mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-20 18:27:16 +01:00
172 lines
5.6 KiB
HTML
172 lines
5.6 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<html>
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
|
|
<link rel="stylesheet" type="text/css" href="http://www.fwbuilder.org/pages/fwbuilder.css">
|
|
<title>Release Notes 2.0.2</title>
|
|
</head>
|
|
|
|
<body>
|
|
<h1> Firewall Builder Release Notes </h1>
|
|
<br>
|
|
<h2> Version 2.0.2 </h2>
|
|
<br>
|
|
<p>
|
|
Released 08/31/04
|
|
<br>
|
|
<b>GUI and compilers v2.0.2 require API library libfwbuilder version 2.0.2</b>
|
|
<br>
|
|
<h2>Summary </h2>
|
|
<p>
|
|
Firewall Builder GUI v2.0.2 is a maintenance release that includes
|
|
fixes for bugs discovered since 2.0.1 has been released.
|
|
<p>
|
|
<b>For those who wish to build from source, instructions are outlined
|
|
in <a
|
|
href="http://www.fwbuilder.org/archives/cat_installation.html">"Install
|
|
and Build instructions"</a></b>
|
|
|
|
|
|
<h2>General</h2>
|
|
<ul>
|
|
<li>Updated FreeBSD ports, tested on 5.3-BETA</li>
|
|
</ul>
|
|
<p>
|
|
|
|
|
|
<br>
|
|
<br>
|
|
<h2>New standard objects</h2>
|
|
<ul>
|
|
<li>added new service objects to the Standard objects library:
|
|
"xmas scan" (old object renamed "xmas scan - full"), rsync,
|
|
distcc, cvspserver, cvsup, afp, whois, bgp, radius and radius
|
|
acct, SSDP and UPnP.</li>
|
|
</ul>
|
|
<p>
|
|
|
|
|
|
<br>
|
|
<br>
|
|
<h2>New template objects</h2>
|
|
<ul>
|
|
<li>added template firewall objects for Linksys firewall and a
|
|
web server.</li>
|
|
</ul>
|
|
<p>
|
|
|
|
<br>
|
|
<br>
|
|
<h2>New features in policy compiler for PF</h2>
|
|
<ul>
|
|
<li>Implemented support for all timeout settings in pf:
|
|
tcp.first,tcp.opening,tcp.established,
|
|
tcp.closing,tcp.finwait,tcp.closed,udp.first,udp.single,udp.multiple,
|
|
icmp.first,icmp.error,other.first,other.single,other.multiple,
|
|
including adaptive timeout scaling options adaptive.start and
|
|
adaptive.end</li>
|
|
|
|
<li>Added support for options "max", "max-src-nodes" and
|
|
"max-src-states" in pf. These allow to limit number of
|
|
concurrent state table entries ("max"), number of source
|
|
addresses that can simultaneously have state table entries
|
|
("max-src-nodes") and number of simultaneous state entries per
|
|
source address ("max-src-states") per rule.</li>
|
|
</ul>
|
|
<p>
|
|
|
|
|
|
<br>
|
|
<br>
|
|
<h2>Bugs fixed in libfwbuilder API:</h2>
|
|
<ul>
|
|
<li>: added element physAddress to list of child elements of
|
|
Library (bug #1011617)</li>
|
|
|
|
<li>bug #1012733: "configure --libdir=DIR will be ignored at
|
|
installation". Needed to use macro _libdir to specify target
|
|
directory for libraries. Used it in configure, qmake.in,
|
|
libfwbuilder-config-2 and a .spec file. Code should compile and
|
|
install in correct place on 64-bit systems.</li>
|
|
</ul>
|
|
<p>
|
|
|
|
<br>
|
|
<br>
|
|
<h2>Bugs fixed in GUI:</h2>
|
|
<ul>
|
|
<li>bug #1019691: "040829 nightly build doesn't add paths for
|
|
linksys"</li>
|
|
|
|
<li>bug #1013177: "deleting multiple hosts causes crash"
|
|
</li>
|
|
|
|
<li>bug #1009345: "Can only move one host object at a time
|
|
between libraries"</li>
|
|
|
|
<li>bug #1013018: "host OS settings" dialog is missing for
|
|
linksys. Added host OS settings dialog for
|
|
linksys/Sveasoft. Dialog provides entry fields for paths to
|
|
iptables, lsmod, modprobe, logger tools and two shell prompt
|
|
string patterns, this should help to work around changes in the
|
|
shell prompt on Linksys.</li>
|
|
|
|
<li>bug #1013022: "can not install policy script on linksts
|
|
Alchemy pre-5.2". Built-in installer uses shell prompt string
|
|
patterns configured in the host OS settings dialog for
|
|
linksys.</li>
|
|
|
|
<li>bug #1008956: "Existing .fwb file gets overwritten if has
|
|
wrong extension". If the GUI needs to rename a data file with
|
|
old extension .xml to .fwb, it checks if a file with new
|
|
extension exists and offers user a chance to choose a different
|
|
name. It also treats symlinks in a special way: if user creates
|
|
a symlink with extension .xml pointing at a file with extension
|
|
.fwb, the GUI simply follows the link and works with .fwb
|
|
file. This should work with Windows shortcuts, too. </li>
|
|
|
|
<li>bug #1013485: "File/Import should allow to import .fwb
|
|
file". Function File/Import offers a choice of .fwl, .fwb and
|
|
"all files" in the open file dialog.</li>
|
|
|
|
<li>bug #1011248: "need two xmas scan service objects". </li>
|
|
|
|
<li>bug #1013957: "incorrect NAT rule in firewall created from
|
|
template #3". The problem was caused by incorrect ip address of
|
|
interface "dmz" in the template object #3.</li>
|
|
|
|
<li>bug #1014725: "adding new ICMP types". If user created
|
|
service group with the name "ICMP", the GUI would place new ICMP
|
|
objects under this group instead of the standard folder
|
|
"ICMP". There was the same problem with other object types, too.</li>
|
|
|
|
<li>bug #1015884: "Export more than one library fails with 0
|
|
references". Export library operation failed if user exported
|
|
two libraries with groups or rules in one library referencing
|
|
objects in the other.</li>
|
|
|
|
</ul>
|
|
|
|
<br>
|
|
<br>
|
|
<h2>Bugs fixed in iptables policy compiler fwb_ipt:</h2>
|
|
<ul>
|
|
<li>bug #1005148: "MAC matching - space missing". Space was
|
|
missing between MAC address and custom service code.</li>
|
|
|
|
<li>avoiding grep in the script generated for Linksys/Sveasoft
|
|
firewall - Sveasoft Alchemy pre-5.2.3 does not have grep</li>
|
|
|
|
<li>bug #1019943: "Missing ip addresses in the rule using
|
|
interfaces"</li>
|
|
</ul>
|
|
|
|
|
|
<hr>
|
|
<!-- Created: Fri Aug 6 21:40:42 PDT 2004 -->
|
|
<!-- hhmts start -->
|
|
Last modified: Tue Aug 31 20:38:55 PDT 2004
|
|
<!-- hhmts end -->
|
|
</body>
|
|
</html>
|