Re: [Fwbuilder-discussion] Firewall Builder 2.0.8 and what is coming

[Jeremy T. B. <jer...@un...>]

Vadim,

	If I might throw something else into the hat for the next release as
well. Given that 2.0.7 introduced a thorn in my arse with the inclusion
of the ip6tables code to set the default policy to DENY which I failed
to notice until I was trying to determine why my IPv6 traffic was
failing miserably when I rebuilt my firewall.

	Looking through the code, and my limited knowledge of OOP code design
it would seem that the groundwork has been laid out for finally adding
IPv6 support. What is the possibility of actually getting this inclusion
finally included as IPv6 support is growing. Registries are now starting
to slowly include IPv6 addresses for DNS servers and IPv6 service is
continuing to advance. the cellular 3G technology specs actually mandate
IPv6 support as I recall.

	Regards,
	Jeremy

Vadim Kurland wrote:
> 
> Hello all
> 
> First of all, I would like to introduce Illya Yalovoy who recently 
> joined the project. Illya  will work  on the GUI code. Welcome!
> 
> 
> As you probably have seen, I've released Firewall Builder 2.0.8 last 
> week. I am hoping this release will be the last in 2.0.N series . 
> Unless a critical bug is found, I will not be adding new features to 
> 2.0.N anymore so I can focus on the development for v2.1. A few open 
> bugs registered on Source Forge will be fixed in 2.1
> 
> Below is a working list of features I want to implement in 2.1 . This 
> list may change as we work on it. Please send your suggestions to the 
> list if you see a feature that you think must be in 2.1 but is not on 
> my list. I am trying to keep the list reasonable so that I can  release
> new code in a few months.
> 
> 
>  - improvements in support for iptables:
>    - support for daytime module
>    - some additional optimizations in generated code
>    - MARK target - requires a new action type and new service object 
> type to match marks
>    - support for physdev module
> 
>  - I plan on merging interface and global policies into one policy  and
> will add columns "Interface" and "Direction". Many people  requested
> this to be able to add accounting and other rules on top of  all other
> rules, both associated with interfaces and global.
> 
>  - new rule type  - a branching rule. This will be probably  implemented
> via special kind of action that defines a branch with a  user-specified
> name. This will translate into an anchor in pf and a  chain in iptables
> with corresponding name. I guess there is no way to  do this in
> ipfilter. I do not know if there is any equivalent in  ipfw, I need to
> look into it. There is no way to do this for PIX.
> 
>  - rule separators - this is just a GUI sugar. It is just a blank  rule
> that does nothing but has background color and a comment.  Comment will
> be displayed spanning all columns in the GUI.
> 
>  - few new object types:
>    - object "domain name", with dns resolution happening either at 
> compile time or at policy activation time
>    - object "address table" - a list of addresses that can be read  from
> a file or URL either at compile time or at a time of policy  activation.
> 
>  - improvements in policy installer: ability to install on multiple 
> firewalls
> 
>  - support for PIX v7.0
> 
>  - support for routing configuration
> 
> 
> 
> The order in which features will be added is not necessarily the same 
> as in the list above. For example, I already have a good patch that 
> implements support for routing configuration, so I think I'll start 
> from it.
> 
> I am adopting Linux kernel-style version numbering, that is, interim 
> working builds will have version numbers in 2.1.N series and when the 
> code becomes stable and suitable for production use, I will release  it
> as v2.2.0  I will be making beta 2.1.N releases as new features  are
> added. I will be making Linux and FeeBSD packages regularly and  Windows
> and Mac packages once in a while.
> 
> Please comment.
> 
> Thank you,
> --vk
> 
> 
> 
> 
> 
> -------------------------------------------------------
> SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
> from IBM. Find simple to follow Roadmaps, straightforward articles,
> informative Webcasts and more! Get everything you need to get up to
> speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
> _______________________________________________
> Fwbuilder-discussion mailing list
> Fwb...@li...
> https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion