Changelog for
SuSEfirewall2-3.6.312-1.1.noarch.rpm :
Fri Aug 15 14:00:00 2014 meissnerAATTsuse.com
- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -> systemd conversion hack (bnc#891669)
Thu Jul 31 14:00:00 2014 meissnerAATTsuse.com
- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
\"ACCEPT\" would be used a service name (bnc#889406 bnc#889555 bnc#887040)
Wed Jun 11 14:00:00 2014 mtAATTsuse.com
- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT
Tue May 27 14:00:00 2014 meissnerAATTsuse.com
- Allow incoming DHCPv6 replies, currently unlimited.
bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -> custom bnc#835677
Fri Dec 27 13:00:00 2013 meissnerAATTsuse.com
- add perl-Net-DNS requires for \"SuSEfirewall2 log\" (bnc#856705)
Wed Aug 21 14:00:00 2013 lnusselAATTsuse.de
- adjust service files so manual starts work better (bnc#819499)
Mon May 6 14:00:00 2013 cfarrellAATTsuse.com
- license update: GPL-2.0
Various GPL-2.0 (only) licensed files
Fri May 3 14:00:00 2013 meissnerAATTsuse.com
- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)
Tue Jan 29 13:00:00 2013 lnusselAATTsuse.de
- do not add dependency information about YaST2 Second Stage (bnc#800365)
Thu Jan 17 13:00:00 2013 lnusselAATTsuse.de
- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)
Thu Dec 13 13:00:00 2012 lnusselAATTsuse.de
- move to /usr, remove init scripts
Wed Dec 12 13:00:00 2012 lnusselAATTsuse.de
- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)
Tue Sep 11 14:00:00 2012 lnusselAATTsuse.de
- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)
Fri Jul 13 14:00:00 2012 lnusselAATTsuse.de
- honor FW_IPv6 setting also in debug mode (bnc#769411)
Tue Jun 19 14:00:00 2012 lnusselAATTsuse.de
- fix logging in test mode
Mon Jun 18 14:00:00 2012 lnusselAATTsuse.de
- allow icmpv6 in FW_SERVICES_
*_
*
Mon Jun 18 14:00:00 2012 lnusselAATTsuse.de
- allow ICMPv6 Multicast Listener Query (bnc#767392)
Tue May 29 14:00:00 2012 lnusselAATTsuse.de
- fix typo spotted by Frederic
Wed Jan 18 13:00:00 2012 lnusselAATTsuse.de
- assume all interface names are correct (bnc#739084)
Wed Dec 14 13:00:00 2011 lnusselAATTsuse.de
- fix forward masquerading (bnc#736205)
- compat syntax for negated options no longer works (bnc#660156, bnc#731088)
- enhance debug mode
Mon Nov 7 13:00:00 2011 lnusselAATTsuse.de
- use /sbin/rpcinfo as /usr/sbin/rpcinfo is gone (bnc#727438)
Wed Nov 2 13:00:00 2011 lnusselAATTsuse.de
- set SYSTEMD_NO_WRAP for status (bnc#727445)
Fri Oct 14 14:00:00 2011 lnusselAATTsuse.de
- fix manual rcSuSEfirewall2 stop with sytemd (bnc#717583)
Tue Oct 4 14:00:00 2011 lnusselAATTsuse.de
- fix typo (bnc#721845)
- atomic zone status writing
Sat Sep 17 14:00:00 2011 jengelhAATTmedozas.de
- Remove redundant tags/sections from specfile
Wed Sep 7 14:00:00 2011 lnusselAATTsuse.de
- sanitize FW_ZONE_DEFAULT (bnc#716013)
- add warning about iptables-batch to SuSEfirewall2-custom
- fix warning about /proc/net/ip_tables_names not readable
- don\'t install input rules for interfaces in default zone
- Add hook fw_custom_after_finished
- update FAQ (bnc#694464)
- clean up overrides when stopping the firewall (bnc#630961)
- change default FW_LOG_ACCEPT_CRIT to \"no\"
- allow redir without port specification
- make FW_SERVICES_{REJECT,DROP}_
* take precedende before ACCEPT (bnc#671997)
- fix zonein and zoneout parameters
- fix reverse direction of forwarding rules (bnc#679192)
Tue Feb 1 13:00:00 2011 lnusselAATTsuse.de
- introduce rpcusers file to allow statd to run as non-root
(bnc#668553)
Wed Jan 19 13:00:00 2011 lnusselAATTsuse.de
- add zonein and zoneout parameters for FW_FORWARD
- fix typos
Mon Jan 10 13:00:00 2011 lnusselAATTsuse.de
- don\'t start in runlevel 4 by default (bnc#656520)
- cut off long zone names (bnc#644527)
- fix and enhance output of log command (bnc#663262)
Thu Dec 2 13:00:00 2010 lnusselAATTsuse.de
- don\'t unload rules when using systemd
Tue Nov 16 13:00:00 2010 lnusselAATTsuse.de
- list some known rpc services as Should-Start
- don\'t filter outgoing packets at all
- fix an example (bnc#641907)
- fix status check in SuSEfirewall2_init (bnc#628751)
Mon Aug 16 14:00:00 2010 lnusselAATTsuse.de
- don\'t use fillup anymore as it keeps corrupting the config file
(bnc#340926)
Tue Jun 29 14:00:00 2010 lnusselAATTsuse.de
- remove \"batch committing...\" message
- read defaults from separate file
- warn if highports config options are set
- finally drop \'highports\' misfeature
- remove kernel ipv6 module detection (bnc#617033)
- silence warning about default zone (bnc#616841)
- SuSEfirewall2-open: don\'t add values multiple times
- Use multiprotocol xt_conntrack
Mon May 31 14:00:00 2010 lnusselAATTsuse.de
- only directories in /sys/class/net are real interfaces (bnc#609810)
Fri Mar 19 13:00:00 2010 lnusselAATTsuse.de
- add entry about drbd to FAQ
- update docu
- implement FW_BOOT_FULL_INIT
Tue Feb 16 13:00:00 2010 lnusselAATTsuse.de
- use new versioning scheme after switch of repo to git
- update and rebuild docu
- remove really old rc.config conversion code from spec file
Tue Sep 15 14:00:00 2009 lnusselAATTsuse.de
- fix spelling error in sysconfig file (bnc#537427)
- polishing of log drop policy (bnc#538053)
* drop multicast packets silently
* separate drop rule for broadcast packets at end of chain
* only consider NEW udp packets as critical
* don\'t log INVALID packets as critical
Fri Aug 21 14:00:00 2009 lnusselAATTsuse.de
- implement runtime override of interface zones
- allow disabling NOTRACK rules on lo (bnc#519526)
Fri Jul 17 14:00:00 2009 lnusselAATTsuse.de
- remove chkconfig calls (bnc#522268)
Thu Jul 9 14:00:00 2009 lnusselAATTsuse.de
- add note about use as bridging firewall
- allow to set FW_ZONE_DEFAULT via config file
- deprecate fw_custom_before_antispoofing and
fw_custom_after_antispoofing, use fw_custom_after_chain_creation
instead
Tue Jun 9 14:00:00 2009 lnusselAATTsuse.de
- add note that ulog doesn\'t work with IPv6 (bnc#442756)
- fix version number in help text
- allow service files to specify kernel modules and allow related packets
- silence an error from bash if a service config file is not available (bnc#487870)
- better wording for BROADCAST in template
- update firewall hook script (patch by Marius)
