Changelog for ferm-2.6-lp156.4.1.noarch.rpm :

* Thu Jun 03 2021 Martin Hauke - Update to 2.6 - apply $PREFIX to systemd service file during install - support netfilter targets:
* JOOL, JOOL_SIIT (out-of-tree) - updated netfilter modules:
* CT: support \"--zone-orig\", \"--zone-reply\" - fix (deferred) functions within target arguments - \"AATTpreserve\" supports regular expressions - fix negated AATTipfilter/AATTresolve - AATTresolve filters out numeric IP addresses for the wrong domain - AATTresolve allows numeric IP address with netmask prefix- Run spec-cleaner- Add source tarball signature verification
* Wed Apr 29 2020 Marcus Rueckert - update to 2.5.1 - adjust multiport splicing for port ranges - fix lazy subchain protocol propagation for all protocols - default to --fast when Getopt::Long is not installed - fix $LINE after function call - add shortcuts \"sports\", \"dports\", \"comment\" - support netfilter targets: - RTPENGINE - updated netfilter modules:
* ipv4options
* time: support \"--kerneltz\", remove \"--localtz\" - make chain name length validation an error not a warning - support empty NOERROR responses in AATTresolve - use atomic table update with ebtables - fix $TABLE and $CHAIN evaluation in multi-table/multi-chain rules - copy protocol specification to subchains only if needed - make AATTresolve dual stack - allow passing arrays to AATTcat - add function AATTjoin - call \"legacy\" xtables tools because nft based tools are incompatible
* Mon Feb 26 2018 mrueckertAATTsuse.de- update to 2.4.1 - updated netfilter modules:
* SYNPROXY: rename \"timestamps\" back to \"timestamp\"
* recent: \"--mask\" has a value
* Sun Apr 30 2017 mrueckertAATTsuse.de- update to 2.4 - support netfilter match modules:
* cgroup - updated netfilter modules:
* recent: add mask, reap - sort domains and tables in --fast output - \"AATTpreserve\" preserves existing chains - import-ferm: translate \"-f\" to \"fragment\"
* Sat Feb 04 2017 mrueckertAATTsuse.de- update to 2.3.1 - support netfilter match modules:
* devgroup
* geoip
* socket - updated netfilter modules:
* connlimit: add connlimit-upto, connlimit-saddr, connlimit-daddr
* set: add return-nomatch, update-counters, update-subcounters, packets-eq, packets-lt, packets-gt, bytes-eq, bytes-lt, bytes-gt
* SYNPROXY: rename \"timestamp\" to \"timestamps\"
* TPROXY: add on-ip - AATTresolve returns IP addresses as-is - import-ferm: Perl 5.24 compatibility
* Sun Jul 17 2016 mrueckertAATTsuse.de- update to 2.3 - rename \"realgoto\" to \"goto\" - new keyword AATTgotosubchain - new functions AATTdefined, AATTglob - support netfilter match modules:
* bpf
* connlabel
* cpu
* dst
* ipvs
* rpfilter - support netfilter targets:
* CHECKSUM
* CONNMARK: support set-xmark, nfmask, and-mark, or-mark, xor-mark
* DNPT
* HMARK
* IDLETIMER
* LED
* NFQUEUE: support queue-balance, queue-bypass, queue-cpu-fanout
* RATEEST
* SET: support timeout, exist
* SNPT
* TCPOPTSTRIP - recognize BROUTING as built-in chain (for ebtables) - check exit status of included shell commands - documentation
* fixed wrongly used quotation marks in piped AATTinclude example
* Fri Feb 19 2016 mrueckertAATTsuse.de- install the workstation example config as default /etc/ferm.conf- add /etc/ferm/ for includes to follow debian\'s example
* Fri Feb 19 2016 mrueckertAATTsuse.de- initial package