File Release Notes and Changelog
Notes:
8138d9b46240d62eeef16ce9432d7a43 Vuurmuur-0.5.63.tar.gz
Please extract using 'gzip -cd Vuurmuur-0.5.63.tar.gz | tar xvf -'
Then read INSTALL for more information.
This package can also be used to create Debian packages for Woody and for other archs than i386.
Please see INSTALL.DEBIAN for details.
Changes:
0.5.63 (2005-04-11)
Fixed a bug with a loading a malformed traffic.log in Vuurmuur_conf
A portrange can now also be changed.
Updated the helpfile for the services.
Improved reliability of vuurmuur_log.
Fixed two possible crashcases in libvuurmuur. Thanks for the report Raldnor!
Improved the checking of the name entered when adding or renaming a host, group, network or zone. Thanks for the report Raldnor!
Fixed a bug where a MASQ rule ignored the service, and thus applied to all services.
All important modules are now on the MODULES_TO_LOAD line in the vuurmuur initscript.
'?' can now also be used to call the help screen.
Logging of blocklist violations can now be disabled.
UDP-limit and SYN-limit can now be disabled.
Files with invalid names in the backend are now silently ignored.
Vuurmuur_log no longer misses loglines added to the log while reloading.
Speeded up Vuurmuur_log reloading.
If applying the changes failed, vuurmuur_conf now prints an error and updates the status to 'warn'.
All configuration changes made in Vuurmuur_conf are now logged.
Added a nfmark option to the rules. Rules can now be marked for use with traffic shaping tools. Use 0 - 9 999 999 for accept rules, and 20 000 000 - 29 999 997 for QUEUE rules.
Because of this, the marks used with markiptstate are also changed: 29 999 998 for new,related, 29 999 999 for established.
Vuurmuur_conf now supports internationalisation, and comes with a full Dutch translation. Translators for other languages are welcome!
Vuurmuur now has a -t commandline switch that will disable the capability checking. This will asume all iptables features are supported.
Using REJECT with tcp-reset together with the protocol 'all' now works correctly, tcp connections will be reset, others result in a icmp-port-unreachable.
Fixed portfw rules with the remoteport option set. Thanks for the report Phil!
