The Shorewall team is happy to announce the availability of Shorewall 4.6.3.
Problems Corrected:
1) This release contains defect repair up through release 4.6.2.5.
2) The SAVE_IPSETS option in the Debian version of Shorewall-init now
works correctly. Thomas D.
New Features:
1) A new 'run' command has been implemented. This command allows you
to run an arbitrary command in the context of the generated
script.
shorewall[6][-lite] run <command> [ <parameter> ... ]
Normally, <command> will be a function declared in lib.private.
2) A DNSAmp action has been added. This action matches recursive UDP
DNS queries. The default disposition is DROP which can be
overridden by the single action parameter (e.g, 'DNSAmp(REJECT)'
will reject these queries). Recursive DNS queries are the basis for
'DNS Amplification' attacks; hence the action name.
Thank you for using Shorewall,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
