Hello community, here is the log from the commit of package shorewall for openSUSE:Factory checked in at 2012-06-01 18:54:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/shorewall (Old) and /work/SRC/openSUSE:Factory/.shorewall.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "shorewall", Maintainer is "" Changes: -------- --- /work/SRC/openSUSE:Factory/shorewall/shorewall.changes 2012-05-29 10:36:22.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.shorewall.new/shorewall.changes 2012-06-01 18:54:19.000000000 +0200 @@ -1,0 +2,27 @@ +Fri Jun 1 07:27:24 UTC 2012 - toganm@opensuse.org + +- Update to 4.5.4.1 For more details see changelog.txt and + releasenotes.txt + + * Beginning with Shorewall 4.4.22, the 'pptpserver' tunnel type + has been configured as a PPTP client running on the firewall + rather than as a server on the firewall. It is now correctly + configured as a server. + + * The shorewall-accounting (5) and shorewall6-accounting (5) + documentation for the IPSEC column is incorrect. Rather than + 'accountin' and 'accountout', the chain names should be + 'accipsecin' and 'accipsecout'. + + * IPSEC accounting did not work if the accounting file was + sectioned. Beginning with this release, the IPSEC column can + be specified in any section. As always, the IPSEC column + contains a comma-separated list of items. In the FORWARD + chain, the first (or only) item in the list must be either + 'in' or 'out' to indicate whether the rule matches incoming + packets that have been decrypted ('in') or outgoing packets + that will be encrypted ('out'). There are no restrictions with + respect to which chain IPSEC rules can appear in a sectioned + file. + +------------------------------------------------------------------- Old: ---- shorewall-4.5.4.tar.bz2 shorewall-core-4.5.4.tar.bz2 shorewall-docs-html-4.5.4.tar.bz2 shorewall-init-4.5.4.tar.bz2 shorewall-lite-4.5.4.tar.bz2 shorewall6-4.5.4.tar.bz2 shorewall6-lite-4.5.4.tar.bz2 New: ---- shorewall-4.5.4.1.tar.bz2 shorewall-core-4.5.4.1.tar.bz2 shorewall-docs-html-4.5.4.1.tar.bz2 shorewall-init-4.5.4.1.tar.bz2 shorewall-lite-4.5.4.1.tar.bz2 shorewall6-4.5.4.1.tar.bz2 shorewall6-lite-4.5.4.1.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ shorewall.spec ++++++ --- /var/tmp/diff_new_pack.8U528A/_old 2012-06-01 18:54:22.000000000 +0200 +++ /var/tmp/diff_new_pack.8U528A/_new 2012-06-01 18:54:22.000000000 +0200 @@ -17,7 +17,7 @@ Name: shorewall -Version: 4.5.4 +Version: 4.5.4.1 Release: 0 Summary: Shoreline Firewall is an iptables-based firewall for Linux systems License: GPL-2.0 ++++++ shorewall-4.5.4.tar.bz2 -> shorewall-4.5.4.1.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/Perl/Shorewall/Accounting.pm new/shorewall-4.5.4.1/Perl/Shorewall/Accounting.pm --- old/shorewall-4.5.4/Perl/Shorewall/Accounting.pm 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-4.5.4.1/Perl/Shorewall/Accounting.pm 2012-05-31 21:45:24.000000000 +0200 @@ -46,6 +46,7 @@ my %accountingjumps; my $asection; my $defaultchain; +my $ipsecdir; my $defaultrestriction; my $restriction; my $accounting_commands = { COMMENT => 0, SECTION => 2 }; @@ -92,6 +93,7 @@ # These are the legacy values # $defaultchain = 'accounting'; + $ipsecdir = ''; $defaultrestriction = NO_RESTRICT; $sectionname = ''; } @@ -111,20 +113,25 @@ if ( $sectionname eq 'INPUT' ) { $defaultchain = 'accountin'; + $ipsecdir = 'in'; $defaultrestriction = INPUT_RESTRICT; } elsif ( $sectionname eq 'OUTPUT' ) { $defaultchain = 'accountout'; + $ipsecdir = 'out'; $defaultrestriction = OUTPUT_RESTRICT; } elsif ( $sectionname eq 'FORWARD' ) { $defaultchain = 'accountfwd'; + $ipsecdir = ''; $defaultrestriction = NO_RESTRICT; } else { fatal_error "The $sectionname SECTION is not allowed when ACCOUNTING_TABLE=filter" unless $acctable eq 'mangle'; if ( $sectionname eq 'PREROUTING' ) { $defaultchain = 'accountpre'; + $ipsecdir = 'in'; $defaultrestriction = PREROUTE_RESTRICT; } else { $defaultchain = 'accountpost'; + $ipsecdir = 'out'; $defaultrestriction = POSTROUTE_RESTRICT; } } @@ -285,7 +292,21 @@ } my $chainref = $chain_table{$config{ACCOUNTING_TABLE}}{$chain}; - my $dir; + my $dir = $ipsecdir; + + if ( $asection && $ipsec ne '-' ) { + if ( $ipsecdir ) { + fatal_error "Invalid IPSEC ($ipsec)" if $ipsec =~ /^(?:in|out)\b/; + } else { + if ( $ipsec =~ s/^(?:(in|out)\b)// ) { + $dir = $1; + } else { + fatal_error q(IPSEC rules in the $asection section require that the value begin with 'in' or 'out'); + } + } + + $rule .= do_ipsec( $dir, $ipsec ); + } if ( ! $chainref ) { if ( reserved_chain_name( $chain ) ) { @@ -297,28 +318,32 @@ $chainref = ensure_accounting_chain $chain, 0 , $restriction; } - $dir = ipsec_chain_name( $chain ); + unless ( $asection ) { + $dir = ipsec_chain_name( $chain ); - if ( $ipsec ne '-' ) { - if ( $dir ) { - $rule .= do_ipsec( $dir, $ipsec ); - $chainref->{ipsec} = $dir; + if ( $ipsec ne '-' ) { + if ( $dir ) { + $rule .= do_ipsec( $dir, $ipsec ); + $chainref->{ipsec} = $dir; + } else { + fatal_error "Adding an IPSEC rule to an unreferenced accounting chain is not allowed"; + } } else { - fatal_error "Adding an IPSEC rule to an unreferenced accounting chain is not allowed"; + warning_message "Adding rule to unreferenced accounting chain $chain" unless reserved_chain_name( $chain ); + $chainref->{ipsec} = $dir; } - } else { - warning_message "Adding rule to unreferenced accounting chain $chain" unless reserved_chain_name( $chain ); - $chainref->{ipsec} = $dir; } } else { fatal_error "$chain is not an accounting chain" unless $chainref->{accounting}; - if ( $ipsec ne '-' ) { - $dir = $chainref->{ipsec}; - fatal_error "Adding an IPSEC rule into a non-IPSEC chain is not allowed" unless $dir; - $rule .= do_ipsec( $dir , $ipsec ); - } elsif ( $asection ) { - $restriction |= $chainref->{restriction}; + unless ( $asection ) { + if ( $ipsec ne '-' ) { + $dir = $chainref->{ipsec}; + fatal_error "Adding an IPSEC rule into a non-IPSEC chain is not allowed" unless $dir; + $rule .