diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/changelog.txt shorewall-lite-5.0.9/changelog.txt --- shorewall-lite-5.0.8/changelog.txt 2016-04-23 06:42:06.883009000 -0700 +++ shorewall-lite-5.0.9/changelog.txt 2016-06-04 14:49:09.991764034 -0700 @@ -1,3 +1,49 @@ +Changes in 5.0.9 Final + +1) Update release documents + +2) Document DOCKER fix. + +Changes in 5.0.9 RC 1 + +1) Update release documents + +2) Cross-check core version during compilation. + +3) Cross-check Shorewall6 version during IPv6 compilation. + +4) Turn on AUTOMAKE in the sample configurations. + +5) Date/time in 'date' format. + +Changes in 5.0.9 Beta 2 + +1) Update release documents + +2) Improve compile date/time implementation + +3) Add VERBOSE_MESSAGES option. + +4) Allow NFLOG in the mangle file + +Changes in 5.0.9 Beta 1 + +1) Update release documents + +2) Fix handling of optional provider with no IP address + +3) Correct typos in the Events article + +4) Implement standard error messages in the CLI + +5) Include compile time and date in the output of 'status' + +6) Apply Matt Darfeuille's patch set. + +Changes in 5.0.8 Final + +1) Update release documents + Changes in 5.0.8 RC 2 1) Update release documents. @@ -16,9 +62,7 @@ 8) Add an ESTABLISHED,RELATED rule for o => docker0 -9) ?WARNING and ?INFO - -10) Warning on optional provider in the DUPLICATE column +9) Add ?WARNING and ?INFO directives. Changes in 5.0.8 RC 1 @@ -28,7 +72,7 @@ 3) Correct many issues with save/restore of ipsets. -4) Update DHCP article (refresh -> restart) +4) Update DHCP article (refresh -> reload) 5) Correct start command's handling of AUTOMAKE. diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/configure shorewall-lite-5.0.9/configure --- shorewall-lite-5.0.8/configure 2016-04-23 06:42:06.883009000 -0700 +++ shorewall-lite-5.0.9/configure 2016-06-04 14:49:09.995767303 -0700 @@ -28,7 +28,7 @@ # # Build updates this # -VERSION=5.0.8 +VERSION=5.0.9 case "$BASH_VERSION" in [4-9].*) diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/configure.pl shorewall-lite-5.0.9/configure.pl --- shorewall-lite-5.0.8/configure.pl 2016-04-23 06:42:06.883009000 -0700 +++ shorewall-lite-5.0.9/configure.pl 2016-06-04 14:49:09.999770573 -0700 @@ -31,7 +31,7 @@ # Build updates this # use constant { - VERSION => '5.0.8' + VERSION => '5.0.9' }; my %params; diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/install.sh shorewall-lite-5.0.9/install.sh --- shorewall-lite-5.0.8/install.sh 2016-04-23 06:42:06.875009000 -0700 +++ shorewall-lite-5.0.9/install.sh 2016-06-04 14:49:09.983757495 -0700 @@ -22,7 +22,7 @@ # along with this program; if not, see . # -VERSION=5.0.8 +VERSION=5.0.9 usage() # $1 = exit status { @@ -495,7 +495,7 @@ # Install the Man Pages # -if [ -d manpages ]; then +if [ -d manpages -a -n "$MANDIR" ]; then cd manpages mkdir -p ${DESTDIR}${MANDIR}/man5/ ${DESTDIR}${MANDIR}/man8/ diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/manpages/shorewall-lite.8 shorewall-lite-5.0.9/manpages/shorewall-lite.8 --- shorewall-lite-5.0.8/manpages/shorewall-lite.8 2016-04-23 06:43:30.695009000 -0700 +++ shorewall-lite-5.0.9/manpages/shorewall-lite.8 2016-06-04 14:50:44.705115345 -0700 @@ -2,12 +2,12 @@ .\" Title: shorewall-lite .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.78.1 -.\" Date: 04/23/2016 +.\" Date: 06/04/2016 .\" Manual: Administrative Commands .\" Source: Administrative Commands .\" Language: English .\" -.TH "SHOREWALL\-LITE" "8" "04/23/2016" "Administrative Commands" "Administrative Commands" +.TH "SHOREWALL\-LITE" "8" "06/04/2016" "Administrative Commands" "Administrative Commands" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/manpages/shorewall-lite.conf.5 shorewall-lite-5.0.9/manpages/shorewall-lite.conf.5 --- shorewall-lite-5.0.8/manpages/shorewall-lite.conf.5 2016-04-23 06:43:29.315009000 -0700 +++ shorewall-lite-5.0.9/manpages/shorewall-lite.conf.5 2016-06-04 14:50:43.107810845 -0700 @@ -2,12 +2,12 @@ .