|
|
|
|
Changelog for ufw-0.36.1-2.1.noarch.rpm :
* Wed Nov 24 2021 Alexei Podvalsky - Add 000-drop-iptables-version-detection-when-packaging.patch * Fri Sep 24 2021 Alexei Podvalsky - Update to 0.36.1: * conf/sysctl.conf: remove tcp_sack=1 and non-firewall sysctls. LP: #1884821 * src/frontend.py: add \'prepend\' to help * Makefile: base pyflakes executable on PYTHON * remove historic ChangeLog.pre-0.25 * detect-iptables: use BINPATH in mkdir * snapcraft.yaml: update libipset for focal * snapcraft.yaml: remove build-base * tests/test-smoke-snap: show the \'snap service logs\' output after enabling * install tests/test-smoke-snap in the snap * add preliminary tests/test-smoke-snap * set PYTHONPATH in snapcraft.yaml and use layout for cache dir * adjust copyright year with \'ufw version\' * output to stdout, not logger, if firewall-control is not connected * exit without error if detect-iptables fails since it will use logger * use grade: devel for now until snapd2.45 is available * use snapctl is-connected firewall-control * detect-iptables: better handle error conditions * fallback to legacy if detect() fails for any reason * add post-refresh hook to call the install hook * assumes snapd2.45 since on arm we need the *time64 syscalls * detect if should use nft or legacy * setup.py: rev to 0.37 * revert \'build-base\' change since LP needs it * ...- Drop ufw-0.35-python36.patch * Tue Jan 08 2019 alexander_naumovAATTopensuse.org- Update to version 0.36 * adds snap packaging * concurrent updates * many bug fixes * a new \'prepend\' command to better support IPS and dynamic firewalls. * Fri Dec 30 2016 mardnhAATTgmx.de- Update to version 0.35 * update check-requirements and README for python 3.5 * update unit tests to not fail when /proc/net/ * has no useful information (Closes: 797020) * update rsyslog example to use \'stop\' instead of the deprecated \'~\' (Closes: 798100) * add --rootdir and --datadir options to ufw and ufw-init to make relocatable * files owned by \'clickpkg\' are ok too * add preliminary snappy packaging * add support for comments (LP: #448503) * don\'t allow \'route delete NUM\' and suggest \'delete NUM\' instead * move user[6].rules to /etc/ufw (LP: #728128) * update README: python3 < 3.4 is no longer supported- remove Source2: ufw.service * replaced with upstream provided proper systemd-service file- add support for bash completion- minor specfile cleanup * Wed Dec 02 2015 p.drouandAATTgmail.com- Update to version 0.34 * refactor capabilities checks and only call when needed * error out early instead of tracing back with iptables errors in get_netfilter_capabilities() (LP: #1044361) * fix TypeError which somehow only manifested itself when using zh_CN * add \'reload\' to help (LP: #1059060) * check-requirements now gives iptables output on failure. Patch thanks to S. Nizio. * use conntrack instead of state module. Patch based on work by S. Nizio. (LP: #1065297) * don\'t use get_netfilter_capabilities() with ipv6 if ipv6 is disabled (LP: #1039729, LP: #1062521) * fix parse error when finding PPID (LP: #1101304) * implement before and after hooks in /etc/ufw/(before|after).init (LP: #1075975) TODO: add tests * add unit test framework and cleanup, remove dead and refactor some code * honor UFW_SKIP_CHECKS=1 environment variable with setup.py, which eases testing * tests/check-requirements: add a check for -m rt --rt-type 0 (LP: #1191197) * match simple rule syntax and don\'t allow ports with esp and ah protocols with extended rule syntax * when displaying extended rules via parser.get_command(), show \"out\" if the direction is \"out\" and there is no corresponding interface * fix return of various invalid extended rules in parser.get_command() * clarify \'limit\' command in man page (LP: #1089262) * implement route rules (ie, manage FORWARD, LP: #262421). See man page for details. This change reworked interface parsing and we now allow interfaces with \'_\' in the name (LP: #1098472) * add state RELATED,ESTABLISHED rule to ufw-before-forward in before *.rules like we do with ufw-before-input. This will only affect systems with ip forwarding enabled via sysctl * add ufw[6]-track-forward chain and handle it the same as for ufw[6]track-input and ufw[6]-track-output * document ufw[6]-track- * in README (dropped in previous commit) * fix for \'status\' not distingushing between some v4/v6 targets (LP: #1078665) * add safe icmp packets packets to ufw-before-forward in before *.rules like we do for ufw-before-input. This will only affect systems with ip forwarding enabled via sysctl * update check-requirements for python 3.3 and 3.4 * add 5269/tcp to XMPP (LP: #1327162) * fix traceback with forward rule * import new and updated Launchpad translations: - po/ar.po, po/ast.po, po/bg.po, po/bs.po, po/ca.po, po/ce.po, po/cs.po, po/da.po, po/de.po, po/el.po, po/en_AU.po, po/en_GB.po, po/es.po, po/et.po, po/fi.po, po/fr.po, po/he.po, po/hu.po, po/id.po, po/it.po, po/ja.po, po/ko.po, po/lv.po, po/nb.po, po/nl.po, po/pl.po, po/pt_BR.po, po/pt.po, po/ru.po, po/se.po, po/sk.po, po/sl.po, po/sr.po, po/sv.po, po/tl.po, po/tr.po, po/uk.po, po/ur.po, po/zh_CN.po, po/zh_TW.po * also use .lower() on translations for \'yes\' (LP: #1438647) * adjust/rearrange before6.rules for rfc4890 \'must not be blocked\' and \'should not be blocked\' (LP: #1434525, LP: #1030214) * doc/systemd.example: add service file from Ubuntu (LP: #1341083) * correctly spell qBittorrent (LP: #1273965) * update man page for app rules (LP: #1155292) * support igmp protocol (LP: #946322) * adjust testsuite for systems supporting smtp/udp (LP: #815982) * enforce that basic commands don\'t have arguments (LP: #1155250) * update command completion for --dry-run, --force, --help and route (LP: #1225666) * support gre protocol (LP: #1418879) * support ./setup.py build (LP: #819600) * doc/ufw.8: - clarify log level behavior (LP: #1461701) - add app profile syntax - add protocol support * skip profiles with invalid port declarations (LP: #1201934) * tests/check-locales: skip locales that fail to install or generate * Tue Apr 07 2015 p.drouandAATTgmail.com- Remove obsolete macros- Drop sysvinit support; ufw doesn\'t build for SLE11 anyway- Cleanup specfile- Split out translation files- Use download Url as source * Fri Nov 09 2012 johann.luceAATTwanadoo.fr-fix problem systemd move in /usr fix various warning OBS * Tue Oct 16 2012 johann.luceAATTwanadoo.fr-fix systemd tag to start automaticaly ufw * Mon Sep 17 2012 johann.luceAATTwanadoo.fr- Update in 0.33 fix dependance python-base fix lang zh_TW * Wed Apr 04 2012 johann.luceAATTwanadoo.fr- Updated in 0.31.1 fix various warning OBS add script init file for systemd
|
|
|