release prep

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a045a3a4eba6a2eceafb653ec221f3ca9decebe3..7de1bb151771b62f882fcff9a66712814864a475 100644 (file)
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,11 @@
+##2015-08-25 - Supported Release 1.7.1
+###Summary
+
+This is a bugfix release to deprecate the port parameter. Using the unspecific 'port' parameter can lead to firewall rules that are unexpectedly too lax. It is recommended to always use the specific dport and sport parameters to avoid this ambiguity.
+
+####Bugfixes
+- Deprecate the port parameter
+
 ##2015-07-28 - Supported Release 1.7.0
 ###Summary
 

diff --git a/README.markdown b/README.markdown
index f2b46a0bd9b5943bb3a68a4e2f335ea9f7016e3f..0a0807f233d506a0fc01593f8e5ba59bb3227aad 100644 (file)
--- a/README.markdown
+++ b/README.markdown
@@ -621,7 +621,7 @@ firewall { '999 this runs last':
 
 * `pkttype`: Sets the packet type to match. Valid values are: 'unicast', 'broadcast', and'multicast'. Requires the `pkttype` feature.
 
-* `port`: *DEPRECATED* The destination or source port to match for this filter (if the protocol supports ports). Will accept a single element or an array. For some firewall providers you can pass a range of ports in the format: 'start number-end number'. For example, '1-1024' would cover ports 1 to 1024.
+* `port`: *DEPRECATED* Using the unspecific 'port' parameter can lead to firewall rules that are unexpectedly too lax. It is recommended to always use the specific dport and sport parameters to avoid this ambiguity. The destination or source port to match for this filter (if the protocol supports ports). Will accept a single element or an array. For some firewall providers you can pass a range of ports in the format: 'start number-end number'. For example, '1-1024' would cover ports 1 to 1024.
 
 * `proto`: The specific protocol to match for this rule. This is 'tcp' by default. Valid values are:
   * 'tcp'

diff --git a/metadata.json b/metadata.json
index 97627232a6db6a5a6895be4d2724bc4f3db4f50a..e1ac5e0fc71cb73d4580f112ddd496271a9f567a 100644 (file)
--- a/metadata.json
+++ b/metadata.json
@@ -1,6 +1,6 @@
 {
   "name": "puppetlabs-firewall",
-  "version": "1.7.0",
+  "version": "1.7.1",
   "author": "Puppet Labs",
   "summary": "Manages Firewalls such as iptables",
   "license": "Apache-2.0",