\" Title: shorewall-lite.conf .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.78.1 -.\" Date: 04/23/2016 +.\" Date: 06/04/2016 .\" Manual: Configuration Files .\" Source: Configuration Files .\" Language: English .\" -.TH "SHOREWALL\-LITE\&.CO" "5" "04/23/2016" "Configuration Files" "Configuration Files" +.TH "SHOREWALL\-LITE\&.CO" "5" "06/04/2016" "Configuration Files" "Configuration Files" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/manpages/shorewall-lite-vardir.5 shorewall-lite-5.0.9/manpages/shorewall-lite-vardir.5 --- shorewall-lite-5.0.8/manpages/shorewall-lite-vardir.5 2016-04-23 06:43:29.863009000 -0700 +++ shorewall-lite-5.0.9/manpages/shorewall-lite-vardir.5 2016-06-04 14:50:43.780360108 -0700 @@ -2,12 +2,12 @@ .\" Title: shorewall-lite-vardir .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.78.1 -.\" Date: 04/23/2016 +.\" Date: 06/04/2016 .\" Manual: Configuration Files .\" Source: Configuration Files .\" Language: English .\" -.TH "SHOREWALL\-LITE\-VAR" "5" "04/23/2016" "Configuration Files" "Configuration Files" +.TH "SHOREWALL\-LITE\-VAR" "5" "06/04/2016" "Configuration Files" "Configuration Files" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/releasenotes.txt shorewall-lite-5.0.9/releasenotes.txt --- shorewall-lite-5.0.8/releasenotes.txt 2016-04-23 06:42:06.883009000 -0700 +++ shorewall-lite-5.0.9/releasenotes.txt 2016-06-04 14:49:09.991764034 -0700 @@ -1,7 +1,7 @@ ---------------------------------------------------------------------------- - S H O R E W A L L 5 . 0 . 8 + S H O R E W A L L 5 . 0 . 9 ---------------------------- - A p r i l 2 4 , 2 0 1 6 + J u n e 0 4 , 2 0 1 6 ---------------------------------------------------------------------------- I. PROBLEMS CORRECTED IN THIS RELEASE @@ -14,7 +14,265 @@ I. P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E ---------------------------------------------------------------------------- -1) This release includes defect repair through Shorewall 5.0.7.2. +1) This release contains defect repair through Shorewall 5.0.8.2. + +---------------------------------------------------------------------------- + I I. K N O W N P R O B L E M S R E M A I N I N G +---------------------------------------------------------------------------- + +1) On systems running Upstart, shorewall-init cannot reliably secure + the firewall before interfaces are brought up. + +2) The 'enable', 'reenable' and 'disable' commands do not work + correctly in configurations with USE_DEFAULT_RT=No and optional + providers listed in the DUPLICATE column. + +3) Previously, if: + + - DOCKER=Yes + - docker0 was defined in /etc/shorewall/interfaces + - Docker was not running + + then Shorewall would fail to start with an error similar to this + + iptables-restore v1.4.21: Couldn't load target `DOCKER': + No such file or directory + Error occurred at line: 29 + Try `iptables-restore -h' or + 'iptables-restore --help' for more information. + ERROR: /sbin/iptables-restore Failed. + + This has been corrected such that Shorewall starts correctly under + these conditions. + +---------------------------------------------------------------------------- + I I I. N E W F E A T U R E S I N T H I S R E L E A S E +---------------------------------------------------------------------------- + +1) The file 'lib.core' has been renamed 'lib.runtime' to more + accurately reflect the file's role. + +2) The CLI now produces helpful error messages rather than simply + dumping out the complete usage syntax. + +3) The 'status' and 'version -a" command outputs now include the time + and date when the current firewall script was compiled. + + This feature implements a new 'info' command that is recognized by + the compiled script. That command produces output similar to the + following: + + compiled Thu Apr 28 14:18:58 2016 by Shorewall