= do_ipsec( $dir , $ipsec ); + } elsif ( $asection ) { + $restriction |= $chainref->{restriction}; + } } } @@ -366,7 +391,6 @@ } else { $jumpchainref->{ipsec} = $chainref->{ipsec}; } - } if ( $rule2 ) { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/Perl/Shorewall/Config.pm new/shorewall-4.5.4.1/Perl/Shorewall/Config.pm --- old/shorewall-4.5.4/Perl/Shorewall/Config.pm 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-4.5.4.1/Perl/Shorewall/Config.pm 2012-05-31 21:45:24.000000000 +0200 @@ -515,7 +515,7 @@ KLUDGEFREE => '', STATEMATCH => '-m state --state', UNTRACKED => 0, - VERSION => "4.5.4", + VERSION => "4.5.4.1", CAPVERSION => 40504 , ); # diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/Perl/Shorewall/Rules.pm new/shorewall-4.5.4.1/Perl/Shorewall/Rules.pm --- old/shorewall-4.5.4/Perl/Shorewall/Rules.pm 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-4.5.4.1/Perl/Shorewall/Rules.pm 2012-05-31 21:45:24.000000000 +0200 @@ -2107,7 +2107,7 @@ } elsif ( $server =~ /^(.+)-(.+)$/ ) { validate_range( $1, $2 ); } else { - unless ( ( $actiontype & ACTION ) && $server eq ALLIP ) { + unless ( $server eq ALLIP ) { my @servers = validate_address $server, 1; $server = join ',', @servers; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/Perl/Shorewall/Tunnels.pm new/shorewall-4.5.4.1/Perl/Shorewall/Tunnels.pm --- old/shorewall-4.5.4/Perl/Shorewall/Tunnels.pm 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-4.5.4.1/Perl/Shorewall/Tunnels.pm 2012-05-31 21:45:24.000000000 +0200 @@ -2,7 +2,6 @@ # Shorewall 4.4 -- /usr/share/shorewall/Shorewall/Tunnels.pm # # This program is under GPL [http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt] -# # (c) 2007,2008,2009,2010,2011 - Tom Eastep (teastep@shorewall.net) # # Complete documentation is available at http://shorewall.net @@ -126,9 +125,9 @@ sub setup_pptp_server { my ($inchainref, $outchainref, $kind, $source, $dest ) = @_; - add_tunnel_rule $inchainref, p => 47, @$dest; - add_tunnel_rule $outchainref, p => 47, @$source; - add_tunnel_rule $inchainref, p => 'tcp --dport 1723', @$dest + add_tunnel_rule $inchainref, p => 47, @$source; + add_tunnel_rule $outchainref, p => 47, @$dest; + add_tunnel_rule $inchainref, p => 'tcp --dport 1723', @$source } sub setup_one_openvpn { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/changelog.txt new/shorewall-4.5.4.1/changelog.txt --- old/shorewall-4.5.4/changelog.txt 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-4.5.4.1/changelog.txt 2012-05-31 21:45:24.000000000 +0200 @@ -1,3 +1,9 @@ +Changes in 4.5.4.1 + +1) Correct 'pptpserver' tunnel configuration. + +2) Fix IPSEC accounting. + Changes in 4.5.4 Final 1) Update the release documents. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/configfiles/accounting.annotated new/shorewall-4.5.4.1/configfiles/accounting.annotated --- old/shorewall-4.5.4/configfiles/accounting.annotated 2012-05-26 00:49:28.000000000 +0200 +++ new/shorewall-4.5.4.1/configfiles/accounting.annotated 2012-05-31 21:46:49.000000000 +0200 @@ -269,7 +269,8 @@ # Designates a connection mark. If omitted, the packet mark's value is # tested. # -# IPSEC - option-list (Optional - Added in Shorewall 4.4.13 ) +# IPSEC - option-list (Optional - Added in Shorewall 4.4.13 but broken until +# 4.5.4.1 ) # # The option-list consists of a comma-separated list of options from the # following list. Only packets that will be encrypted or have been de-crypted @@ -323,16 +324,27 @@ # When used by itself, causes all traffic that will not be encrypted/ # encapsulated or has been decrypted/un-encapsulted to match the rule. # -# If this column is non-empty, then: +# in # -# ● A chain NAME may appearing in the ACTION column must be a chain -# branched either directly or indirectly from the accountin or accountout -# chain. +# May only be used in the FORWARD section and must be the first or the +# only item the list. Indicates that matching packets have been decrypted +# in input. # -# ● The CHAIN column must contain either accountin or accountout or a chain -# branched either directly or indirectly from those chains. +# out # -# These rules will NOT appear in the accounting chain. +# May only be used in the FORWARD section and must be the first or the +# only item in the list. Indicates that matching packets will be +# encrypted on output. +# +# If this column is non-empty and sections are not used, then: +# +# ● A chain NAME appearing in the ACTION column must be a chain branched +# either directly or indirectly from the accipsecin or accipsecout chain. +# +# ● The CHAIN column must contain either accipsecin or accipsecout or a +# chain branched either directly or indirectly from those chains. +# +# ● These rules will NOT appear in the accounting chain. # # In all of the above columns except ACTION and CHAIN, the values -, any and all # may be used as wildcards. Omitted trailing columns are also treated as diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/configure new/shorewall-4.5.4.1/configure --- old/shorewall-4.5.4/configure 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-4.5.4.1/configure 2012-05-31 21:45:24.000000000 +0200 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=4.5.4 +VERSION=4.5.4.1 case "$BASH_VERSION" in [4-9].*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/configure.pl new/shorewall-4.5.4.1/configure.pl --- old/shorewall-4.5.4/configure.pl 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-4.5.4.1/configure.pl 2012-05-31 21:45:24.000000000 +0200 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '4.5.4' + VERSION => '4.5.4.1' }; my %params; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/install.sh new/shorewall-4.5.4.1/install.sh --- old/shorewall-4.5.4/install.sh 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-4.5.4.1/install.sh 2012-05-31 21:45:24.000000000 +0200 @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.5.4 +VERSION=4.5.4.1 # # Change to the directory containing this script diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/known_problems.txt new/shorewall-4.5.4.1/known_problems.txt --- old/shorewall-4.5.4/known_problems.txt 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-4.5.4.1/known_problems.txt 2012-05-31 21:45:24.000000000 +0200 @@ -1,2 +1,20 @@ 1) On systems running Upstart, shorewall-init cannot reliably secure the firewall before interfaces are brought up. + +2) Beginning with Shorewall 4.4.22, the 'pptpserver' tunnel type has + been configured as a PPTP client running on the firewall rather + than as a server on the firewall. + + Workaround: Configure the tunnel in the rules file rather than in + the tunnels file: + + #ACTION SOURCE DEST PROTO DEST + # PORT(S) + ACCEPT net:<gateway> fw tcp 1723 + ACCEPT net:<gateway> fw 47 + ACCEPT fw net:<gateway> 47 + +3) The shorewall-accounting (5) and shorewall6-accounting (5) + documentation for the IPSEC column is incorrect. Rather than + 'accountin' and 'accountout', the chain names should be + 'accipsecin' and 'accipsecout'. