Overview

Request 131522 accepted

- Update to 4.5.7 For more details see changelog.txt and
releasenotes.txt
* This release includes the defect repair from Shorewall 4.5.6.2.
* The command 'shorewall enable pppX' could fail with the ip
diagnostic Error: either "to" is duplicate, or "weight" is a
garbage.
Shorewall now generates the correct ip command.
* Optimize level 4 could previously combine two rules that each
specified the 'policy' match, leading to this iptables-restore
failure:
policy match: multiple elements but no --strict
The optimizer now avoids combining such rules.
While this is a long-standing defect in the optimizer, it was
exposed by changes in Shorewall 4.5.6.
* There were several cases where hard-wired directory names
appeared in the tarball installers. These have been replaced
with the appropriate shorewallrc variables.
* A defect in RHEL 6.3 and derivatives causes 'shorewall show
capabilities' to leave an empty ipset in the configuration. The
same defect can cause the Shorewall compiler to similarly leave
an empty ipset behind.
This Shorewall release has a workaround for this problem.
- Added Bash >= 4 to BuildRequires
- Fix builds for Fedora

compiler. It now causes following lines to be omitted.
releasenotes.txt
required.
failure. Shorewall now uses the physical name.
impossible to set SYSCONFDIR.

Loading...
Request History
Togan Muftuoglu's avatar

toganm created request

- Update to 4.5.7 For more details see changelog.txt and
releasenotes.txt
* This release includes the defect repair from Shorewall 4.5.6.2.
* The command 'shorewall enable pppX' could fail with the ip
diagnostic Error: either "to" is duplicate, or "weight" is a
garbage.
Shorewall now generates the correct ip command.
* Optimize level 4 could previously combine two rules that each
specified the 'policy' match, leading to this iptables-restore
failure:
policy match: multiple elements but no --strict
The optimizer now avoids combining such rules.
While this is a long-standing defect in the optimizer, it was
exposed by changes in Shorewall 4.5.6.
* There were several cases where hard-wired directory names
appeared in the tarball installers. These have been replaced
with the appropriate shorewallrc variables.
* A defect in RHEL 6.3 and derivatives causes 'shorewall show
capabilities' to leave an empty ipset in the configuration. The
same defect can cause the Shorewall compiler to similarly leave
an empty ipset behind.
This Shorewall release has a workaround for this problem.
- Added Bash >= 4 to BuildRequires
- Fix builds for Fedora

compiler. It now causes following lines to be omitted.
releasenotes.txt
required.
failure. Shorewall now uses the physical name.
impossible to set SYSCONFDIR.


Togan Muftuoglu's avatar

toganm accepted request

reviewed ok.

openSUSE Build Service is sponsored by