version 5.0.9 + + Note 1: The time and date of compilation will only be displayed + after the firewall script has been compiled using this or a later + Shorewall release. + + Note 2: Information about the current firewall script is only + displayed by the 'version -a' command when the command is executed + by root. + + Caution: If you execute 'shorewall compile', a subsequent 'status' + command will display the compilation information for the newly + compiled script and not for the one that was used to instantiate + the running firewall configuration. Note that the compilation + date/time, in this case, will be later than the started date/time: + + Example: + + State:Started Sun Apr 24 12:22:18 PDT 2016 from /etc/shorewall/ + (/var/lib/shorewall/firewall compiled Thu Apr 28 14:18:58 2016 + by Shorewall version 5.0.9) + +4) The ?INFO and ?WARNING directives added in Shorewall 5.0.8 include + the current filename and line number in the generated message. That + behavior can be suppressed by using ?INFO! AND ?WARNING! + instead. Additionally, the default behavior can be changed by + setting VERBOSE_MESSAGES=No in shorewall[6].conf. In that case, + including the exclaimation point causes the filename and line + number to be included. + +5) NFLOG(...) is now supported in the mangle files. + +6) The compiler now checks the version of the installed Shorewall-core + and issues a warning message if there is a mis-match. + + Example (folded to fit within 72 columns): + + WARNING: Version Mismatch: Shorewall-core is version 5.0.8.2, + while the Shorewall version is 5.0.9-Beta2 + + When compiling for IPv6, the Shorewall6 version is also verified + and a similar warning is issued in the case of a mismatch. + +7) The sample configurations now have AUTOMAKE enabled. + +8) Full date and time strings generated by the compiler are now in + 'date' format rather than Perl's 'localtime' format. + +---------------------------------------------------------------------------- + I V. M I G R A T I O N I S S U E S +---------------------------------------------------------------------------- + +1) If you are migrating from Shorewall 4.4.x or earlier, please see + http://www.shorewall.net/pub/shorewall/4.5/shorewall-4.5.21/releasenotes.txt + +2) It is strongly recommended that you first upgrade your installation + to a 4.6 release >= 4.6.12 prior to upgrading to Shorewall 5.0. + + Once you are on the Shorewall 4.6 release: + + - shorewall update -A + + If you also run Shorewall6: + + - shorewall6 update -A + + These steps are necessary because Shorewall 5.0: + + - Does not contain support for the 'tcrules' and 'tos' files -- + existing 'tcrules' and 'tos' files must be converted to an + equivalent set of 'mangle' file entries. + + - Does not contain support for the 'blacklist' file -- it must + be converted to an equivalent 'blrules' file. + + - Does not contain support for the 'notrack' file -- it must be + converted to an equivalent 'conntrack' file. + + - Does not contain support for the 'routestopped' file -- it must + be converted to an equivalent 'stoppedrules' file. + + Note that you can run the update command(s) after you upgrade to + Shorewall 5 but your firewall will not work correctly until + you do those update(s). + +3) The following configuration options have been eliminated: + + - EXPORTPARAMS + - IPSECFILE + - LEGACY_FASTSTART + - LOGRATE * + - LOGBURST * + - WIDE_TC_MARKS * + - HIGH_ROUTE_MARKS * + - BLACKLISTNEWONLY * + + A fatal error results if those flagged with an asterisk ("*") + appear in the .conf file -- run the 'shorewall[6] update' command + to convert their settings to use supported options. + + A warning is issued if any of the rest appear in the .conf file. + 'shorewall[6] update' will drop them from the file. + +4) To make the command names more accurately reflect what they do, + several changes have been included: + + a) Beginning