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-accounting.5 new/shorewall-4.5.4.1/manpages/shorewall-accounting.5 --- old/shorewall-4.5.4/manpages/shorewall-accounting.5 2012-05-26 00:48:06.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-accounting.5 2012-05-31 21:45:27.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-accounting .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ACCOUNTIN" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ACCOUNTIN" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -559,7 +559,7 @@ .RE .RE .PP -\fBIPSEC \- \fR\fB\fIoption\-list\fR\fR\fB (Optional \- Added in Shorewall 4\&.4\&.13 )\fR +\fBIPSEC \- \fR\fB\fIoption\-list\fR\fR\fB (Optional \- Added in Shorewall 4\&.4\&.13 but broken until 4\&.5\&.4\&.1 )\fR .RS 4 The option\-list consists of a comma\-separated list of options from the following list\&. Only packets that will be encrypted or have been de\-crypted via an SA that matches these options will have their source address changed\&. .PP @@ -622,8 +622,18 @@ .RS 4 When used by itself, causes all traffic that will not be encrypted/encapsulated or has been decrypted/un\-encapsulted to match the rule\&. .RE +.PP +\fBin\fR +.RS 4 +May only be used in the FORWARD section and must be the first or the only item the list\&. Indicates that matching packets have been decrypted in input\&. +.RE +.PP +\fBout\fR +.RS 4 +May only be used in the FORWARD section and must be the first or the only item in the list\&. Indicates that matching packets will be encrypted on output\&. +.RE .sp -If this column is non\-empty, then: +If this column is non\-empty and sections are not used, then: .sp .RS 4 .ie n \{\ @@ -633,10 +643,10 @@ .sp -1 .IP \(bu 2.3 .\} -A chain NAME may appearing in the ACTION column must be a chain branched either directly or indirectly from the -\fBaccountin\fR +A chain NAME appearing in the ACTION column must be a chain branched either directly or indirectly from the +\fBaccipsecin\fR or -\fBaccountout\fR +\fBaccipsecout\fR chain\&. .RE .sp @@ -649,16 +659,25 @@ .IP \(bu 2.3 .\} The CHAIN column must contain either -\fBaccountin\fR +\fBaccipsecin\fR or -\fBaccountout\fR +\fBaccipsecout\fR or a chain branched either directly or indirectly from those chains\&. .RE .sp +.RS 4 +.ie n \{\ +\h'-04'\(bu\h'+03'\c +.\} +.el \{\ +.sp -1 +.IP \(bu 2.3 +.\} These rules will NOT appear in the \fBaccounting\fR chain\&. .RE +.RE .PP In all of the above columns except \fBACTION\fR diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-actions.5 new/shorewall-4.5.4.1/manpages/shorewall-actions.5 --- old/shorewall-4.5.4/manpages/shorewall-actions.5 2012-05-26 00:48:08.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-actions.5 2012-05-31 21:45:29.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-actions .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ACTIONS" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ACTIONS" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-blacklist.5 new/shorewall-4.5.4.1/manpages/shorewall-blacklist.5 --- old/shorewall-4.5.4/manpages/shorewall-blacklist.5 2012-05-26 00:48:10.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-blacklist.5 2012-05-31 21:45:31.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-blacklist .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-BLACKLIST" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-BLACKLIST" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-blrules.5 new/shorewall-4.5.4.1/manpages/shorewall-blrules.5 --- old/shorewall-4.5.4/manpages/shorewall-blrules.5 2012-05-26 00:48:12.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-blrules.5 2012-05-31 21:45:33.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-blrules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-BLRULES" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-BLRULES" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-ecn.5 new/shorewall-4.5.4.1/manpages/shorewall-ecn.5 --- old/shorewall-4.5.4/manpages/shorewall-ecn.5 2012-05-26 00:48:18.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-ecn.5 2012-05-31 21:45:39.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-ecn .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ECN" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ECN" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-exclusion.5 new/shorewall-4.5.4.1/manpages/shorewall-exclusion.5 --- old/shorewall-4.5.4/manpages/shorewall-exclusion.5 2012-05-26 00:48:20.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-exclusion.5 2012-05-31 21:45:41.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-exclusion .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-EXCLUSION" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-EXCLUSION" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-hosts.5 new/shorewall-4.5.4.1/manpages/shorewall-hosts.5 --- old/shorewall-4.5.4/manpages/shorewall-hosts.5 2012-05-26 00:48:22.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-hosts.5 2012-05-31 21:45:43.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-hosts .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-HOSTS" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-HOSTS" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-init.8 new/shorewall-4.5.4.1/manpages/shorewall-init.8 --- old/shorewall-4.5.4/manpages/shorewall-init.8 2012-05-26 00:48:24.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-init.8 2012-05-31 21:45:45.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-init .