Zorp unofficial / News: Recent posts

It features tests and fixes a python2.3-related crash.

Iptables-utils is a utility to make changing iptables rules more safe. You can test the new config in a way which makes locking yourself out much harder.

The zorp-unoff release contains a severely enhanced version of iptables-test, a manual page, new installation procedure, and several other fixes and enhancements.

There is a new whitepaper, titled "Firewalls and information flow control policy" in the whitepaper section in English and Hungarian.

The FAQ section has been expanded.

zorp-unoff site.

You can now find a whitepapers section in the zorp-unoff homepage. This contains some documents about the inner workings of Zorp.

There is also some new answers in the Frequently Asked Questions.

There are new test and development versions of tproxy are released.
Here are the announcements:
-----------------------------------------------
Almost six months has passed since the release of TProxy 1.2.0, and a
couple of problems were found in that release. Unfortunately, some of
those problems could not be fixed trivially, so that before releasing a
stable 1.2.1 version, extensive testing would be needed. This test
version is an up-to-date snapshot of the current code, with all known
important problems fixed:... read more

BalaBit have released 2.0.9 of zorp, and 2.0.26.24 of
zorplibll. If you add a "-1" to them, you have figured out the version number of the corresponding unofficial release.

With the unofficial version you can now get the DN of the authenticated ssl connection in pssl, and define the place of policy.boot. The latter makes it possible to run tests in build time. If you try hard, you can find some very basic ones, and I expect to improve them with time.

The winner of the bughunting contest is Ago.
He will soon get his mug and t-shirt.

The Zorp-Unoff bughunting contest has been extended. You can submit your
bug, feature request, patch, etc. until 2004-03-15.

BalaBit Inc. has kindly donated a t-shirt in addition to the mug for the best bughunter.

You can see the mug at http://zorp-unoff.sourceforge.net/img/bogre.png .

How to participate in the contest?

It is most easy. You should file a bug report or a feature request at
http://sourceforge.net/tracker/?func=add&group_id=93515&atid=604562
The topic of the request or report can be anything related to the
zorp-unoff project: a question or difficulty you have reached dealing with
any software you can find here, any unclear or inaccurate point in the
documentation. Anything you have difficulty in dealing with the
zorp-unoff project,... read more

We are proud to announce the first zorp-unoff bug hunting contest.
The trophy of the contest is a nice Zorp mug (what else?),
which you can see at http://zorp-unoff.sourceforge.net/img/bogre.png .

How to participate in the contest?

It is most easy. You should file a bug report or a feature request at
http://sourceforge.net/tracker/?func=add&group_id=93515&atid=604562
The topic of the request or report can be anything related to the
zorp-unoff project: a question or difficulty you have reached dealing with
any software you can find here, any unclear or inaccurate point in the
documentation. Anything you have difficulty in dealing with the
zorp-unoff project,... read more

The site have an even newer and better design,
thanks to Shane Handley.

There are new items in the FAQ, mostly due to
the good questions of Mick Bauer and nice
answers of Peter Hltzl.

Thank you all!

The Official Unofficial Zorp project is proud to announce zorp
version 2.0.8-1 before the official announce of 2.0.8 upstream
release.

The upstream changes contain several enhancements on locking
and logging, and support for session limits.

The unofficial version contains those enhancements and
fixes which did not yet get their way back to the official release.

You can find the filltable pages at
http://zorp-unoff.sourceforge.net/Filltable/index.html

There is a security target (work in progress) and a daily
snapshot released right now.

I still have no idea of the meaning of the word "aestethic",
but could steal some tips from the design of the Gentoo
site.

Now we have news on the left bar.

Important news for all Zorp users from BalaBit:

TProxy 1.2.0 has been released. This is the first the release of the
1.2 stable branch, with substantial changes since 0.25. From the API
standpoint, it is compatible with 0.25. There are no new features, only
bugfixes and internal changes. More important internal changes:

- new connection tracking entry deletion code, which does not require
scanning the whole connection tracking hash
- a completely rewritten /proc/net/tproxy interface
- hooks into the network stack at more appropriate points (right after
TCP/UDP unhash)... read more

Zorp is the most advanced firewall software you can get. Its unprecedented flexibility and versatibility enables you to defend your network from attack scenarios the average firewall admin thought no network security device can parry.

This minor version works around a bug introduced by the NPTL code, and reported against zorp as release-critical. (NPTL does not like stack limit not being dividable by four).... read more

There is a filltable utility. It is to make possible to delegate parts of packet filter configuration.

I guess it mostly works, but the documentation is a bit lacking. You can only find it in the GNU arch repository yet.

Yes, now we have a help wanted page also.

Zorp is the most advanced firewall software you can get. Its unprecedented flexibility and versatibility enables you to defend your network from attack scenarios the average firewall admin thought no network security device can parry.

The new upstream version have minor bugfixes in the http and ftp proxies and in the core, and minor feature enhancements in the ftp proxy and the core. The unofficial version have minor cosmetic and packaging fixes.

The Zorp Low-level Library is a collection of all-purpose network
functions.

The new release have some minor bugfixes, better thread handling and debugging.

This version have some minor bug- and packaging fixes compared to the upstream.

Now we have a FAQ and some configuration examples.

Wondered how to filter URLs with Zorp?
Need a simple way to describe complex address ranges?
Look up the faq at http://zorp-unoff.sourceforge.net//faq.html