onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-03-22 03:07:20 +01:00
Code Issues Releases Wiki Activity

refs #1403, #1150 updated release notes

Browse Source
This commit is contained in:
Vadim Kurland 2010-04-09 19:50:58 +00:00
parent 4bbe1c2b12
commit 4f8eeb9b1f
1 changed files with 0 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/res/help/en_US/release_notes_4.0.0.html
View File

@ -741,22 +741,6 @@ rule sets of this object rather than in the actual firewalls.
connlimit --connlimit-above" clauses for iptables.
</p>
<p>
Compiler for iptables finds interface that matches AddressRange
object used in Translated Source of a NAT rule and uses it for the
"-o intf" clause. Addresses of interface can match the range
excactly or partially. Exact match is when range boundaries match
the beginning and the end of the subnet defined by the interface
address and netmask. Partial match is when one of the range
boundaries belongs to the subnet but another one does not. In this
case compiler uses interface but issues a warning. If interface has
multiple ip addresses, all of them are taken into consideration and
interface is used if at least one matches. If address range in TSrc
is wide and matches subnets of several interfaces, compiler splits
the rule and uses all of them but does not replace the range with
narrower one and still issues a warning.
</p>
<p>
<b>Option "--random"</b> is now supported in all NAT rules (targets
SNAT, DNAT, MASQUERADE)