Re: [Security-Discuss] MDK Update And Shorewall

On Sep 22, 2004, at 6:25 AM, Matt Parker wrote:

> Yesterday I noticed that a new package for Shorewall had found it's 
> way into
> MDK update for MDK 9.1. I had loads of other non-security related 
> downloads
> on there too so I decided to update it all.
>
> All seemed to be going well until it got to installing Shorewall when 
> I was
> VERY DISAPPOINTED to notice that the install process shut down my 
> existing
> Shorewall and didn't bring the new version back up. Because I was 
> doing a
> large update, there was a good 5 or 6 minutes - my server is only a 
> P166 -
> when I was without a firewall with all kinds of services exposed to the
> outside world (I had a few attempts in my log to connect to SAMBA 
> during this
> period - luckily unsuccessful). As soon as everything was installed, 
> only
> then did I get to restart Shorewall.
>
> This is pretty poor IMO.

The advisory for shorewall explicitly stated that you might need to 
restart your firewall.

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:080

-- 
*Please note gpg keyid FE6F2AFD has been replaced with keyid FEE30AD4*
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}