changelog

Linux系统下著名的个人防火墙

2004-08-26  Tomas Junnonen  <[e-mail]>

	* src/netfilter-script.c, scriptwriter.c:
	- Re-enabled DHCP server and ICMP filter functionality
	(ICMP filtering GUI is broken for now until Preferences rewrite)

2004-08-23  Tomas Junnonen  <[e-mail]>

	* firestarter.schemas.in, src/policyview.c, preferences.h:
	- Added option to instantly apply any changes to policy

2004-08-22  Tomas Junnonen  <[e-mail]>

	* src/firestarter.c, netfilter-script.c, policyview.c, preferences.c,
	  scriptwriter.c/h, wizard.c:
	- Split firewall.sh into firestarter.sh control script and
	  firewall main script
	- Script can now be started, stopped and halted like an init script
	- The Firestarter configuration is now saved to
	  /etc/firestarter/configuration separate of the main script
	- The firewall script is no longer custom generated based on choices
	  but instead branches at runtime
	- The firewall can now be refreshed in smaller chunks for rapid
	  policy changes
	- Moved to g_spawn API for script actions

2004-08-21  Tomas Junnonen  <[e-mail]>

	* src/firestarter.c, gui.c, hitview.c/h, logread.c, menus.c/h,
	  policyview.c/h, statusview.c/h:
	- New action for canceling the events list reload operation
	- Stateful buttons on toolbar: Stop/Start firewall and Reload/Cancel
	  events.
	- Actions enabled only when applicable in current context
	* src/hitview.c:
	- Added header above events list for consistency

2004-08-20  Tomas Junnonen  <[e-mail]>

	* src/gui.c/h, hitview.c, menus.c/h, policyview.c/h:
	- New menus and toolbars based on the GTK 2.4 Action API
	- One toolbar per tab in the interface

2004-08-19  Tomas Junnonen  <[e-mail]>

	* +policyview.c/h, -src/modrules.c/h, -ruleview.c/h,
	  firestarter.schemas.in, src/gui.c/h, hitview.c, menus.c,
	  netfilter-script.c, parse.c, preferences.h, scriptwriter.c,
	  statusview.c:
	- New Policy tab replaces old Rules tab
	- Major changes to firewall script to implement the new policy system
	- Split sysctl from the firewall script
	- Blocking broadcast by default

2004-08-12  Tomas Junnonen  <[e-mail]>

	* src/netfilter-script.c:
	- Deprecated STOP variable, LR & LD chains renamed LS
	* src/firestarter.h, menus.c, modrules.c/h, netfilter-script.c
	  parse.c/h, ruleview.c, scriptwriter.c, util.c:
	- Removed option to explicitly block hosts or ports, new actions
	  to directly disable logging of events on specific host and port
	  matches in the LS chain accomplish the same goal much more
	  intuitively

2004-08-10  Tomas Junnonen  <[e-mail]>

	* src/statusview.c/h:
	- Mark closed connections in a different color

2004-08-08  Tomas Junnonen  <[e-mail]>

	* src/hitview.c/h:
	- "Serious" hit classification
	- Colors for different event types: Normal, Broadcast and Serious

2004-08-06  Tomas Junnonen  <[e-mail]>

	* configure.in
	- Bump GTK+ requirement to 2.4.0
	* configure.in:
	- Fixed intltool support files not being added by autogen.sh
	* src/hitview.c/h:
	- Read the system log asynchronously during the reload operation
	  using gnome-vfs. Patch by Rene Vahtel.
	* src/hitview.c/h, logread.c/h:
	- Timeout fired syslog reading is done asynchronously. Patch by
	  Rene Vahtel.
	* configure.in:
	- Added GNOME-VFS requirement

2004-08-05  Tomas Junnonen  <[e-mail]>

	* +src/statusview.c/h, +src/xpm/icon_start_*, +src/xpm/icon_stop_*,
	  firestarter.c/h, gui.c, hitview.c, logread.c, menus.c, modrules.c,
	  preferences.c, scriptwriter.c, service.c, tray.c/h, wizard.c:
	- New tab in main interface: Status
	   - Firewall status indicator
	   - Event counters
	   - Network statistics
	   - Active connections view
	- Hits and Rules renamed Events and Policy respectively
	- New firewall start and stop state icons
	* -postinstall:
	- The postinstall script has been deprecated

2004-07-03  Tomas Junnonen  <[e-mail]>

	* +src/dhcp-server.c/h, firestarter.c, netfilter-script.c, menus.c,
	  preferences.c/h, ruleview.c, scriptwriter.c/h, util.c/h,
	  wizard-choices.c, wizard.c/h, firestarter.schemas.in:
	- New feature of configuring a DHCP server in the wizard for local
	  networks when using NAT
	- Minor cleanups in surrounding code

