f1999-12-17 Francis J. Lacoste * Tag: FWCTL_0_22 * fwctl(flush): Flush with warning if there is a configuration file problem. * Fwctl.pm(flush_chains,really_flush_chains) Added a really_flush_chains method that can be called without an object. * Several: Added port forwarding support. 1999-12-16 Francis J. Lacoste * IPChains/PortFW.pm: New. * Fwctl/Services/ipsec.pm: New service module. * Fwctl/Services/pptp.pm: New service module. * Fwctl.pm(reset_fw): Added oth-in, oth-out and oth-fwd chains. Protocol optimisation on the output chains wasn't working. (Packets passed through all the chain) * Fwctl/Services/icmp_pkt.pm: New service module. * Fwctl/Services/udp_pkt.pm: New service module. * Fwctl/Services/ip_pkt.pm: New service module. * Fwctl/RuleSet.pm (constants and others): MASQ constants are not a bit fields and added FWDMASQ and MASQNOHIGH values. (determine_base,accept_ip_ruleset): Masquerading isn't limited to icmp,udp and tcp protocol anymore. 1999-12-15 Francis J. Lacoste * Fwctl.pm(read_aliases,pod): Added IF_REM_NETS alias that expands to all remote network attach to an interface. * test.pl: Print current test being run and strip whitespace before comparing regression tests results. * Fwctl/RuleSet.pm(accept_ip_ruleset): Handle case of forwarding on the same interface when src and dst are on different network. 1999-11-22 Francis J. Lacoste * fwctl.init(check): Check was flushing the rules instead of doing a check. 1999-10-20 Francis J. Lacoste * Fwctl.pm (read_aliases): _NETS aliases was defined as an array references which caused a bug in expand(). 1999-10-19 Francis J. Lacoste * TAG: FWCTL_0_21 * Fwctl/Services/rsh.pm: Documentation fixes. * Fwctl/Services/redirect.pm: New service definition. * Fwctl/Services/lpd.pm: New service definition. * Fwctl/Services/pcanywhere.pm: New service definition. * Fwctl/Services/hylafax.pm: Properly inherits from ftp now. * Fwctl/Services/ping.pm (account_rules): Was calling accept_ip_ruleset instead of acct_ip_ruleset. * test.pl: Removed bytes and packets counters from regression test. Added new tests. * Several files: Network::IPv4Addr got renamed to Net::IPv4Addr. * fwctl.logrotate: New file for logrotate. * fwctl (main): Added flush command which resets the firewall. * Fwctl.pm (flush_chains): Added flush_chains method which reset the packet filters to ACCEPT everything. (Thanks to Bernd Eckenfels ) (global): Moved configuration under /etc rather than /etc/sysconfig. (read_rules): Services expect IPChains options in $options->{options}. * debian/: Debian packaging b Bernd Eckenfels . 1999-09-15 Francis J. Lacoste * TAG: FWCTL_0_20 * Fwctl.pm: Fixes documentation. * README: Add instructions for non RedHat users. 1999-09-03 Francis J. Lacoste * TAG: FWCTL_0_18 * Fwctl/Services/dhcp.pm Added missing rules from client ip to all broadcast address. * etc/rules Fixed some small errors in the example rules file. 1999-08-23 Francis J. Lacoste * TAG: FWCTL_0_17 * Fwctl.pm Forgot to increment version number. 1999-08-23 Francis J. Lacoste * TAG: FWCTL_0_16 * Fwctl.pm Fixed quote inserted before commit. 1999-08-23 Francis J. Lacoste * TAG: FWCTL_0_15 * Fwctl.pm(find_interface) Check first for local IP. This caused a problem when there multiple interface aliases on the same subnet. 1999-08-19 Francis J. Lacoste * TAG: FWCTL_0_14 * etc/aliases Updated to give a more * etc/rules complete example setup. * etc/interfaces * Fwctl/Services/ftp.pm ctrl_port wasn't listed as a valid option. Added a data_port option. * Fwctl/Services/hylafax.pm Added HylaFAX module. * Fwctl/Services/syslog.pm Added syslog module. 1999-07-13 Francis J. Lacoste * TAG: FWCTL_0_13 * Fwctl/Services/ping.pm: Corrected masquerading error. * test.pl: Added test for masqueraded ping to the Internet. 1999-07-09 Francis J. Lacoste * TAG: FWCTL_0_12. * Fwctl/Services/rsh.pm: Stderr is from dst to src. * fwctl.init: Added restart and reload action. Fixed a typo. * Fwctl.pm (dump_acct): Add -n switch when dumping chains to preven DNS lockup. 1999-07-05 Francis J. Lacoste - Completed test suite. - TAG: FWCTL_0_11. 1999-05-29 Francis J. Lacoste - Internal release. Completed all features and documentation. - Begin testing. - Version 0.10 1999-05-15 Francis J. Lacoste - original version; created by h2xs 1.19