im einzelen bei den * entspechenden Funktionen * näher erklärt. * - * $Id: Storage.ycp 29473 2006-03-28 13:18:12Z fehr $ + * $Id: Storage.ycp 29503 2006-03-29 11:34:49Z fehr $ */ { @@ -2958,10 +2958,10 @@ global define map<string,map> ReReadTargetMap() ``{ - y2milestone("start reread"); + y2milestone("start reread sint:%1", sint ); probe_done = false; if( sint == nil ) - sint = createInterface(); + InitLibstorage(); else LibStorage::StorageInterface::rescanEverything( sint ); conts = getContainers(); ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0

commit libzypp-zmd-backend
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package libzypp-zmd-backend checked in at Wed Mar 29 13:37:42 CEST 2006. -------- --- /work/SRC/all/libzypp-zmd-backend/libzypp-zmd-backend.changes 2006-03-29 06:35:07.000000000 +0200 +++ /work/src/done/STABLE/libzypp-zmd-backend/libzypp-zmd-backend.changes 2006-03-29 13:31:02.000000000 +0200 @@ -1,0 +2,7 @@ +Wed Mar 29 13:29:46 CEST 2006 - kkaempf(a)suse.de + +- call the correct 'getZYpp()' function. +- fix argument parsing in resolve-dependencies (#161699) +- rev 2748 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libzypp-zmd-backend.spec ++++++ --- /var/tmp/diff_new_pack.TSmgKW/_old 2006-03-29 13:36:54.000000000 +0200 +++ /var/tmp/diff_new_pack.TSmgKW/_new 2006-03-29 13:36:54.000000000 +0200 @@ -22,7 +22,7 @@ Obsoletes: zmd-librc-backend Summary: ZMD backend for Package, Patch, Pattern, and Product Management Version: 7.1.1 -Release: 19 +Release: 20 Source: zmd-backend-%{version}.tar.bz2 Prefix: /usr @@ -69,6 +69,10 @@ %changelog -n libzypp-zmd-backend * Wed Mar 29 2006 - kkaempf(a)suse.de +- call the correct 'getZYpp()' function. +- fix argument parsing in resolve-dependencies (#161699) +- rev 2748 +* Wed Mar 29 2006 - kkaempf(a)suse.de - adapt to catalogs table change in zmd, now passes 'subscribed' (#161395) - rev 2734, needs zmd >= rev 26297 ++++++ zmd-backend-7.1.1.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/zmd-backend-7.1.1/src/resolve-dependencies.cc new/zmd-backend-7.1.1/src/resolve-dependencies.cc --- old/zmd-backend-7.1.1/src/resolve-dependencies.cc 2006-03-28 22:25:27.000000000 +0200 +++ new/zmd-backend-7.1.1/src/resolve-dependencies.cc 2006-03-29 13:06:29.000000000 +0200 @@ -55,7 +55,7 @@ int main (int argc, char **argv) { - if (argc != 2) { + if (argc < 2) { cerr << "usage: " << argv[0] << " <database> [verify]" << endl; return 1; } diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/zmd-backend-7.1.1/src/zmd-backend.cc new/zmd-backend-7.1.1/src/zmd-backend.cc --- old/zmd-backend-7.1.1/src/zmd-backend.cc 2006-03-28 22:28:14.000000000 +0200 +++ new/zmd-backend-7.1.1/src/zmd-backend.cc 2006-03-29 13:26:13.000000000 +0200 @@ -14,7 +14,7 @@ { ZYpp::Ptr Z = NULL; try { - Z = getZYpp(); + Z = zypp::getZYpp(); } catch (Exception & excpt_r) { ZYPP_CAUGHT (excpt_r); diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/zmd-backend-7.1.1/src/zmd-backend.h new/zmd-backend-7.1.1/src/zmd-backend.h --- old/zmd-backend-7.1.1/src/zmd-backend.h 2006-03-28 22:24:51.000000000 +0200 +++ new/zmd-backend-7.1.1/src/zmd-backend.h 2006-03-29 13:27:36.000000000 +0200 @@ -5,6 +5,7 @@ #include <zypp/base/LogControl.h> #include <zypp/ZYpp.h> +#include <zypp/ZYppFactory.h> #define ZMD_BACKEND_LOG "/var/log/zmd-backend.log" ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0

