Overview
Request 131522 accepted
- Update to 4.5.7 For more details see changelog.txt and
releasenotes.txt
* This release includes the defect repair from Shorewall 4.5.6.2.
* The command 'shorewall enable pppX' could fail with the ip
diagnostic Error: either "to" is duplicate, or "weight" is a
garbage.
Shorewall now generates the correct ip command.
* Optimize level 4 could previously combine two rules that each
specified the 'policy' match, leading to this iptables-restore
failure:
policy match: multiple elements but no --strict
The optimizer now avoids combining such rules.
While this is a long-standing defect in the optimizer, it was
exposed by changes in Shorewall 4.5.6.
* There were several cases where hard-wired directory names
appeared in the tarball installers. These have been replaced
with the appropriate shorewallrc variables.
* A defect in RHEL 6.3 and derivatives causes 'shorewall show
capabilities' to leave an empty ipset in the configuration. The
same defect can cause the Shorewall compiler to similarly leave
an empty ipset behind.
This Shorewall release has a workaround for this problem.
- Added Bash >= 4 to BuildRequires
- Fix builds for Fedora
compiler. It now causes following lines to be omitted.
releasenotes.txt
required.
failure. Shorewall now uses the physical name.
impossible to set SYSCONFDIR.
- Created by toganm
- In state accepted
- Package maintainers: bruno_friedmann and polslinux
Request History
toganm created request
- Update to 4.5.7 For more details see changelog.txt and
releasenotes.txt
* This release includes the defect repair from Shorewall 4.5.6.2.
* The command 'shorewall enable pppX' could fail with the ip
diagnostic Error: either "to" is duplicate, or "weight" is a
garbage.
Shorewall now generates the correct ip command.
* Optimize level 4 could previously combine two rules that each
specified the 'policy' match, leading to this iptables-restore
failure:
policy match: multiple elements but no --strict
The optimizer now avoids combining such rules.
While this is a long-standing defect in the optimizer, it was
exposed by changes in Shorewall 4.5.6.
* There were several cases where hard-wired directory names
appeared in the tarball installers. These have been replaced
with the appropriate shorewallrc variables.
* A defect in RHEL 6.3 and derivatives causes 'shorewall show
capabilities' to leave an empty ipset in the configuration. The
same defect can cause the Shorewall compiler to similarly leave
an empty ipset behind.
This Shorewall release has a workaround for this problem.
- Added Bash >= 4 to BuildRequires
- Fix builds for Fedora
compiler. It now causes following lines to be omitted.
releasenotes.txt
required.
failure. Shorewall now uses the physical name.
impossible to set SYSCONFDIR.
toganm accepted request
reviewed ok.