From 4f8eeb9b1f6e74294a1f36dca81ca6408708e37e Mon Sep 17 00:00:00 2001 From: Vadim Kurland Date: Fri, 9 Apr 2010 19:50:58 +0000 Subject: [PATCH] refs #1403, #1150 updated release notes --- src/res/help/en_US/release_notes_4.0.0.html | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/src/res/help/en_US/release_notes_4.0.0.html b/src/res/help/en_US/release_notes_4.0.0.html index b39d60ae3..68e2e71e0 100644 --- a/src/res/help/en_US/release_notes_4.0.0.html +++ b/src/res/help/en_US/release_notes_4.0.0.html @@ -741,22 +741,6 @@ rule sets of this object rather than in the actual firewalls. connlimit --connlimit-above" clauses for iptables.

-

- Compiler for iptables finds interface that matches AddressRange - object used in Translated Source of a NAT rule and uses it for the - "-o intf" clause. Addresses of interface can match the range - excactly or partially. Exact match is when range boundaries match - the beginning and the end of the subnet defined by the interface - address and netmask. Partial match is when one of the range - boundaries belongs to the subnet but another one does not. In this - case compiler uses interface but issues a warning. If interface has - multiple ip addresses, all of them are taken into consideration and - interface is used if at least one matches. If address range in TSrc - is wide and matches subnets of several interfaces, compiler splits - the rule and uses all of them but does not replace the range with - narrower one and still issues a warning. -

-

Option "--random" is now supported in all NAT rules (targets SNAT, DNAT, MASQUERADE)