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-INIT" "8" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-INIT" "8" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-interfaces.5 new/shorewall-4.5.4.1/manpages/shorewall-interfaces.5 --- old/shorewall-4.5.4/manpages/shorewall-interfaces.5 2012-05-26 00:48:27.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-interfaces.5 2012-05-31 21:45:48.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-interfaces .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-INTERFACE" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-INTERFACE" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-ipsets.5 new/shorewall-4.5.4.1/manpages/shorewall-ipsets.5 --- old/shorewall-4.5.4/manpages/shorewall-ipsets.5 2012-05-26 00:48:29.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-ipsets.5 2012-05-31 21:45:50.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-ipsets .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-IPSETS" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-IPSETS" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-maclist.5 new/shorewall-4.5.4.1/manpages/shorewall-maclist.5 --- old/shorewall-4.5.4/manpages/shorewall-maclist.5 2012-05-26 00:48:31.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-maclist.5 2012-05-31 21:45:52.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-maclist .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-MACLIST" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-MACLIST" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-masq.5 new/shorewall-4.5.4.1/manpages/shorewall-masq.5 --- old/shorewall-4.5.4/manpages/shorewall-masq.5 2012-05-26 00:48:33.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-masq.5 2012-05-31 21:45:54.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-masq .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-MASQ" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-MASQ" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-modules.5 new/shorewall-4.5.4.1/manpages/shorewall-modules.5 --- old/shorewall-4.5.4/manpages/shorewall-modules.5 2012-05-26 00:48:35.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-modules.5 2012-05-31 21:45:56.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-modules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-MODULES" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-MODULES" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-nat.5 new/shorewall-4.5.4.1/manpages/shorewall-nat.5 --- old/shorewall-4.5.4/manpages/shorewall-nat.5 2012-05-26 00:48:37.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-nat.5 2012-05-31 21:45:58.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-nat .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-NAT" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-NAT" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-nesting.5 new/shorewall-4.5.4.1/manpages/shorewall-nesting.5 --- old/shorewall-4.5.4/manpages/shorewall-nesting.5 2012-05-26 00:48:39.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-nesting.5 2012-05-31 21:46:00.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-nesting .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-NESTING" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-NESTING" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-netmap.5 new/shorewall-4.5.4.1/manpages/shorewall-netmap.5 --- old/shorewall-4.5.4/manpages/shorewall-netmap.5 2012-05-26 00:48:41.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-netmap.5 2012-05-31 21:46:02.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-netmap .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-NETMAP" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-NETMAP" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-notrack.5 new/shorewall-4.5.4.1/manpages/shorewall-notrack.5 --- old/shorewall-4.5.4/manpages/shorewall-notrack.5 2012-05-26 00:48:43.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-notrack.5 2012-05-31 21:46:04.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall6-notrack .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL6\-NOTRACK" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL6\-NOTRACK" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-params.5 new/shorewall-4.5.4.1/manpages/shorewall-params.5 --- old/shorewall-4.5.4/manpages/shorewall-params.5 2012-05-26 00:48:45.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-params.5 2012-05-31 21:46:06.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-params .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-PARAMS" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-PARAMS" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-policy.5 new/shorewall-4.5.4.1/manpages/shorewall-policy.5 --- old/shorewall-4.5.4/manpages/shorewall-policy.5 2012-05-26 00:48:47.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-policy.5 2012-05-31 21:46:08.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-policy .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-POLICY" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-POLICY" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-providers.5 new/shorewall-4.5.4.1/manpages/shorewall-providers.5 --- old/shorewall-4.5.4/manpages/shorewall-providers.5 2012-05-26 00:48:49.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-providers.5 2012-05-31 21:46:10.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-providers .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-PROVIDERS" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-PROVIDERS" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-proxyarp.5 new/shorewall-4.5.4.1/manpages/shorewall-proxyarp.5 --- old/shorewall-4.5.4/manpages/shorewall-proxyarp.5 2012-05-26 00:48:51.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-proxyarp.5 2012-05-31 21:46:12.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-proxyarp .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-PROXYARP" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-PROXYARP" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-routes.5 new/shorewall-4.5.4.1/manpages/shorewall-routes.5 --- old/shorewall-4.5.4/manpages/shorewall-routes.5 2012-05-26 00:48:55.