Firewall Builder Release Notes
Version 1.1.2
Released 01/18/04
GUI and compilers v1.1.2 require API library libfwbuilder version 1.0.2
Summary
For those who wish to build from source, instructions are outlined
in the document "Install and Build instructions" on our web site http://www.fwbuilder.org/archives/cat_installation.html
This version is stable, future changes to will be limited and
will only include bug fixes.
This is a bugfix release.
New features
- implemented Feature Req. 859327: "add table support to pf
module". Compiler opens groups created in the GUI, possibly
regroups objects and in the final step assembles objects in the
tables. Using tables is optional and is controlled by the
checkbox in the "Firewall" tab of the firewall object
dialog.
Updates in the GUI
- updated French translation (Jean-Michel Poure jm@poure.com)
Bugs fixed in the build environment and package configuration files
- bug #859028: "configure script incorrectly determines
ext. symbol prefix". Mac OS X does not need '_' in front of
function names that are dynamically loaded from external modules
at a run time.
- bug #862642: "fink packages do not work for 10.3". Changes
have been made to the fink .info files to make libfwbuilder and
fwbuilder build on Panther.
- bug #855896: "do not quote RPM Group names". Group names in
RPM .spec files should not be in quotes.
- FreeBSD port "security/fwbuilder" uses standard configure,
ltmain.sh and other GNU autoconf/automake scripts generated on
Linux. This helped to get rid of the anoying problem when the
port won't build if port devel/automake was not installed
because it could not find aclocal. It was simple to just use
configure generated on Linux than figure out a reliable way to
regenerate it as a part of the port build process.
Bugs fixed in the API
- Bug #868278: "fwbuilder GUI crashes while saving data to
file on FreeBSD". The crash happened in the DTD validation
routine xmlValidateDocument when fwbuilder was working with
libxml2 v2.6.4.
Bugs fixed in iptables policy compiler fwb_ipt:
- bug #862743: "a bug in a code for a dynamic, wildcard
interfaces". A '$' character was missing in a shell code
fragment that cycles over the list of dynamic wildcard
interfaces and creates iptables rule for each of them.
- fwb_ipt allows using action Reject with an option "TCP RST"
with Custom service objects, rather than only with TCP
services.