1
1
Fork
You've already forked fwup
0

  • 20041231 Stable

    raforg released this 2004年12月31日 06:40:15 +01:00 | 0 commits to main since this release 

    - Updated examples/policy.* to include earlier changes to firewall.policy
- Made messages conform to Debian standards (except when on Redhat)
- Updated IANA reserved networks (2004年08月03日)
- Added update-reserved-networks script so users can update them easily
- Extracted fwprobe as a separate command from "firewall probe"
    Downloads

  • 20041215 Stable

    raforg released this 2004年12月15日 11:24:19 +01:00 | 1 commits to main since this release 

    - Added doco about perimeter networks and demilitarised zones
- Added $MASQUERADED_NETWORKS to masquerade selected internal networks
- Updated IANA reserved networks (2003年11月14日)
    Downloads

  • 20020626 Stable

    raforg released this 2002年06月26日 14:11:47 +02:00 | 2 commits to main since this release 

    - Added support for multicast sessions
- Added rejecting specific ports when policy is DENY (for inacker@informatik.uni-freiburg.de)
- Added support for PPTP server on localhost (nick@abssys.com)
- Updated URL for ip_masq_h323 module (martin@kos.li)
- Updated -Q patch for ipchains-1.3.10 (rmrpms@usa.net)
- Added REACHOUT service
- Added TACACS+ service
- Updated list of trojan ports (www.neohapsis.com, www.seifried.org)
- Removed the need for bash (LRP only has ash)
- Removed the need for awk (LRP doesn't have awk by default)
- Added migrate-policy (suggested by inacker@informatik.uni-freiburg.de)
- Added meta-firewall migrate/diff/revert
- Added more doco on SERVICES and TARGET_* variables (bs@axysdesign.com)
- Updated IANA reserved networks (20011201 - 219, 220 allocated to APNIC)
- Fixed firewall lockfile for Debian (jejc@free.fr)
- Made to work with ash, bsh, bash, ksh or (in the unlikely event) zsh
- Added installation support for more dhcp clients (i.e. pump and dhclient)
- Ported to LRP/busybox-ash (wont-i@wkh.org)
- Added "make lrpkg" (creates an LRP package after you define your policy)
- Added installation support for systems with /etc/ppp/ip-{up,down}.d
- Added "firewall reconf <config>"
- Added "firewall help"
    Downloads

  • v20010815 Stable

    raforg released this 2001年08月15日 14:35:42 +02:00 | 3 commits to main since this release 

    - Fixed bug: redirect code never executed (ckhui@school.net.hk)
- Updated IANA reserved networks (20010619 - 67, 68, 80 and 81 allocated)
    Downloads

  • 20010801 Stable

    raforg released this 2001年08月01日 06:25:38 +02:00 | 4 commits to main since this release 

    - Fixed SNMP TRAP rules (source port 161, no return packets)
- Fixed X11 client rules (dj@head-cfa.harvard.edu)
- Added X11 server rules
    Downloads

  • 20010507 Stable

    raforg released this 2001年05月07日 14:26:57 +02:00 | 5 commits to main since this release 

    - Fixed typo in policy file (OUTGOING_VNC_PORTS -> INCOMING_VNC_PORTS)
- Added PC ANYWHERE, WINDOWS TERMINAL SERVER
- Added support for chkconfig (but you must verify it for your system)
- Fixed bug: was logging all forwarded packets when FORWARDING="yes" (dos!)
- Removed installation dependency on make (cesar@rotnet.com.br)
- Added kernel config, module and software requirements doco to policy file
- Fixed tuplegram bugs, added arp support, renamed it to tcpdump-histogram
- Fixed icmp parsing and added fragment support in fwhelper
- Added centralised administration of multiple remote firewalls
    Downloads

  • 20010214 Stable

    raforg released this 2001年02月14日 04:51:11 +01:00 | 6 commits to main since this release 

    - Fixed security bug: bad tempfile creation for ipchains-Q (dynamo@ime.net)
    Downloads

  • 20010211 Stable

    raforg released this 2001年02月11日 04:50:50 +01:00 | 7 commits to main since this release 

    - Added VNC service
- Exposed $ILLEGAL_NETWORKS to policy file (for partitioning private nets)
- Added support for REDIRECT (transparent proxying)
- Updated and optimised $RESERVED_NETWORKS (bs@axysdesign.com, jshin@pantheon.yale.edu)
- Added search in $PATH for programs (bs@axysdesign.com)
- Stopped dns2ip from translating in shell comments (jshin@pantheon.yale.edu)
- Added TIME, DAYTIME services (jshin@pantheon.yale.edu)
    Downloads

  • 20000914 Stable

    raforg released this 2000年09月14日 07:55:47 +02:00 | 8 commits to main since this release 

    - Updated the ipchains url in README
- Fixed the explanation why internally initiated port forwarding
 doesn't work (in the BUGS section below) thanks to Michael Best
- Added DIALPAD, WEBPHONE, NET2PHONE, HOTTELEPHONE/WEB2CALL, NETMEETING
- Added port range forwarding in $PORTRANGEFW
- Made outgoing server dns (when masquerading) more strict
    Downloads

  • 20000601 Stable

    raforg released this 2000年06月01日 06:43:11 +02:00 | 12 commits to main since this release 

    - Added "make [un]install" support for most systems and ppp and dhcp
 (inspired by PMfirewall)
- Added the ability to recognise dangerous udp ports and block them early
 (and added the trojan cavalry (from mason) as comments in the policy file)
- Fixed bug: didn't support preferences (load sharing) when port forwarding
- Fixed bug: target names couldn't be used with identical service names
- Added support for alias port porwarding and static NAT
- Added support for "ipchains -Q" if available (twice as fast again!)
- Added patches directory to distribution: ipchains-Q and masq-demasq
- Added the ability to set ip_masq_udp_dloose for linux-2.2.15
- Fixed bug: service chains for multiple targets were added multiple times
- Added ACK and Window scans to the portscan utility (for nmap-2.53)
- Added SQUID
- Added check to ensure that BLOCK{IN|OUT|FWD} are set to DENY or REJECT
- Renamed portsummary to tuplegram and added icmp and udp support
- Fixed bug: make [un]install didn't work with recent version of bash
    Downloads