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-routes.5 2012-05-31 21:46:16.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-routes .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ROUTES" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ROUTES" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-routestopped.5 new/shorewall-4.5.4.1/manpages/shorewall-routestopped.5 --- old/shorewall-4.5.4/manpages/shorewall-routestopped.5 2012-05-26 00:48:53.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-routestopped.5 2012-05-31 21:46:14.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-routestopped .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ROUTESTOP" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ROUTESTOP" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-rtrules.5 new/shorewall-4.5.4.1/manpages/shorewall-rtrules.5 --- old/shorewall-4.5.4/manpages/shorewall-rtrules.5 2012-05-26 00:48:57.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-rtrules.5 2012-05-31 21:46:19.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-rtrules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-RTRULES" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-RTRULES" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-rules.5 new/shorewall-4.5.4.1/manpages/shorewall-rules.5 --- old/shorewall-4.5.4/manpages/shorewall-rules.5 2012-05-26 00:49:00.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-rules.5 2012-05-31 21:46:21.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-rules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-RULES" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-RULES" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-secmarks.5 new/shorewall-4.5.4.1/manpages/shorewall-secmarks.5 --- old/shorewall-4.5.4/manpages/shorewall-secmarks.5 2012-05-26 00:49:02.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-secmarks.5 2012-05-31 21:46:23.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-secmarks .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-SECMARKS" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-SECMARKS" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-tcclasses.5 new/shorewall-4.5.4.1/manpages/shorewall-tcclasses.5 --- old/shorewall-4.5.4/manpages/shorewall-tcclasses.5 2012-05-26 00:49:04.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-tcclasses.5 2012-05-31 21:46:26.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcclasses .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCCLASSES" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCCLASSES" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-tcdevices.5 new/shorewall-4.5.4.1/manpages/shorewall-tcdevices.5 --- old/shorewall-4.5.4/manpages/shorewall-tcdevices.5 2012-05-26 00:49:06.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-tcdevices.5 2012-05-31 21:46:28.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcdevices .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCDEVICES" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCDEVICES" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-tcfilters.5 new/shorewall-4.5.4.1/manpages/shorewall-tcfilters.5 --- old/shorewall-4.5.4/manpages/shorewall-tcfilters.5 2012-05-26 00:49:09.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-tcfilters.5 2012-05-31 21:46:30.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcfilters .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCFILTERS" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCFILTERS" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-tcinterfaces.5 new/shorewall-4.5.4.1/manpages/shorewall-tcinterfaces.5 --- old/shorewall-4.5.4/manpages/shorewall-tcinterfaces.5 2012-05-26 00:49:11.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-tcinterfaces.5 2012-05-31 21:46:32.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcinterfaces .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCINTERFA" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCINTERFA" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-tcpri.5 new/shorewall-4.5.4.1/manpages/shorewall-tcpri.5 --- old/shorewall-4.5.4/manpages/shorewall-tcpri.5 2012-05-26 00:49:13.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-tcpri.5 2012-05-31 21:46:34.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcpri .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCPRI" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCPRI" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-tcrules.5 new/shorewall-4.5.4.1/manpages/shorewall-tcrules.5 --- old/shorewall-4.5.4/manpages/shorewall-tcrules.5 2012-05-26 00:49:15.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-tcrules.5 2012-05-31 21:46:36.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tcrules .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TCRULES" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TCRULES" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-tos.5 new/shorewall-4.5.4.1/manpages/shorewall-tos.5 --- old/shorewall-4.5.4/manpages/shorewall-tos.5 2012-05-26 00:49:17.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-tos.5 2012-05-31 21:46:38.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tos .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TOS" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TOS" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-tunnels.5 new/shorewall-4.5.4.1/manpages/shorewall-tunnels.5 --- old/shorewall-4.5.4/manpages/shorewall-tunnels.5 2012-05-26 00:49:19.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-tunnels.5 2012-05-31 21:46:40.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-tunnels .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-TUNNELS" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-TUNNELS" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-vardir.5 new/shorewall-4.5.4.1/manpages/shorewall-vardir.5 --- old/shorewall-4.5.4/manpages/shorewall-vardir.5 2012-05-26 00:49:21.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-vardir.5 2012-05-31 21:46:42.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-vardir .