2004-07-02  Tomas Junnonen  <[e-mail]>

	* src/hitview.c:
	- Reset redundancy filter when clearing hitlist
	* src/parse.c, service.c/h:
	- The ICMP type field of log entries is now converted into
	  service names
	* src/preferences.c, wizard.c/h:
	- Removed the option to manually specify the internal IP range

2004-06-18  Tomas Junnonen  <[e-mail]>

	* src/firestarter.c, gui.c/h, scriptwriter.c:
	- Added new --start-hidden command line option
	- Added error dialog for when iptables is missing from kernel

2004-06-17  Tomas Junnonen  <[e-mail]>

	* src/netfilter-script:
	- Reworked module loader, no more error messages when
          netfilter system compiled into kernel statically
	- Netfilter capabilities checks for iptables, logging, nat,
	  mangle, ipv4optsstrip support. Other candidates: dnat, snat
        - General cleanups, added timestamp to generated script
	* src/utils.c: Removed explicit modprobing of ip_tables module

2004-05-15  Tomas Junnonen  <[e-mail]>

	* scripts/non-routables:
	- Following netblocks have been allocated to APNIC:
	  58/8 and 59/8

2004-05-03  Tomas Junnonen  <[e-mail]>

	* src/scriptwriter.c, netfilter-script.c:
	- Added support for user pre and post scripts in main firewall
	  script.
	* firestarter.schemas.in:
	- Added missing /apps/firestarter/firewall/deny_packets GConf key

2004-04-28  Tomas Junnonen  <[e-mail]>

	* src/scriptwriter.c:
	- Fixed location of dhcpcd files on Slackware (patch by Rene Vahtel)

2004-04-26  Tomas Junnonen  <[e-mail]>

	* src/netfilter-script.c:
	- Reversed check for ipt_ipv4optsstrip, only create rule if
	  module is successfully loaded
	- Added ipt_ipv4optsstrip to module autoloader
	- Added /dev/null redirects for optional modules not likely
	  to be installed: bsd_comp, ppp_deflate, ipt_ipv4optsstrip
	- Turned off martian address logging, until some solution to
	  to the console flooding can be found

2004-04-25  Tomas Junnonen  <[e-mail]>

	* firestarter.desktop.in: Added more data to desktop entry
	* pixmaps/firestarter.png, src/xpm/logo.png: New icon and logo
	* src/firestarter.c, gui.c/h, scriptwriter.c/h, wizard.c:
	Force the wizard to run if the firewall script is empty.
	Fixes an issue where a script of size 0 can be left after a package
	uninstall followed by a reinstall.
	* src/util.c:
	- Fixed syslog location check still using gnome_conf and not GConf
	- Removed Slackware specific syslog location (patch by Rene Vahtel)
	* src/netfilter-script.c:
	- The INVALID match now works for outgoing packets, so
	  we jigger the rulesets a bit for them (Paul Drain)
	- Add the IPV4OPTSSTRIP target for PREROUTING (Paul Drain)
	- Moved the policy changes to the start of the script, and make
	  the FORWARD chain default to block, even if you do not use
	  multiple networks (Paul Drain)
	- Removed the UNCLEAN matches, which no longer exist under 2.6.x
	  and whose functionality will be replaced by tighter matching in
	  the SANITY chain (Paul Drain)
	- Removed LRTCP target, this should be applied to the SANITY
	  chain when deciding upon policy for NEW connections, not 'anything
	  that matches -p tcp' (Paul Drain)
	- Removed all rules using LRTCP
	- Fixed some syntax problems with if clauses
	- Fixed Catch All Rule not logging packets
	- Fixed policy on input, output and forward
	- Removed confusing and unused STOP=DENY|REJECT statement
	  STOP is now always either LD or LR

2004-04-24  Tomas Junnonen  <[e-mail]>

	* src/netfilter-script.c:
	Split non-routable tests into a separate chain, fixes
	problem with communicating with machines on LAN.
	(patch by Peter Harvey).

2004-04-23  Tomas Junnonen  <[e-mail]>

	* src/netfilter-script.c:
	Set FIN timeout to 30 seconds, fixed keepalive comment
	(patch by Manuel J. Galan Moreno).
	* src/menus.c, firestarter.schemas.in.h:
	Fixed two typos (Bug 140056)
	
2004-04-03  Tomas Junnonen  <[e-mail]>

	* scripts/non-routables:
	Following netblocks have been allocated by IANA:
	[70|83|84|85|86|87|88]/8
	* src/netfilter-script.c:
	- TTL matching on the OUTBOUND match should be done after
	packets have been marked as valid, not before.
	(patch by Paul Drain).	

2004-04-02  Tomas Junnonen  <[e-mail]>

	* src/preferences.c/h, src/firestarter.c:
	Added check to ensure proper gconf schema is installed
	* src/util.c:
	"Sombody else's problem" filter now uses external device
	IP instead of IP resolved from hostname
	* src/netfilter.c:
	Lowered log level to keep hits from being echoed on console
	* src/scriptwriter.c:
	Set default path in script hook, fixes pppd problems (Boris Huisgen)

2004-04-01  Gareth Owen  <[e-mail]>

	* configure.in: Added en_GB to ALL_LINGUAS

2004-03-20  Guntupalli Karunakar  <[e-mail]>

        * configure.in: Added "pa" (Punjabi) to ALL_LINGUAS.

