From: Vincent Danen (vdanenmandrakesoft.com)
Date: Wed Sep 22 2004 - 09:30:48 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Sep 22, 2004, at 6:25 AM, Matt Parker wrote:

> Yesterday I noticed that a new package for Shorewall had found it's
> way into
> MDK update for MDK 9.1. I had loads of other non-security related
> downloads
> on there too so I decided to update it all.
>
> All seemed to be going well until it got to installing Shorewall when
> I was
> VERY DISAPPOINTED to notice that the install process shut down my
> existing
> Shorewall and didn't bring the new version back up. Because I was
> doing a
> large update, there was a good 5 or 6 minutes - my server is only a
> P166 -
> when I was without a firewall with all kinds of services exposed to the
> outside world (I had a few attempts in my log to connect to SAMBA
> during this
> period - luckily unsuccessful). As soon as everything was installed,
> only
> then did I get to restart Shorewall.
>
> This is pretty poor IMO.

The advisory for shorewall explicitly stated that you might need to
restart your firewall.

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:080

--
*Please note gpg keyid FE6F2AFD has been replaced with keyid FEE30AD4*
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C A2BC 2EBC 5E32 FEE3 0AD4}

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQFBUYyXLrxeMv7jCtQRAvHXAJ0VeoFbWR/+EXfYvLkIULLr4CL+GACfd1Ep
YS2jDQrIbYULRusnnajbnp4=
=aTO5
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]