Firewall Builder Release Notes


Version 1.0.1


GUI v1.0.1 requires API library libfwbuilder version 0.10.5

Summary

This version incorporated fixes for bugs filed in January and February of 2002, as well as some new features. Among other additions comes support for OpenBSD pf and ipf (ipfilter) packet filters. See below for details.

We started working on the policy management framework which will provide mechanism for policy installation on the remote firewall. The GUI will authenticate to the daemon running on the remote firewall using private/public key pair. This version comes with experimental support for the key and certificate management in "Options" dialog. The rest will become available in stages as we are nearing 1.1

We also started Windows port of Firewall Builder. Parts of the code already work on win32 platform, however some more work needs to be done to complete it.

In anticipation of wide distribution of gcc3.0 we've done extensive testing to make sure both libfwbuilder and fwbuilder compile well with gcc 3.0 and g++ 3.0

What is new in the API library



What is new in the GUI



Policy compiler for OpenBSD PF

This is initial release of the policy compiler for OpenBSD pf. In this compiler for the first time we use our new compiler framework classes. Code has been tested on OpenBSD 3.0

Code status: beta

What is supported:

What is not supported (yet)



Policy compiler for ipf (ipfilter)

This is initial release of this version of policy compiler for ipf. This code is based on our new compiler framework classes. We tested on FreeBSD 4.4 with ipf v1.3.20

Code status: beta

What is supported:

What is not supported (yet)



OS where Firewall Builder can configure networking parameters in the kernel

Firewall Builder can generate script to configure network parameters for certain OS. These are:

At the moment we can configure only few parameters for each OS, however we plan to expand the list in the future.

Supported OS and firewall platforms

Operating Systems Firewall Builder has been ported to:

OS Compiler GUI and policy compilers
Linux gcc 2.96 compile and work
Linux gcc 3.0 compile but do not link, need more testing
Solaris 8 gcc 2.95 compile and work
FreeBSD   compile, need more testing
OpenBSD   not tested
Win32   compile but need more work

Matrix of supported OS and firewall platforms:

OS Firewall
iptables ipf pf
Linux (kernel 2.4.x) yes n/a n/a
Solaris n/a yes n/a
FreeBSD 4.4 (4.5) n/a yes n/a
OpenBSD 3.0 n/a yes yes



Bugs fixed in GUI:



Bugs fixed in iptables policy compiler: