Changelog for firehol-3.1.7-17.4.noarch.rpm :

* Mon Feb 26 2024 Dominique Leuenberger - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN.
* Tue Sep 14 2021 Johannes Segitz - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_firehol.service.patch
* harden_fireqos.service.patch
* Thu Dec 31 2020 Mia Herkt - firehol (3.1.7) - 2020-12-31
* FireHOL - Fix dhcpv6 example to say dhcpv6 #438 - blacklist - add \"nolog\" option - blacklist - reject with tcp-reset for outbound TCP connections - firehol.service - Use `firehol start` for ExecReload= - Don\'t drop icmpv6 rules with FIREHOL_RULESET_MODE optimal #372
* FireQos - workaround for cases where \"-ifb\" name gets truncated
* Mon Aug 13 2018 9+suseAATTcirno.systems- Drop useless _service firehol (3.1.6) - 2018-08-13
* FireHOL - Boot startup fix #260 - docker_bridge helper #114 - Allow newer iptables #264 - Log blocked/dropped packets in synproxy, mac, connlimit, fragments, ... - Fix wait for netfilter ready when using namespaces - Fast activation fixes #272 - Allow matching DSCP CS0; fixes #288 - Allow DROP_INVALID with any action (e.g. REJECT) - Add option FIREHOL_ACCEPT_OUTPUT_UNMATCHED_TCP_RST
* FireQOS - Fix status to works with newer iproute; fixes #317
* Link-Balancer - linkdown: routes cannot be added or deleted whilst marked invalid #211
* Update-Ipsets - Various fixes, including #266 #265 - List additions, updates and removals - Minor enhancements
* Sun Sep 17 2017 9AATTcirno.systemsfirehol (3.1.5) - 2017-09-17
* FireHOL - Fix some links in documentation
* FireQOS - Insert a rawmark mask if none specified
* Update-Ipsets - Support serving ipset files from local web server - Lower pressure on github
* Sun Aug 20 2017 9AATTcirno.systemsfirehol (3.1.4) - 2017-08-20
* FireHOL - Google hangouts port range fix #235 - Fix hashlimit option names #223 - Documentation improvements, marks #184 and cthelper #94 - Allow negating interface in blacklist #143
* FireQOS - DSCP match fixes #248 - TCP match fix #249 - Improve docs on using act_connmark to match ingress marked traffic #231
* Update-Ipsets - Added various lists, removed discontinued ones - Include URL in user agent string in #217 - Relax umask to allow stats collection by netdata #221
* Sun Jul 09 2017 jengelhAATTinai.de- Avoid duplicate expansion of %service_
*- firehol-doc subpackage ought to be noarch
* Wed Mar 29 2017 9AATTcirno.systemsfirehol (3.1.3) - 2017-02-17
* FireHOL - Be more strict when detecting address ranges Fixes #199 where hostnames such as x-2.example.com are incorrectly identified as ranges.
* Common - Create relative links to binaries, which prevents errors when installing with DESTDIR other than / Fix for #178 and #201 proposed by AATTkneeke firehol (3.1.2) - 2017-02-05
* FireHOL - Include user policies in chains before handling orphans. Fixes NFS client where FIREHOL_DROP_ORPHAN_TCP_
* options are in force. - Do not allow server/client statements without any effect on the firewall; #193 - Saved firewall contents made reproducible by always zeroing counters and removing the dates from comments
* FireQOS - Example had an ambiguous shebang which has been removed
* Common - Running \"make check\" now exits non-zero if a test failed or none ran - Various copyright updates - Fixed pull requests from external repositories; these would previously fail to build on Travis
* Thu Feb 02 2017 9AATTcirno.systems- 3.1.1