mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-19 17:57:22 +01:00
110 lines
3.4 KiB
HTML
110 lines
3.4 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<html>
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
|
|
<link rel="stylesheet" type="text/css" href="http://www.fwbuilder.org/pages/fwbuilder.css">
|
|
</head>
|
|
<body>
|
|
<h1> Firewall Builder Release Notes </h1>
|
|
<br>
|
|
<h2> Version 2.1.11 </h2>
|
|
<br>
|
|
<p>
|
|
Released 04/29/2007
|
|
<br>
|
|
<b>GUI and compilers v2.1.11 require API library libfwbuilder version 2.1.11</b>
|
|
<br>
|
|
<h2>Summary </h2>
|
|
<p>
|
|
This is bugfix release.
|
|
|
|
<p>
|
|
<b>For those who wish to build from source, instructions are outlined
|
|
in the document "Install and Build instructions" on our web site <a
|
|
href="http://www.fwbuilder.org/archives/cat_installation.html">here</a></b>
|
|
|
|
|
|
|
|
<h2>Improvements and bug fixes in the GUI</h2>
|
|
<ul>
|
|
|
|
<li>redesigned TimeService object dialog</li>
|
|
|
|
<li>minor redesign of the interface object dialog to make network
|
|
zone more prominent and easier to set when network and group
|
|
objects have long names.</li>
|
|
|
|
<li>fixed bug #1685741: "GUI crash: click on an empty part of obj
|
|
tree, then desktop"</li>
|
|
|
|
<li>fixed bug #1692411: "can't set accouting rule name (fwbuilder
|
|
2.1.11)"</li>
|
|
|
|
<li>fixed bug #1684334: "RCS should use $LOGNAME when commit"</li>
|
|
|
|
<li>fixed bug #1701971: "Enabeling test mode doent activate the
|
|
reboot interval". Checking "Test mode" checkbox in the
|
|
installer options dialog should enable widgets that configure
|
|
automatic reboot timeout.</li>
|
|
|
|
<li>fixed bug #1702830: "fwbuilder does not detect errors during
|
|
policy install". Built-in installer detects error messages
|
|
printed by iptables and iptables-restore and aborts
|
|
installation process. Summary page shown in the end reflects
|
|
this as failed install.</li>
|
|
|
|
</ul>
|
|
|
|
<h2>Improvements and bug fixes in policy compiler for iptables</h2>
|
|
<ul>
|
|
<li>Added support for --datestart and --datestop options for module
|
|
'time' in compiler for iptables</li>
|
|
|
|
<li>fixed bug #1672191: "Time limit generates unexpected iptables
|
|
command"</li>
|
|
|
|
<li>fixed bug #1695481: "compliation error with lower end
|
|
port". Before, user could enter start port range number
|
|
greater than the end port range number. Neither the GUI nor
|
|
compiler noticed this, which resulted in the incorrect
|
|
firewall configuration. This fix adds check in the GUI to not
|
|
let the user enter port ranges like that.</li>
|
|
|
|
<li>fixed bug 1699483: "hashlimit-htable-expire not set". Added GUI
|
|
controls and compiler support for hashlimit module options
|
|
"--hashlimit-name", "--hashlimit-htable-size",
|
|
"--hashlimit-htable-max", "--hashlimit-htable-expire" and
|
|
"--hashlimit-htable-gcinterval"</li>
|
|
|
|
<li>fixed bug #1703954: "Mark target in postrouting chain". Packets
|
|
that originate on the firewall should be marked in the OUTPUT
|
|
chain. According to the netfilter packet flow diagram at
|
|
http://www.shorewall.net/NetfilterOverview.html , rerouting
|
|
happens after OUTPUT hook but before POSTROUTING hook. So in
|
|
order to be able to reroute packet originated on the firewall,
|
|
they should be marked in OUTPUT</li>
|
|
|
|
</ul>
|
|
|
|
|
|
<h2>Improvements and bug fixes in policy compiler for PF</h2>
|
|
<ul>
|
|
<li>fixed bug #1674940: "if max-src-conn == 0: syntax
|
|
error". Options max-src-conn and max-src-states can not have
|
|
value '0'</li>
|
|
|
|
</ul>
|
|
|
|
<h2>Improvements and bug fixes in policy compiler for ipfilter</h2>
|
|
<ul>
|
|
<li>fixed bug #1678410: "Ipfilter compiler uses wrong keyword for
|
|
"fragment""</li>
|
|
|
|
<li>fixed bug #1676845: "lsrr option not compiling"</li>
|
|
|
|
</ul>
|
|
|
|
|
|
</body>
|
|
</html>
|