commit yast2-qt
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package yast2-qt checked in at Wed Mar 29 12:10:39 CEST 2006. -------- --- /work/SRC/all/yast2-qt/yast2-qt.changes 2006-03-28 16:20:01.000000000 +0200 +++ /work/src/done/STABLE/yast2-qt/yast2-qt.changes 2006-03-29 12:09:09.000000000 +0200 @@ -1,0 +2,6 @@ +Wed Mar 29 12:08:01 CEST 2006 - sh(a)suse.de + +- V 2.13.42 +- Fixed broken umlaut characters in pattern categories + +------------------------------------------------------------------- Old: ---- yast2-qt-2.13.41.tar.bz2 New: ---- yast2-qt-2.13.42.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yast2-qt.spec ++++++ --- /var/tmp/diff_new_pack.6okGym/_old 2006-03-29 12:10:24.000000000 +0200 +++ /var/tmp/diff_new_pack.6okGym/_new 2006-03-29 12:10:24.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package yast2-qt (Version 2.13.41) +# spec file for package yast2-qt (Version 2.13.42) # # Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -11,12 +11,12 @@ # norootforbuild Name: yast2-qt -Version: 2.13.41 +Version: 2.13.42 Release: 1 License: GPL Group: System/YaST BuildRoot: %{_tmppath}/%{name}-%{version}-build -Source0: yast2-qt-2.13.41.tar.bz2 +Source0: yast2-qt-2.13.42.tar.bz2 prefix: /usr BuildRequires: boost-devel curl-devel dbus-1-devel docbook-xsl-stylesheets doxygen hal-devel libdrm-devel libjpeg-devel libxcrypt-devel libxslt libzypp-devel perl-XML-Writer qt3-devel rpm-devel sgml-skel update-desktop-files yast2-core-devel yast2-devtools Summary: YaST2 - Graphical User Interface @@ -42,7 +42,7 @@ Stefan Hundhammer <sh(a)suse.de> %prep -%setup -n yast2-qt-2.13.41 +%setup -n yast2-qt-2.13.42 %build %{prefix}/bin/y2tool y2autoconf @@ -80,6 +80,9 @@ %doc %{prefix}/share/doc/packages/yast2-qt %changelog -n yast2-qt +* Wed Mar 29 2006 - sh(a)suse.de +- V 2.13.42 +- Fixed broken umlaut characters in pattern categories * Tue Mar 28 2006 - sh(a)suse.de - V 2.13.41 - Show language specific packages in "languages" filter ++++++ yast2-qt-2.13.41.tar.bz2 -> yast2-qt-2.13.42.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/yast2-qt-2.13.41/VERSION new/yast2-qt-2.13.42/VERSION --- old/yast2-qt-2.13.41/VERSION 2006-03-28 16:15:14.000000000 +0200 +++ new/yast2-qt-2.13.42/VERSION 2006-03-29 12:07:59.000000000 +0200 @@ -1 +1 @@ -2.13.41 +2.13.42 diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/yast2-qt-2.13.41/src/YQPkgPatternList.cc new/yast2-qt-2.13.42/src/YQPkgPatternList.cc --- old/yast2-qt-2.13.41/src/YQPkgPatternList.cc 2006-03-15 18:44:09.000000000 +0100 +++ new/yast2-qt-2.13.42/src/YQPkgPatternList.cc 2006-03-29 12:06:26.000000000 +0200 @@ -185,7 +185,7 @@ return; } - YQPkgPatternCategoryItem * cat = category( zyppPattern->category() ); + YQPkgPatternCategoryItem * cat = category( fromUTF8( zyppPattern->category() ) ); if ( cat ) new YQPkgPatternListItem( this, cat, selectable, zyppPattern ); ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0

commit myspell-dictionaries
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package myspell-dictionaries checked in at Wed Mar 29 12:02:01 CEST 2006. -------- --- /work/SRC/noarch/myspell-dictionaries/myspell-dictionaries.changes 2006-03-13 16:54:19.000000000 +0100 +++ /work/src/done/NOARCH/myspell-dictionaries/myspell-dictionaries.changes 2006-03-29 11:43:32.000000000 +0200 @@ -1,0 +2,6 @@ +Wed Mar 29 11:42:28 CEST 2006 - pmladek(a)suse.cz + +- removed full specifiers from some more locales (bg_BG -> bg, + ca_ES -> ca) [#154079] + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ myspell-dictionaries.spec ++++++ ++++ 635 lines (skipped) ++++ between /work/SRC/noarch/myspell-dictionaries/myspell-dictionaries.spec ++++ and /work/src/done/NOARCH/myspell-dictionaries/myspell-dictionaries.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0