2004-02-28  Adam Weinberger  <[e-mail]>

	* configure.in: Added 'en_CA' (Canadian English) to ALL_LINGUAS.

2004-02-01  Robert Sedak  <[e-mail]>

        * configure.in: Added "hr" (Croatian) to ALL_LINGUAS.

2004-01-13  Laurent Dhima  <[e-mail]>

	* configure.in: Added "sq" to ALL_LINGUAS.

2003-12-18  Tomas Junnonen <[e-mail]>

	* postinstall:
	- Fixed kernel detection (closes bug 123837)
	- Removed PAM code, uses the new external files

2003-08-12  Tomas Junnonen <[e-mail]>

	* firestarter.spec.in, firestarter.pam, firestarter.console:
	- New spec file from Phillip Compton (from the Fedora project)
	- Split pam files from spec

2003-07-29  Tomas Junnonen <[e-mail]>

	* src/util.c: Fixed linux 2.6 kernels not being treated as
	netfilter capable, patch by Mark Bidewell

2003-07-12  Tomas Junnonen <[e-mail]>

	* src/tray.c: Fixed Firestarter crash in KDE3 when contents
	of system tray changes, patch by Hetfield

2003-06-26  Miloslav Trmac  <[e-mail]>

	* configure.in: Added cs (Czech) to ALL_LINGUAS.

2003-06-24  Tomas Junnonen <[e-mail]>

	* src/netfilter-script.c: Garbage catchers for all external
	file readers
	* src/service.c: Update list of known services (Brian Hurley)
	* src/netfilter-script.c,preferences.c/h,wizard-choices.c,wizard.c/h:
	Added PPTP as a system service in the wizard (Brian Hurley)

2003-06-23  Tomas Junnonen <[e-mail]>

	* scripts/non-routables, src/netfilter-script.c:
	Moved list of non-routable networks to an external file
	* src/firestarter.c,netfilter-script.c,preferences.c/h,util.c:
	Always autodetect system tool paths if needed, removed preference
	setting to force detection
	* src/util.c:
	Detect Slackware and use /var/log/syslog instead of messages

2003-05-20  Danilo Šegan  <[e-mail]>

	* configure.in: Added "sr" and "sr@Latn" to ALL_LINGUAS.

2003-03-06  Tomas Junnonen <[e-mail]>

	* src/preferences.c:
	  Fixed deny/reject setting not working
	  Toggles no longer instantly update on gconf db changes
	* src/wizard.c:
	  ToS and ICMP filtering is no longer shown in the wizard, only
	  in the preferences
	* src/netfilter-script.c:
	  Fixed comments in resolv.conf causing parsing errors

2003-03-04  Tomas Junnonen <[e-mail]>

	* src/util.c: Fix segfault when resolving names, from Olivier Abad

2003-02-17  Abel Cheung  <[e-mail]>

	* configure.in: Don't generate schemas file here, otherwise it's not
	  translated.
	* Makefile.am: Add desktop rule, and remove some already distributed
	  files from EXTRA_DIST.
	* firestarter.desktop: --> firestarter.desktop.in

2003-02-17  Abel Cheung  <[e-mail]>

	* configure.in: Added "lv" to ALL_LINGUAS.

2003-02-07  Tomas Junnonen <[e-mail]>

	* src/firestarter.c,gui.c,hitview.c,menus.c,netfilter-script.c
	preferences.c,ruleview.c,scriptwriter.c,util.c,wizard-choices.c,
	wizard.c:
	Ported settings system to GConf
	* Makefile.am, configure.in, firestarter.schemas.in:
	Added Firestarter configuration schema file
	* src/netfilter-script.c,netfilter-script.h,preferences.c,
	scriptwriter.c,scriptwriter.h,wizard.c:
	Allow regeneration of scripts from preferences, without the wizard.
	* src/firestarter.c, scriptwriter.c:
	Added command line option to regenerate scripts

2003-01-26  Tomas Junnonen <[e-mail]>

	* src/netfilter-script.c:
	Fixed "unary operator expected" error for empty lines in resolv.conf

2003-01-25  Tomas Junnonen <[e-mail]>

	* src/modrules.c, src/preferences.c, src/wizard.c:
	Do not restart the firewall when making changes to rules or
	preferences in a stopped state.

	* src/hitview.c, src/logread.c:
	Shorten the log line identification pattern to allow metalog
	and syslog-ng entries to work.

	* src/firestarter.c:
	Fixed the command-line help output not being translated properly

2003-01-23

	Firestarter enters the GOME CVS. 
	See ChangeLog-0.9.1 for earlier entries.