diff -Nru shorewall-init-5.2.3.2/changelog.txt shorewall-init-5.2.3.4/changelog.txt --- shorewall-init-5.2.3.2/changelog.txt 2019-03-18 01:42:25.000000000 +0000 +++ shorewall-init-5.2.3.4/changelog.txt 2019-08-27 00:55:57.000000000 +0000 @@ -1,3 +1,22 @@ +Changes in 5.2.3.4 + +1) Update release documents. + +2) Correct handling of multi-queue NFQUEUE as a policy. + +3) Correct handling of multi-queue NFQUEUE as a macro parameter. + +4) Make 'AUTOMAKE=No' the update default. + +5) Correct the description of the 'bypass' NFQUEUE option in + shorewall-rules(5). + +Changes in 5.2.3.3 + +1) Update release documents. + +2) Document fix for an ipset in the SPORT column. + Changes in 5.2.3.2 1) Update release documents. diff -Nru shorewall-init-5.2.3.2/configure shorewall-init-5.2.3.4/configure --- shorewall-init-5.2.3.2/configure 2019-03-18 01:42:25.000000000 +0000 +++ shorewall-init-5.2.3.4/configure 2019-08-27 00:55:57.000000000 +0000 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=5.2.3.2 +VERSION=5.2.3.4 case "$BASH_VERSION" in [4-9].*) diff -Nru shorewall-init-5.2.3.2/configure.pl shorewall-init-5.2.3.4/configure.pl --- shorewall-init-5.2.3.2/configure.pl 2019-03-18 01:42:25.000000000 +0000 +++ shorewall-init-5.2.3.4/configure.pl 2019-08-27 00:55:57.000000000 +0000 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '5.2.3.2' + VERSION => '5.2.3.4' }; my %params; diff -Nru shorewall-init-5.2.3.2/debian/changelog shorewall-init-5.2.3.4/debian/changelog --- shorewall-init-5.2.3.2/debian/changelog 2019-03-24 01:41:08.000000000 +0000 +++ shorewall-init-5.2.3.4/debian/changelog 2019-09-07 12:40:41.000000000 +0000 @@ -1,3 +1,9 @@ +shorewall-init (5.2.3.4-1) unstable; urgency=medium + + * New Upstream Version + + -- Roberto C. Sanchez Sat, 07 Sep 2019 08:40:41 -0400 + shorewall-init (5.2.3.2-1) unstable; urgency=medium * New Upstream Version diff -Nru shorewall-init-5.2.3.2/install.sh shorewall-init-5.2.3.4/install.sh --- shorewall-init-5.2.3.2/install.sh 2019-03-18 01:42:25.000000000 +0000 +++ shorewall-init-5.2.3.4/install.sh 2019-08-27 00:55:57.000000000 +0000 @@ -27,7 +27,7 @@ # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # -VERSION=5.2.3.2 +VERSION=5.2.3.4 PRODUCT=shorewall-init Product="Shorewall Init" diff -Nru shorewall-init-5.2.3.2/releasenotes.txt shorewall-init-5.2.3.4/releasenotes.txt --- shorewall-init-5.2.3.2/releasenotes.txt 2019-03-18 01:42:25.000000000 +0000 +++ shorewall-init-5.2.3.4/releasenotes.txt 2019-08-27 00:55:57.000000000 +0000 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 5 . 2 . 3 . 2 + S H O R E W A L L 5 . 2 . 3 . 4 ------------------------------- - M A R C H 1 7 , 2 0 1 9 + A U G U S T 2 5 , 2 0 1 9 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -14,6 +14,47 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- +5.2.3.4 + +1) If multi-queue NFQUEUE (e.g., NFQUEUE(0:1) ) WAS used as a policy, + an error such as the following was previously incorrectly raised. + + ERROR: Invalid policy (NFQUEUE(0) /etc/shorewall/policy (line + 15) + + That has been corrected such that no error is raised. + +2) If multi-queue NFQUEUE( e.g., NFQUEUE(0:1,bypass) ) was passed to a + macro, an error such as the following was previously incorrectly + raised: + + ERROR: Invalid ACTION (PARAM:1c,bypass))) + /usr/share/shorewall/macro.BitTorrent (line 12) + from /etc/shorewall/rules (line 40) + + Now, the NFQUEUE action is correctly substituted for PARAM in + the Macro