Share

OpenFWTK

File Release Notes and Changelog

Release Name: Release 2.0

Notes:
It is the first really public release of OpenFWTK, a
successor to Trusted Information System's firewall toolkit.
Notable features are:

* True application layer filter (popular technology known 
as "DPI" - Deep Packet Inspection or "SPF" - Stateful 
Packet Filtering - is not. It's just an ugly hack.)

* Unified pluggable (which means you may separate 
questionable security code like antivirus and antispam 
engines from the firewall host) content inspection for 
most used protocols (http, smtp, ftp, pop3, nntp are 
supported at the moment)

* NAC (Network Admission Control) - like functionality for 
web browsers - you may define fine-grained internet access 
policy based on browser identification.

* Improved proxy development API so you may develop custom 
applications with ease.

Changes: 12-Oct-2007 - file refreshed to include some minor updates (authadduser.sh script, nntp-gw to display proxy name correctly in proc title and a few compiler warnings). No functionality or configuration is affected.