Changes in 5.1.4 Final

1)  Update release documents.

2)  Clean up introduction to shorewall-rules(5).

3)  Clarify LOGFORMAT in shorewall[6].conf(5) and
    shorewall[6]-zones(5).

4)  Add BLACKLIST to the IPv6 actions.std file.

Changes in 5.1.4 RC 1

1)  Update release documents.

2)  Add PERL_HASH_SEED option.

Changes in 5.1.4 Beta 2

1)  Update release documents.

2)  Correct validation of string interface options.

3)  Correct handling of IPv6 tunnel-src and tunnel-dst.

4)  Documentation cleanup.

Changes in 5.1.4 Beta 1

1)  Update release documents.

2)  Unify Actions

3)  Report invocation site when generating ?info and ?warning messages

4)  Add IPv6 UPnP support.

5)  ?reset of action variable now sets $parmsmodified.

6)  Clean up column/value pair editing.

Changes in 5.1.3.1

1)  Update release documents.

2)  Correct typo in BLACKLIST_DEFAULT settings

3)  Fix 'add+' handling.

4)  Correct two-interface snat file.

Changes in 5.1.3 Final

1)  Update release documents.

2)  Quote 'none' AND SMURF_LOG_LEVEL in _DEFAULT settings.

3)  Correct IPv6 Multicast action.

4)  Tabify new actions.

5)  Add Multicast to the deprecated A_Drop and A_Reject actions.

6)  Correct log message from IPv6 Multicast action.

Changes in 5.1.3 RC 2

1)  Update release documents.

2)  Enclose _LEVEL and _DEFAULT settings in quotes during update.

3)  Expand variables during .conf processing except when updating.

Changes in 5.1.3 RC 1

1)  Update release documents.

2)  Re-add Multicast to IPv6 samples.

3)  Add dropInvalid to IPv6 samples.

Changes in 5.1.3 Beta 2

1)  Update release documents.

2)  Clear firewall on Debian systemd 'stop'.

3)  Correct tcp-reset handling.

4)  Implement PROTO=tcp:!syn.

5)  Quote "$LOG_LEVEL" in shorewall[6].conf samples.

6)  Modify rejNotSyn and dropNotSyn to use the two preceding changes.

7)  Merge 5.1.2.2/3 fixes.

8)  Quote $LOG_LEVEL in shorewall[6].conf samples.

9)  'reload' documentation corrections.

10) Set TC_ENABLED=Shared in IPv6 samples.

11) Remove Multicast from IPv6 policy actions.

Changes in 5.1.3 Beta 1

1)  Update release documents.

2)  Installer/uninstaller changes from Matt Darfeuille.

3)  Replace determinism sorts with PERL_HASH_SEED.

4)  Correct recent compiler directives WRT omitting

5)  Eliminate builtin actions.

Changes in 5.1.2.1

1)  Update release documents.

2)  Document fix for 'show action allowinUPdP'.

3)  Document fix for logging in BLACKLIST.

Changes in 5.1.2

1)  Update release documents.

Changes in 5.1.2 RC 1

1)  Update release documents.

2)  Fix LOG_LEVEL

3)  Fix allowMcast

4)  Make 'show action' work (sort of) with builtin actions.

Changes in 5.1.2 Beta 2

1)  Update release documents.

2)  Change policy actions.

3)  Fix IPv6 dropBcasts.

4)  Add LOG_LEVEL option.

5)  Separate broadcast and multicast handling

Changes in 5.1.2 Beta 1

1)  Update release documents.

2)  Implement default action lists.

3)  Manpage updates.

Changes in 5.1.0 Final.

1)  Update release documents.

Changes in 5.1.1 RC 1

1)  Update release documents.

2)  Make BALANCE_PROVIDERS default the setting of USE_DEFAULT_RT.

3)  Add BLACKLIST policy

4)  Add BLACKLIST action

5)  Implement ?REQUIRE

6)  Implement 'show action <action>'

7)  Implement 'section' action option

8)  Embed BLACKLIST macro logic into the BLACKLIST action.

Changes in 5.1.1 Beta 2

1)  Update release documents.

2)  Replace USE_DEFAULT_RT=Exact with BALANCE_PROVIDERS=No.

3)  Handle optional interfaces correctly in process_a_provider().

Changes in 5.1.1 Beta 1

1)  Update release documents.

2)  Catch routefilter/provider conflicts.

3)  Set 'logmartians' along with 'routefilter'.

4)  Implement USE_DEFAULT_RT=Exact.

Changes in 5.1.0.1

1)  Update release documents.

2)  Correct Shorewall6-lite .service file

3)  Propagate PAGER setting to -lite systems.

Changes in 5.1.0 Final

1)  Update release documents.

2)  Ignore SUBSYSLOCK when $SERVICEDIR is non-empty

3)  Correct splitting of IP(6)TABLES options.

4)  Allow compact IPv6 addresses in IP6TABLES() parameters.

Changes in 5.1.0 RC 2

1)  Update release documents.

2)  Eliminate use of 'echo' escape sequences

3)  Update kernel module files

Changes in 5.1.0 RC 1

1)  Update release documents.

2)  Move the action files into their own directory.

3)  Add the 'show ipsec' command.

4)  Remove rawpost support.

5)  Add Stateful IPv6 netmapping

Changes in 5.1.0 Beta 2

1)  Update release documents.

2)  Fatal error on empty action file and presense of a file with
    the same name as the action.

3)  Use 'ip xfrm' to dump SPD and SAD

4)  Create CLI symlinks

5)  Correct intra-zone processing in policies.

Changes in 5.1.0 Beta 1

1)  Update release documents.

2)  Unify the CLI

3)  Extend SOURCE/DEST syntax in the rules files

4)  Remove CHAIN_SCRIPT support.

5)  Avoid needless duplicate action chains.

6)  Implement support for NFQUEUE CPU Fanout.