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-VARDIR" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-VARDIR" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall-zones.5 new/shorewall-4.5.4.1/manpages/shorewall-zones.5 --- old/shorewall-4.5.4/manpages/shorewall-zones.5 2012-05-26 00:49:26.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall-zones.5 2012-05-31 21:46:47.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-zones .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-ZONES" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-ZONES" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall.8 new/shorewall-4.5.4.1/manpages/shorewall.8 --- old/shorewall-4.5.4/manpages/shorewall.8 2012-05-26 00:49:24.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall.8 2012-05-31 21:46:45.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL" "8" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL" "8" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/manpages/shorewall.conf.5 new/shorewall-4.5.4.1/manpages/shorewall.conf.5 --- old/shorewall-4.5.4/manpages/shorewall.conf.5 2012-05-26 00:48:16.000000000 +0200 +++ new/shorewall-4.5.4.1/manpages/shorewall.conf.5 2012-05-31 21:45:37.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall.conf .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\&.CONF" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\&.CONF" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/releasenotes.txt new/shorewall-4.5.4.1/releasenotes.txt --- old/shorewall-4.5.4/releasenotes.txt 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-4.5.4.1/releasenotes.txt 2012-05-31 21:45:24.000000000 +0200 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 4 . 5 . 4 + S H O R E W A L L 4 . 5 . 4 . 1 ------------------------------------ - M a y 2 6 , 2 0 1 2 + J u n e 0 1 , 2 0 1 2 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -15,6 +15,20 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- +4.5.4.1 + +1) Beginning with Shorewall 4.4.22, the 'pptpserver' tunnel type has + been configured as a PPTP client running on the firewall rather + than as a server on the firewall. It is now correctly configured as + a server. + +2) The shorewall-accounting (5) and shorewall6-accounting (5) + documentation for the IPSEC column is incorrect. Rather than + 'accountin' and 'accountout', the chain names should be + 'accipsecin' and 'accipsecout'. + +4.5.4 + 1) This release includes all defect repairs from Shorewall 4.5.3.1. 2) When EXPORTMODULES=No in shorewall.conf, the following errors were diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/shorewall.spec new/shorewall-4.5.4.1/shorewall.spec --- old/shorewall-4.5.4/shorewall.spec 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-4.5.4.1/shorewall.spec 2012-05-31 21:45:24.000000000 +0200 @@ -1,6 +1,6 @@ %define name shorewall %define version 4.5.4 -%define release 0base +%define release 1 Summary: Shoreline Firewall is an iptables-based firewall for Linux systems. Name: %{name} @@ -118,6 +118,8 @@ %doc COPYING INSTALL changelog.txt releasenotes.txt Contrib/* Samples %changelog +* Tue May 29 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.4-1 * Thu May 24 2012 Tom Eastep tom@shorewall.net - Updated to 4.5.4-0base * Tue May 22 2012 Tom Eastep tom@shorewall.net diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-4.5.4/uninstall.sh new/shorewall-4.5.4.1/uninstall.sh --- old/shorewall-4.5.4/uninstall.sh 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-4.5.4.1/uninstall.sh 2012-05-31 21:45:24.000000000 +0200 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.5.4 +VERSION=4.5.4.1 usage() # $1 = exit status { ++++++ shorewall-core-4.5.4.tar.bz2 -> shorewall-core-4.5.4.1.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.4/changelog.txt new/shorewall-core-4.5.4.1/changelog.txt --- old/shorewall-core-4.5.4/changelog.txt 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-core-4.5.4.1/changelog.txt 2012-05-31 21:45:24.000000000 +0200 @@ -1,3 +1,9 @@ +Changes in 4.5.4.1 + +1) Correct 'pptpserver' tunnel configuration. + +2) Fix IPSEC accounting. + Changes in 4.5.4 Final 1) Update the release documents. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.4/configure new/shorewall-core-4.5.4.1/configure --- old/shorewall-core-4.5.4/configure 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-core-4.5.4.1/configure 2012-05-31 21:45:24.000000000 +0200 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=4.5.4 +VERSION=4.5.4.1 case "$BASH_VERSION" in [4-9].*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.4/configure.pl new/shorewall-core-4.5.4.1/configure.pl --- old/shorewall-core-4.5.4/configure.pl 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-core-4.5.4.1/configure.pl 2012-05-31 21:45:24.000000000 +0200 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '4.5.4' + VERSION => '4.5.4.1' }; my %params; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.4/install.sh new/shorewall-core-4.5.4.1/install.sh --- old/shorewall-core-4.5.4/install.sh 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-core-4.5.4.1/install.sh 2012-05-31 21:45:24.000000000 +0200 @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.5.4 +VERSION=4.5.4.1 usage() # $1 = exit status { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.4/known_problems.txt new/shorewall-core-4.5.4.1/known_problems.txt --- old/shorewall-core-4.5.4/known_problems.txt 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-core-4.5.4.1/known_problems.txt 2012-05-31 21:45:24.000000000 +0200 @@ -1,2 +1,20 @@ 1) On systems running Upstart, shorewall-init cannot reliably secure the firewall before interfaces are brought up. + +2) Beginning with Shorewall 4.4.22, the 'pptpserver' tunnel type has + been configured as a PPTP client running on the firewall rather + than as a server on the firewall. + + Workaround: Configure the tunnel in the rules file rather than in + the tunnels file: + + #ACTION SOURCE DEST PROTO DEST + # PORT(S) + ACCEPT net:<gateway> fw tcp 1723 + ACCEPT net:<gateway> fw 47 + ACCEPT fw net:<gateway> 47 + +3) The shorewall-accounting (5) and shorewall6-accounting (5) + documentation for the IPSEC column is incorrect. Rather than + 'accountin' and 'accountout', the chain names should be + 'accipsecin' and 'accipsecout'. