Firewall Builder Release Notes
Version 1.0.6
GUI and compilers v1.0.6 require API library libfwbuilder version 0.10.10
Summary
This is bug fix release.
For those who wish to build from source, instructions are outlined
in the document "Install and Build instructions" on our web site here
What's new
-
Added support for bridging iptables firewalls (experimental)
-
checking that data retrieved from the host via SNMP query for
sysDesc MIB variables conforms to NVT ASCII coding.
-
manual sort of tree branches is back. Automatic tree sorting
is too cumbersom and sometimes leads to unexpected "jumping"
of objects in the tree.
-
implemented sorting of objects in the tree by name or by property.
-
interface properties in the tree shows its address.
-
Gui checks if file being opened is read-only and gives a warning.
-
GUI aborts "exit" operation if changes in the file could not
be saved (this happens if file permissions do nto allow
writing or there has been an error while writing to the file)
-
added support for all ICMP types and codes assigned by IANA
here: http://www.iana.org/assignments/icmp-parameters
-
Implemented feature req. #611323 "Allow modprobe path specification"
-
Implemented feature req. #613424: consolidation of objects in a
rule. All policy compilers detect and eliminate duplicate
objects in rules
Bugs fixed in libfwbuilder API:
-
bug #605944: multicast addresses in FORWARD chain
-
bug #607380: host with no IP creates 'any' rule.
-
bug #571882: address arithmetics broken on SPARC
Bugs fixed in GUI:
-
bug #609355: Rules are not copied properly (direction was lost
when interface policy rule was copied via clipboard)
-
bug #608448: GUI crash leaving interface policy and bug
#608717: GUI crashes while dragging rules.
-
bug #609342: Problems with ISO-8859-2 letters in SNMP (now
program cleans up strings before storing them to make sure all
data conforms with UTF-8 encoding). Also now setting encoding
"utf-8" in xml file.
-
support request #609956: use name of the interface, or word
'global', to substitute macro %I in custom log prefix
-
bug #608717: GUI crash while dragging rules if main window
positioned beyond left or right screen edge
Bugs fixed in iptables policy compiler fwb_ipt:
-
bug #609052: Incorrect syntax when using time and log (missing
space between custom log prefix and "-m time")
-
bug (no number) that caused indefinite loop in case interface
or address object had empty netmask
-
bug (no number) where compiler did not process negation
properly if one of the objects in the rule element with
negation was a firewall or one of its interfaces.
-
bug (no number) where compiler failed to add "-o interface"
for SNAT or DNAT rules if virtual address was used in TSrc or
ODst (resp.)
-
Implemented feature Req. #603726 and fixed bug #614898:
bridged and dedicated dhcp.
Bugs fixed in ipfilter policy compiler fwb_ipf:
-
bug #614896: unexpected keyword ()). Compiler used to insert
extra whitespaces around the number in block
return-icmp-as-dest(3) construct.