body. + +3) If shorewall[6].conf didn't set AUTOMAKE, the 'update' command + previously produced a new file with 'AUTOMAKE=Yes'. This resulted + in an unexpected change of behavior. Now, the new file contains + 'AUTOMAKE=No', which preserves the pre-update behavior. + +4) Shorewall-rules(5) incorrectly stated that the 'bypass' option to + NFQUEUE causes the rule to be silently bypassed if there is no + application attached to the queue. The actual behavior is that the + rule acts like ACCEPT in that case. Shorewall-rules(5) has been + corrected. + +5.2.3.3 + +1) Previously, if an ipset was specified in an SPORT column, the + compiler would raise an error similar to: + + ERROR: Invalid ipset name () /etc/shorewall/rules (line 44) + + That has been corrected. + 5.2.3.2 1) Shorewall 5.2 automatically converts and existing 'masq' file to an @@ -93,7 +134,7 @@ ---------------------------------------------------------------------------- If you are migrating from Shorewall 4.6.x or earlier, please see - http://www.shorewall.net/pub/shorewall/5.0/shorewall-5.0.15/releasenotes.txt + http://www.shorewall.org/pub/shorewall/5.0/shorewall-5.0.15/releasenotes.txt Immediately after installing Shorewall 5.2.x, we recommend that you run 'shorewall[6] update'. This command will handle many of the migration @@ -219,7 +260,7 @@ With these changes, the Drop and Reject policy actions are now deprecated in favor of a list of smaller actions. A warning is issued when these deprecated actions are used; the warning refers - the reader to http://www.shorewall.net/Actions.html#Default. + the reader to http://www.shorewall.org/Actions.html#Default. This issue is partially handled by 'shorewall update' - see the 5.2 issues below. @@ -877,7 +918,7 @@ 6) For installing into a Sandbox, the file shorewallrc.sandbox has been added to Shorewall-core. See - http://www.shorewall.net/install.htm#idm327. + http://www.shorewall.org/install.htm#idm327. 7) The "Use Pkttype Match (USEPKTTYPE)" capability is no longer used and has been deleted. This removal has introduced a new diff -Nru shorewall-init-5.2.3.2/shorewall-init.spec shorewall-init-5.2.3.4/shorewall-init.spec --- shorewall-init-5.2.3.2/shorewall-init.spec 2019-03-18 01:42:25.000000000 +0000 +++ shorewall-init-5.2.3.4/shorewall-init.spec 2019-08-27 00:55:57.000000000 +0000 @@ -1,6 +1,6 @@ %define name shorewall-init %define version 5.2.3 -%define release 2 +%define release 4 Summary: Shorewall-init adds functionality to Shoreline Firewall (Shorewall). Name: %{name} @@ -10,7 +10,7 @@ Packager: Tom Eastep Group: Networking/Utilities Source: %{name}-%{version}.tgz -URL: http://www.shorewall.net/ +URL: http://www.shorewall.org/ BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-root Requires: shoreline_firewall >= 4.5.0 @@ -135,6 +135,10 @@ %doc COPYING changelog.txt releasenotes.txt %changelog +* Sun Aug 25 2019 Tom Eastep +- Updated to 5.2.3-4 +* Thu Apr 11 2019 Tom Eastep tom@shorewall.net +- Updated to 5.2.3-3 * Sun Mar 17 2019 Tom Eastep tom@shorewall.net - Updated to 5.2.3-2 * Tue Feb 26 2019 Tom Eastep tom@shorewall.net diff -Nru shorewall-init-5.2.3.2/uninstall.sh shorewall-init-5.2.3.4/uninstall.sh --- shorewall-init-5.2.3.2/uninstall.sh 2019-03-18 01:42:25.000000000 +0000 +++ shorewall-init-5.2.3.4/uninstall.sh 2019-08-27 00:55:57.000000000 +0000 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=5.2.3.2 +VERSION=5.2.3.4 PRODUCT=shorewall-init Product="Shorewall Init"