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.4/releasenotes.txt new/shorewall-core-4.5.4.1/releasenotes.txt --- old/shorewall-core-4.5.4/releasenotes.txt 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-core-4.5.4.1/releasenotes.txt 2012-05-31 21:45:24.000000000 +0200 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 4 . 5 . 4 + S H O R E W A L L 4 . 5 . 4 . 1 ------------------------------------ - M a y 2 6 , 2 0 1 2 + J u n e 0 1 , 2 0 1 2 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -15,6 +15,20 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- +4.5.4.1 + +1) Beginning with Shorewall 4.4.22, the 'pptpserver' tunnel type has + been configured as a PPTP client running on the firewall rather + than as a server on the firewall. It is now correctly configured as + a server. + +2) The shorewall-accounting (5) and shorewall6-accounting (5) + documentation for the IPSEC column is incorrect. Rather than + 'accountin' and 'accountout', the chain names should be + 'accipsecin' and 'accipsecout'. + +4.5.4 + 1) This release includes all defect repairs from Shorewall 4.5.3.1. 2) When EXPORTMODULES=No in shorewall.conf, the following errors were diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.4/shorewall-core.spec new/shorewall-core-4.5.4.1/shorewall-core.spec --- old/shorewall-core-4.5.4/shorewall-core.spec 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-core-4.5.4.1/shorewall-core.spec 2012-05-31 21:45:24.000000000 +0200 @@ -1,6 +1,6 @@ %define name shorewall-core %define version 4.5.4 -%define release 0base +%define release 1 Summary: Shoreline Firewall is an iptables-based firewall for Linux systems. Name: %{name} @@ -62,6 +62,8 @@ %doc COPYING INSTALL changelog.txt releasenotes.txt %changelog +* Tue May 29 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.4-1 * Thu May 24 2012 Tom Eastep tom@shorewall.net - Updated to 4.5.4-0base * Tue May 22 2012 Tom Eastep tom@shorewall.net diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-core-4.5.4/uninstall.sh new/shorewall-core-4.5.4.1/uninstall.sh --- old/shorewall-core-4.5.4/uninstall.sh 2012-05-26 00:48:03.000000000 +0200 +++ new/shorewall-core-4.5.4.1/uninstall.sh 2012-05-31 21:45:24.000000000 +0200 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.5.4 +VERSION=4.5.4.1 usage() # $1 = exit status { ++++++ shorewall-docs-html-4.5.4.tar.bz2 -> shorewall-docs-html-4.5.4.1.tar.bz2 ++++++ ++++ 6190 lines of diff (skipped) ++++++ shorewall-init-4.5.4.tar.bz2 -> shorewall-init-4.5.4.1.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.4/changelog.txt new/shorewall-init-4.5.4.1/changelog.txt --- old/shorewall-init-4.5.4/changelog.txt 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-init-4.5.4.1/changelog.txt 2012-05-31 21:45:25.000000000 +0200 @@ -1,3 +1,9 @@ +Changes in 4.5.4.1 + +1) Correct 'pptpserver' tunnel configuration. + +2) Fix IPSEC accounting. + Changes in 4.5.4 Final 1) Update the release documents. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.4/configure new/shorewall-init-4.5.4.1/configure --- old/shorewall-init-4.5.4/configure 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-init-4.5.4.1/configure 2012-05-31 21:45:25.000000000 +0200 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=4.5.4 +VERSION=4.5.4.1 case "$BASH_VERSION" in [4-9].*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.4/configure.pl new/shorewall-init-4.5.4.1/configure.pl --- old/shorewall-init-4.5.4/configure.pl 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-init-4.5.4.1/configure.pl 2012-05-31 21:45:25.000000000 +0200 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '4.5.4' + VERSION => '4.5.4.1' }; my %params; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.4/install.sh new/shorewall-init-4.5.4.1/install.sh --- old/shorewall-init-4.5.4/install.sh 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-init-4.5.4.1/install.sh 2012-05-31 21:45:25.000000000 +0200 @@ -23,7 +23,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.5.4 +VERSION=4.5.4.1 usage() # $1 = exit status { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.4/releasenotes.txt new/shorewall-init-4.5.4.1/releasenotes.txt --- old/shorewall-init-4.5.4/releasenotes.txt 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-init-4.5.4.1/releasenotes.txt 2012-05-31 21:45:25.000000000 +0200 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 4 . 5 . 4 + S H O R E W A L L 4 . 5 . 4 . 1 ------------------------------------ - M a y 2 6 , 2 0 1 2 + J u n e 0 1 , 2 0 1 2 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -15,6 +15,20 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- +4.5.4.1 + +1) Beginning with Shorewall 4.4.22, the 'pptpserver' tunnel type has + been configured as a PPTP client running on the firewall rather + than as a server on the firewall. It is now correctly configured as + a server. + +2) The shorewall-accounting (5) and shorewall6-accounting (5) + documentation for the IPSEC column is incorrect. Rather than + 'accountin' and 'accountout', the chain names should be + 'accipsecin' and 'accipsecout'. + +4.5.4 + 1) This release includes all defect repairs from Shorewall 4.5.3.1. 2) When EXPORTMODULES=No in shorewall.conf, the following errors were diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.4/shorewall-init.spec new/shorewall-init-4.5.4.1/shorewall-init.spec --- old/shorewall-init-4.5.4/shorewall-init.spec 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-init-4.5.4.1/shorewall-init.spec 2012-05-31 21:45:25.000000000 +0200 @@ -1,6 +1,6 @@ %define name shorewall-init %define version 4.5.4 -%define release 0base +%define release 1 Summary: Shorewall-init adds functionality to Shoreline Firewall (Shorewall). Name: %{name} @@ -123,6 +123,8 @@ %doc COPYING changelog.txt releasenotes.txt %changelog +* Tue May 29 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.4-1 * Thu May 24 2012 Tom Eastep tom@shorewall.net - Updated to 4.5.4-0base * Tue May 22 2012 Tom Eastep tom@shorewall.net diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-init-4.5.4/uninstall.sh new/shorewall-init-4.5.4.1/uninstall.sh --- old/shorewall-init-4.5.4/uninstall.sh 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-init-4.5.4.1/uninstall.sh 2012-05-31 21:45:25.000000000 +0200 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.5.4 +VERSION=4.5.4.1 usage() # $1 = exit status { ++++++ shorewall-lite-4.5.4.tar.bz2 -> shorewall-lite-4.5.4.1.