with this release, the 'restart' command now does a + true restart and is equivalent to a 'stop' followed by a + 'start'. + + b) The pre-5.0.0 'load' command has been renamed 'remote_start'. + + c) The pre-5.0.0 'reload' command has been renamed 'remote_reload'. + + c) The 'reload' command now performs the same function as the + pre-5.0.0 'restart' command. + + d) A 'remote_restart' command has been added to Shorewall and + Shorewall6 to allow a remote 'restart' after updating the + remote firewall system's compiled script. + + For those that can't get used to the idea of using 'reload' in + place of 'restart', a RESTART option has been added. The + option defaults to 'reload' for compatibility with earlier + releases. If set to 'restart', then the 'restart' command + does a true restart (stop followed by start) + +5) While the WORKAROUNDS setting is still present in the + shorewall[6].conf file: + + a) It's default setting has been changed to No. + + b) All workarounds for old distributions have been eliminated. + +6) Beginning with Shorewall 5.0.0, all macros and actions are assumed + to be FORMAT-2. FORMAT-1 macros and actions are no longer supported + and will be silently processed as if they were FORMAT-2. For most + macros and actions, this change will be of no concern, but may cause + compilation errors in rare cases. + + To review, FORMAT-1 actions have the following columns: + + TARGET + SOURCE + DEST + PROTO + DEST PORT(S) + SOURCE PORT(S) + RATE + USER/GROUP + MARK + + FORMAT-1 macros have these columns: + + TARGET + SOURCE + DEST + PROTO + DEST PORT(S) + SOURCE PORT(S) + RATE + USER/GROUP + + FORMAT-2 actions and macros, on the other hand, have: + + TARGET + SOURCE + DEST + PROTO + DEST PORT(S) + SOURCE PORT(S) + ORIGINAL DEST + RATE + USER/GROUP + MARK + CONNLIMIT + TIME + HEADERS (Only valid for IPv6) + SWITCH + HELPER + + To summarize, if your action or macro only uses the first 6 + columns (which most do), then it will process fine as + FORMAT-2. Otherwise, it must be modified to place specifications in + the proper columns. + +7) COMMENT, FORMAT and SECTION lines must now begin with a question + mark ("?"). The 'update' command will change all bare COMMENT, + FORMAT and SECTION lines to include the question mark. + +8) Beginning with Shorewall 5.0.8, the IPv6 default treatment of Auth + (TCP 113) is now consistent with IPv4; nothing special is done with + these requests, so they are simply logged and dropped. + + IMPORTANT: If you want to continue to reject Auth requests, you + can do so by chaning your DROP_DEFAULT setting to make the second + parameter REJECT. For example, if you currently have: + + DROP_DEFAULT=Drop + + you can change it to: + + DROP_DEFAULT="Drop(-,REJECT)" + +---------------------------------------------------------------------------- + V. N O T E S F R O M O T H E R 5 . 0 R E L E A S E S +---------------------------------------------------------------------------- + P R O B L E M S C O R R E C T E D I N 5 . 0 . 8 +---------------------------------------------------------------------------- + +1) This release includes defect repair through Shorewall 5.0.7.2 2) If a physical interface name was used in the INTERFACE column of an entry in /etc/shorewall/masq, then previously a Perl diagnostic was @@ -147,34 +405,8 @@ restart safe-* -16) In the last several releases, the following Known Problem - Remaining has been listed: - - The 'enable', 'reenable' and 'disable' commands do now work - correctly in configurations with USE_DEFAULT_RT=No. - - That description is a bit broader than is necessary and is now - restricted to the case where an optional provider is listed in the - DUPLICATE column (see below). Additionally, the compiler now - generates a warning in that case: - - WARNING: An optional provider (xxxx) is listed in the - DUPLICATE column - enable and disable will not work - correctly