f1999-12-17 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* Tag: FWCTL_0_22
* fwctl(flush): Flush with warning if there is a configuration
file problem.
* Fwctl.pm(flush_chains,really_flush_chains) Added a
really_flush_chains method that can be called without
an object.
* Several: Added port forwarding support.
1999-12-16 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* IPChains/PortFW.pm: New.
* Fwctl/Services/ipsec.pm: New service module.
* Fwctl/Services/pptp.pm: New service module.
* Fwctl.pm(reset_fw): Added oth-in, oth-out and oth-fwd
chains. Protocol optimisation on the output chains wasn't
working. (Packets passed through all the chain)
* Fwctl/Services/icmp_pkt.pm: New service module.
* Fwctl/Services/udp_pkt.pm: New service module.
* Fwctl/Services/ip_pkt.pm: New service module.
* Fwctl/RuleSet.pm (constants and others): MASQ constants are
not a bit fields and added FWDMASQ and MASQNOHIGH values.
(determine_base,accept_ip_ruleset): Masquerading isn't
limited to icmp,udp and tcp protocol anymore.
1999-12-15 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* Fwctl.pm(read_aliases,pod): Added IF_REM_NETS alias
that expands to all remote network attach to an interface.
* test.pl: Print current test being run and strip
whitespace before comparing regression tests results.
* Fwctl/RuleSet.pm(accept_ip_ruleset): Handle case of
forwarding on the same interface when src and dst are on
different network.
1999-11-22 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* fwctl.init(check): Check was flushing the rules instead
of doing a check.
1999-10-20 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* Fwctl.pm (read_aliases): <IF>_NETS aliases was defined
as an array references which caused a bug in expand().
1999-10-19 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* TAG: FWCTL_0_21
* Fwctl/Services/rsh.pm: Documentation fixes.
* Fwctl/Services/redirect.pm: New service definition.
* Fwctl/Services/lpd.pm: New service definition.
* Fwctl/Services/pcanywhere.pm: New service definition.
* Fwctl/Services/hylafax.pm: Properly inherits from ftp now.
* Fwctl/Services/ping.pm (account_rules): Was calling
accept_ip_ruleset instead of acct_ip_ruleset.
* test.pl: Removed bytes and packets counters from regression test.
Added new tests.
* Several files: Network::IPv4Addr got renamed to Net::IPv4Addr.
* fwctl.logrotate: New file for logrotate.
* fwctl (main): Added flush command which resets the firewall.
* Fwctl.pm (flush_chains): Added flush_chains method which
reset the packet filters to ACCEPT everything.
(Thanks to Bernd Eckenfels <ecki@lina.inka.de>)
(global): Moved configuration under /etc rather than
/etc/sysconfig.
(read_rules): Services expect IPChains options in
$options->{options}.
* debian/: Debian packaging b Bernd Eckenfels <ecki@lina.inka.de>.
1999-09-15 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* TAG: FWCTL_0_20
* Fwctl.pm: Fixes documentation.
* README: Add instructions for non RedHat users.
1999-09-03 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* TAG: FWCTL_0_18
* Fwctl/Services/dhcp.pm Added missing rules from client ip
to all broadcast address.
* etc/rules Fixed some small errors in the
example rules file.
1999-08-23 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* TAG: FWCTL_0_17
* Fwctl.pm Forgot to increment version number.
1999-08-23 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* TAG: FWCTL_0_16
* Fwctl.pm Fixed quote inserted before commit.
1999-08-23 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* TAG: FWCTL_0_15
* Fwctl.pm(find_interface) Check first for local IP. This caused
a problem when there multiple
interface aliases on the same subnet.
1999-08-19 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* TAG: FWCTL_0_14
* etc/aliases Updated to give a more
* etc/rules complete example setup.
* etc/interfaces
* Fwctl/Services/ftp.pm ctrl_port wasn't listed
as a valid option.
Added a data_port option.
* Fwctl/Services/hylafax.pm Added HylaFAX module.
* Fwctl/Services/syslog.pm Added syslog module.
1999-07-13 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* TAG: FWCTL_0_13
* Fwctl/Services/ping.pm: Corrected masquerading error.
* test.pl: Added test for masqueraded
ping to the Internet.
1999-07-09 Francis J. Lacoste <francis.lacoste@iNsu.COM>
* TAG: FWCTL_0_12.
* Fwctl/Services/rsh.pm: Stderr is from dst to src.
* fwctl.init: Added restart and reload action.
Fixed a typo.
* Fwctl.pm (dump_acct): Add -n switch when dumping
chains to preven DNS lockup.
1999-07-05 Francis J. Lacoste <francis.lacoste@iNsu.COM>
- Completed test suite.
- TAG: FWCTL_0_11.
1999-05-29 Francis J. Lacoste <francis.lacoste@iNsu.COM>
- Internal release. Completed all features and documentation.
- Begin testing.
- Version 0.10
1999-05-15 Francis J. Lacoste <francis.lacoste@iNsu.COM>
- original version; created by h2xs 1.19