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/changelog.txt new/shorewall-lite-4.5.4.1/changelog.txt --- old/shorewall-lite-4.5.4/changelog.txt 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/changelog.txt 2012-05-31 21:45:25.000000000 +0200 @@ -1,3 +1,9 @@ +Changes in 4.5.4.1 + +1) Correct 'pptpserver' tunnel configuration. + +2) Fix IPSEC accounting. + Changes in 4.5.4 Final 1) Update the release documents. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/configure new/shorewall-lite-4.5.4.1/configure --- old/shorewall-lite-4.5.4/configure 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/configure 2012-05-31 21:45:25.000000000 +0200 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=4.5.4 +VERSION=4.5.4.1 case "$BASH_VERSION" in [4-9].*) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/configure.pl new/shorewall-lite-4.5.4.1/configure.pl --- old/shorewall-lite-4.5.4/configure.pl 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/configure.pl 2012-05-31 21:45:25.000000000 +0200 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '4.5.4' + VERSION => '4.5.4.1' }; my %params; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/install.sh new/shorewall-lite-4.5.4.1/install.sh --- old/shorewall-lite-4.5.4/install.sh 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/install.sh 2012-05-31 21:45:25.000000000 +0200 @@ -22,7 +22,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=4.5.4 +VERSION=4.5.4.1 usage() # $1 = exit status { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/manpages/shorewall-lite-vardir.5 new/shorewall-lite-4.5.4.1/manpages/shorewall-lite-vardir.5 --- old/shorewall-lite-4.5.4/manpages/shorewall-lite-vardir.5 2012-05-26 00:53:32.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/manpages/shorewall-lite-vardir.5 2012-05-31 21:50:55.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-lite-vardir .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-LITE\-VAR" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-LITE\-VAR" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/manpages/shorewall-lite.8 new/shorewall-lite-4.5.4.1/manpages/shorewall-lite.8 --- old/shorewall-lite-4.5.4/manpages/shorewall-lite.8 2012-05-26 00:53:34.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/manpages/shorewall-lite.8 2012-05-31 21:50:57.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-lite .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-LITE" "8" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-LITE" "8" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/manpages/shorewall-lite.conf.5 new/shorewall-lite-4.5.4.1/manpages/shorewall-lite.conf.5 --- old/shorewall-lite-4.5.4/manpages/shorewall-lite.conf.5 2012-05-26 00:53:30.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/manpages/shorewall-lite.conf.5 2012-05-31 21:50:52.000000000 +0200 @@ -2,12 +2,12 @@ .\" Title: shorewall-lite.conf .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/ -.\" Date: 05/25/2012 +.\" Date: 05/31/2012 .\" Manual: [FIXME: manual] .\" Source: [FIXME: source] .\" Language: English .\" -.TH "SHOREWALL\-LITE\&.CO" "5" "05/25/2012" "[FIXME: source]" "[FIXME: manual]" +.TH "SHOREWALL\-LITE\&.CO" "5" "05/31/2012" "[FIXME: source]" "[FIXME: manual]" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/releasenotes.txt new/shorewall-lite-4.5.4.1/releasenotes.txt --- old/shorewall-lite-4.5.4/releasenotes.txt 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/releasenotes.txt 2012-05-31 21:45:25.000000000 +0200 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 4 . 5 . 4 + S H O R E W A L L 4 . 5 . 4 . 1 ------------------------------------ - M a y 2 6 , 2 0 1 2 + J u n e 0 1 , 2 0 1 2 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -15,6 +15,20 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- +4.5.4.1 + +1) Beginning with Shorewall 4.4.22, the 'pptpserver' tunnel type has + been configured as a PPTP client running on the firewall rather + than as a server on the firewall. It is now correctly configured as + a server. + +2) The shorewall-accounting (5) and shorewall6-accounting (5) + documentation for the IPSEC column is incorrect. Rather than + 'accountin' and 'accountout', the chain names should be + 'accipsecin' and 'accipsecout'. + +4.5.4 + 1) This release includes all defect repairs from Shorewall 4.5.3.1. 2) When EXPORTMODULES=No in shorewall.conf, the following errors were diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/shorewall-lite.spec new/shorewall-lite-4.5.4.1/shorewall-lite.spec --- old/shorewall-lite-4.5.4/shorewall-lite.spec 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/shorewall-lite.spec 2012-05-31 21:45:25.000000000 +0200 @@ -1,6 +1,6 @@ %define name shorewall-lite %define version 4.5.4 -%define release 0base +%define release 1 %define initdir /etc/init.d Summary: Shoreline Firewall Lite is an iptables-based firewall for Linux systems. @@ -105,6 +105,8 @@ %doc COPYING changelog.txt releasenotes.txt %changelog +* Tue May 29 2012 Tom Eastep tom@shorewall.net +- Updated to 4.5.4-1 * Thu May 24 2012 Tom Eastep tom@shorewall.net - Updated to 4.5.4-0base * Tue May 22 2012 Tom Eastep tom@shorewall.net diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shorewall-lite-4.5.4/uninstall.sh new/shorewall-lite-4.5.4.1/uninstall.sh --- old/shorewall-lite-4.5.4/uninstall.sh 2012-05-26 00:48:04.000000000 +0200 +++ new/shorewall-lite-4.5.4.1/uninstall.sh 2012-05-31 21:45:25.000000000 +0200 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=4.5.4 +VERSION=4.5.4.1 usage() # $1 = exit status { ++++++ shorewall-4.5.4.tar.bz2 -> shorewall6-4.5.4.1.tar.bz2 ++++++ ++++ 99110 lines of diff (skipped) ++++++ shorewall-lite-4.5.4.tar.bz2 -> shorewall6-lite-4.5.4.1.tar.bz2 ++++++ ++++ 6642 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org