on that provider - ----------------------------------------------------------------------------- - I I. K N O W N P R O B L E M S R E M A I N I N G ----------------------------------------------------------------------------- - -1) On systems running Upstart, shorewall-init cannot reliably secure - the firewall before interfaces are brought up. - -2) The 'enable', 'reenable' and 'disable' commands do not work - correctly in configurations with USE_DEFAULT_RT=No and optional - providers listed in the DUPLICATE column. - ---------------------------------------------------------------------------- - I I I. N E W F E A T U R E S I N T H I S R E L E A S E + N E W F E A T U R E S I N 5 . 0 . 8 ---------------------------------------------------------------------------- 1) Support for later versions of miniupnpd has been added in the form @@ -248,8 +480,8 @@ ?INFO The is written to STDERR prefaced by the directive name - (WARNING or INFO) followed by a colon (':'). It is also written to - the STARTUP_LOG if: + (WARNING or INFO) followed by a colon (':'). It is also written to the + STARTUP_LOG if: - A STARTUP_LOG has been configured - The command is start, try, restart, reload, refresh or one of the @@ -259,164 +491,6 @@ aborted. ---------------------------------------------------------------------------- - I V. M I G R A T I O N I S S U E S ----------------------------------------------------------------------------- - -1) If you are migrating from Shorewall 4.4.x or earlier, please see - http://www.shorewall.net/pub/shorewall/4.5/shorewall-4.5.21/releasenotes.txt - -2) It is strongly recommended that you first upgrade your installation - to a 4.6 release >= 4.6.12 prior to upgrading to Shorewall 5.0. - - Once you are on the Shorewall 4.6 release: - - - shorewall update -A - - If you also run Shorewall6: - - - shorewall6 update -A - - These steps are necessary because Shorewall 5.0: - - - Does not contain support for the 'tcrules' and 'tos' files -- - existing 'tcrules' and 'tos' files must be converted to an - equivalent set of 'mangle' file entries. - - - Does not contain support for the 'blacklist' file -- it must - be converted to an equivalent 'blrules' file. - - - Does not contain support for the 'notrack' file -- it must be - converted to an equivalent 'conntrack' file. - - - Does not contain support for the 'routestopped' file -- it must - be converted to an equivalent 'stoppedrules' file. - - Note that you can run the update command(s) after you upgrade to - Shorewall 5 but your firewall will not work correctly until - you do those update(s). - -3) The following configuration options have been eliminated: - - - EXPORTPARAMS - - IPSECFILE - - LEGACY_FASTSTART - - LOGRATE * - - LOGBURST * - - WIDE_TC_MARKS * - - HIGH_ROUTE_MARKS * - - BLACKLISTNEWONLY * - - A fatal error results if those flagged with an asterisk ("*") - appear in the .conf file -- run the 'shorewall[6] update' command - to convert their settings to use supported options. - - A warning is issued if any of the rest appear in the .conf file. - 'shorewall[6] update' will drop them from the file. - -4) To make the command names more accurately reflect what they do, - several changes have been included: - - a) Beginning with this release, the 'restart' command now does a - true restart and is equivalent to a 'stop' followed by a - 'start'. - - b) The pre-5.0.0 'load' command has been renamed 'remote_start'. - - c) The pre-5.0.0 'reload' command has been renamed 'remote_reload'. - - c) The 'reload' command now performs the same function as the - pre-5.0.0 'restart' command. - - d) A 'remote_restart' command has been added to Shorewall and - Shorewall6 to allow a remote 'restart' after updating the - remote firewall system's compiled script. - - For those that can't get used to the idea of using 'reload' in - place of 'restart', a RESTART option has been added. The - option