# Firewall Builder Release Notes

### Version 0.9.3

This release includes many fixes for bugs reported for v0.9.2 and some new features as well

### What's new in this release:

- New objects discovery method has been implemented: this time Firewall Builder can perform scan of your network and run SNMP query against hosts supporting SNMP. It pulls ARP table from each host and finds other hosts this way. It can also determine names and configuration of all network interfaces, so when you use this information to create an object for the firewall it will have all its interfaces added right away.

  So, now Firewall Builder can help you create objects for your network in three ways:

  - Read file in format /etc/hosts(5)
  - Import DNS zone
  - Run SNMP queries to find hosts via ARP tables of other hosts

- Druid pages dealing with objects found by discovery process have been improved. Now user can filter lists of network and host addresses to focus on those they really need to create objects for.
- several improvements have been made to configure script (aiming at smooth compile process on different OS)
- iptables compiler now supports REDIRECT target
- both GUI and iptables compiler now support additional policy rule option "stateless". This allows for marking certain rules in the policy as not requiring stateful inspection. This feature, if used properly, can improve performance without compromising security. However, by default all rules are generated with " -m state --state NEW" options as before
- iptables compiler can create static ARP entries and associated routes needed for DNAT translations. This feature can be activated in iptables options tab in firewall dialog

### Bugs fixed in iptables compiler:

- #440557: previously optimizer could not distinguish TCP protcols with different options and generated incorrect code.
- #440390: synax error in construct '--tcp-flag ALL ,SYN '
- #441979: generated wrong interface rules when direction was "both"

### Bugs fixed in GUI:

- gui crashed if user hit TAB on empty "Address" field in Interface dialog
- gui crashed after "Help me build policy" Druid if Policy or NAT were showing in the right pane of the main window (Support request #437759)
- pop-up menu in group view did not activate "Open", "Copy" and "Cut" items when it really should
- #444048 (spelling error in log level parameter)
- few other minor bugs discovered in testing