Overview

Request 123169 accepted

- Update to 4.5.4.1 For more details see changelog.txt and
releasenotes.txt
* Beginning with Shorewall 4.4.22, the 'pptpserver' tunnel type
has been configured as a PPTP client running on the firewall
rather than as a server on the firewall. It is now correctly
configured as a server.
* The shorewall-accounting (5) and shorewall6-accounting (5)
documentation for the IPSEC column is incorrect. Rather than
'accountin' and 'accountout', the chain names should be
'accipsecin' and 'accipsecout'.
* IPSEC accounting did not work if the accounting file was
sectioned. Beginning with this release, the IPSEC column can
be specified in any section. As always, the IPSEC column
contains a comma-separated list of items. In the FORWARD
chain, the first (or only) item in the list must be either
'in' or 'out' to indicate whether the rule matches incoming
packets that have been decrypted ('in') or outgoing packets
that will be encrypted ('out'). There are no restrictions with
respect to which chain IPSEC rules can appear in a sectioned
file.

Loading...
Request History
Togan Muftuoglu's avatar

toganm created request

- Update to 4.5.4.1 For more details see changelog.txt and
releasenotes.txt
* Beginning with Shorewall 4.4.22, the 'pptpserver' tunnel type
has been configured as a PPTP client running on the firewall
rather than as a server on the firewall. It is now correctly
configured as a server.
* The shorewall-accounting (5) and shorewall6-accounting (5)
documentation for the IPSEC column is incorrect. Rather than
'accountin' and 'accountout', the chain names should be
'accipsecin' and 'accipsecout'.
* IPSEC accounting did not work if the accounting file was
sectioned. Beginning with this release, the IPSEC column can
be specified in any section. As always, the IPSEC column
contains a comma-separated list of items. In the FORWARD
chain, the first (or only) item in the list must be either
'in' or 'out' to indicate whether the rule matches incoming
packets that have been decrypted ('in') or outgoing packets
that will be encrypted ('out'). There are no restrictions with
respect to which chain IPSEC rules can appear in a sectioned
file.


Togan Muftuoglu's avatar

toganm accepted request

reviewed ok.

openSUSE Build Service is sponsored by