defaults to 'reload' for compatibility with earlier - releases. If set to 'restart', then the 'restart' command - does a true restart (stop followed by start) - -5) While the WORKAROUNDS setting is still present in the - shorewall[6].conf file: - - a) It's default setting has been changed to No. - - b) All workarounds for old distributions have been eliminated. - -6) Beginning with Shorewall 5.0.0, all macros and actions are assumed - to be FORMAT-2. FORMAT-1 macros and actions are no longer supported - and will be silently processed as if they were FORMAT-2. For most - macros and actions, this change will be of no concern, but may cause - compilation errors in rare cases. - - To review, FORMAT-1 actions have the following columns: - - TARGET - SOURCE - DEST - PROTO - DEST PORT(S) - SOURCE PORT(S) - RATE - USER/GROUP - MARK - - FORMAT-1 macros have these columns: - - TARGET - SOURCE - DEST - PROTO - DEST PORT(S) - SOURCE PORT(S) - RATE - USER/GROUP - - FORMAT-2 actions and macros, on the other hand, have: - - TARGET - SOURCE - DEST - PROTO - DEST PORT(S) - SOURCE PORT(S) - ORIGINAL DEST - RATE - USER/GROUP - MARK - CONNLIMIT - TIME - HEADERS (Only valid for IPv6) - SWITCH - HELPER - - To summarize, if your action or macro only uses the first 6 - columns (which most do), then it will process fine as - FORMAT-2. Otherwise, it must be modified to place specifications in - the proper columns. - -7) COMMENT, FORMAT and SECTION lines must now begin with a question - mark ("?"). The 'update' command will change all bare COMMENT, - FORMAT and SECTION lines to include the question mark. - -8) Beginning with Shorewall 5.0.8, the IPv6 default treatment of Auth - (TCP 113) is now consistent with IPv4; nothing special is done with - these requests, so they are simply logged and dropped. - - IMPORTANT: If you want to continue to reject Auth requests, you - can do so by chaning your DROP_DEFAULT setting to make the second - parameter REJECT. For example, if you currently have: - - DROP_DEFAULT=Drop - - you can change it to: - - DROP_DEFAULT="Drop(-,REJECT)" - ----------------------------------------------------------------------------- - V. N O T E S F R O M O T H E R 5 . 0 R E L E A S E S ----------------------------------------------------------------------------- P R O B L E M S C O R R E C T E D I N 5 . 0 . 7 ---------------------------------------------------------------------------- diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/shorewall-lite.spec shorewall-lite-5.0.9/shorewall-lite.spec --- shorewall-lite-5.0.8/shorewall-lite.spec 2016-04-23 06:42:06.879009000 -0700 +++ shorewall-lite-5.0.9/shorewall-lite.spec 2016-06-04 14:49:09.987760765 -0700 @@ -1,5 +1,5 @@ %define name shorewall-lite -%define version 5.0.8 +%define version 5.0.9 %define release 0base %define initdir /etc/init.d @@ -109,8 +109,14 @@ %doc COPYING changelog.txt releasenotes.txt %changelog -* Tue Apr 19 2016 Tom Eastep tom@shorewall.net -- Updated to 5.0.8-0base +* Thu May 12 2016 Tom Eastep tom@shorewall.net +- Updated to 5.0.9-0base +* Thu May 05 2016 Tom Eastep tom@shorewall.net +- Updated to 5.0.9-0RC1 +* Thu Apr 28 2016 Tom Eastep tom@shorewall.net +- Updated to 5.0.9-0Beta2 +* Mon Apr 18 2016 Tom Eastep tom@shorewall.net +- Updated to 5.0.9-0Beta1 * Fri Apr 15 2016 Tom Eastep tom@shorewall.net - Updated to 5.0.8-0RC2 * Mon Apr 11 2016 Tom Eastep tom@shorewall.net diff -Naurdw -X /home/teastep/shorewall/tools/build/exclude.txt shorewall-lite-5.0.8/uninstall.sh shorewall-lite-5.0.9/uninstall.sh --- shorewall-lite-5.0.8/uninstall.sh 2016-04-23 06:42:06.879009000 -0700 +++ shorewall-lite-5.0.9/uninstall.sh 2016-06-04 14:49:09.983757495 -0700 @@ -26,7 +26,7 @@ # You may only use this script to uninstall the version # shown below. Simply run this script to remove Shorewall Firewall -VERSION=5.0.8 +VERSION=5.0.9 PRODUCT=shorewall-lite Product="Shorewall Lite"