commit tuxtype
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package tuxtype checked in at Wed Mar 29 11:59:53 CEST 2006. -------- --- /work/SRC/all/tuxtype/tuxtype.changes 2006-01-30 14:45:17.000000000 +0100 +++ /work/src/done/STABLE/tuxtype/tuxtype.changes 2006-03-29 07:21:13.000000000 +0200 @@ -1,0 +2,5 @@ +Wed Mar 29 07:21:00 CEST 2006 - aj(a)suse.de + +- Remove pciutils from BuildRequires, its not needed. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tuxtype.spec ++++++ --- /var/tmp/diff_new_pack.z7S4UQ/_old 2006-03-29 11:59:47.000000000 +0200 +++ /var/tmp/diff_new_pack.z7S4UQ/_new 2006-03-29 11:59:47.000000000 +0200 @@ -5,18 +5,18 @@ # This file and all modifications and additions to the pristine # package are under the same license as the package itself. # -# Please submit bugfixes or comments via http://bugs.opensuse.org +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # # norootforbuild Name: tuxtype -BuildRequires: SDL_image-devel SDL_mixer-devel SDL_ttf dialog gcc-c++ gtk pciutils +BuildRequires: SDL_image-devel SDL_mixer-devel SDL_ttf dialog gcc-c++ gtk License: GPL Group: Amusements/Games/Action/Other Autoreqprov: on Version: 1.5.3 -Release: 3 +Release: 10 Source: tuxtype2-%{version}.tar.bz2 URL: http://tuxtype.sf.net Summary: Typing tutor for children @@ -67,6 +67,8 @@ %{_prefix}/share/tuxtype2/data/scripts %changelog -n tuxtype +* Wed Mar 29 2006 - aj(a)suse.de +- Remove pciutils from BuildRequires, its not needed. * Mon Jan 30 2006 - lmichnovic(a)suse.cz - added gcc-c++ into BuildRequires * Wed Jan 25 2006 - mls(a)suse.de ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0

commit suseRegister
by root＠suse.de 29 Mar '06

29 Mar '06

Hello community, here is the log from the commit of package suseRegister checked in at Wed Mar 29 11:59:44 CEST 2006. -------- --- /work/SRC/noarch/suseRegister/suseRegister.changes 2006-03-28 10:00:21.000000000 +0200 +++ /work/src/done/STABLE/suseRegister/suseRegister.changes 2006-03-29 11:03:05.000000000 +0200 @@ -1,0 +2,5 @@ +Wed Mar 29 10:59:32 CEST 2006 - mc(a)suse.de + +- set accept=mandatory if auto-args are send back + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ suseRegister.spec ++++++ --- /var/tmp/diff_new_pack.WPBlml/_old 2006-03-29 11:59:17.000000000 +0200 +++ /var/tmp/diff_new_pack.WPBlml/_new 2006-03-29 11:59:17.000000000 +0200 @@ -12,7 +12,7 @@ Name: suseRegister Version: 1.0 -Release: 32 +Release: 33 Summary: Registration tool Group: Productivity/Other License: GPL @@ -56,6 +56,8 @@ %{_bindir}/* %changelog -n suseRegister +* Wed Mar 29 2006 - mc(a)suse.de +- set accept=mandatory if auto-args are send back * Tue Mar 28 2006 - mc(a)suse.de - add --ignore-failure to rug sa command [#160069] * Mon Mar 27 2006 - mc(a)suse.de ++++++ suseRegister-1.0.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/suseRegister-1.0/suse_register new/suseRegister-1.0/suse_register --- old/suseRegister-1.0/suse_register 2006-03-28 09:56:38.000000000 +0200 +++ new/suseRegister-1.0/suse_register 2006-03-29 10:58:55.000000000 +0200 @@ -49,6 +49,7 @@ my $dumpfilehack = ""; my $dumpxmlfilehack = ""; my $nooptional = 0; +my $acceptmand = 0; my $forcereg = 0; my $nohwdata = 0; my $logfile = undef; @@ -794,6 +795,10 @@ { $a{accept} = "optional"; } + if($acceptmand) + { + $a{accept} = "mandatory"; + } if($forcereg) { $a{force} = "registration"; @@ -1363,6 +1368,7 @@ if(exists $availableSources{$id} && uc($availableSources{$id}) eq uc($type)) { + print STDERR "Name '$id' already exists\n" if($debug >= 2); return (0, ""); } @@ -1727,6 +1733,7 @@ if ($ret == 1) { $recursion++; + $acceptmand = 1; return register(); } else # no automatic args. Search for interactive args ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun...

1 0