# Firewall Builder Release Notes

## Version 1.0.6

GUI and compilers v1.0.6 require API library libfwbuilder version 0.10.10

## Summary

This is bug fix release.

For those who wish to build from source, instructions are outlined in the document "Install and Build instructions" on our web site here

## What's new

- Added support for bridging iptables firewalls (experimental)
- checking that data retrieved from the host via SNMP query for sysDesc MIB variables conforms to NVT ASCII coding.
- manual sort of tree branches is back. Automatic tree sorting is too cumbersom and sometimes leads to unexpected "jumping" of objects in the tree.
- implemented sorting of objects in the tree by name or by property.
- interface properties in the tree shows its address.
- Gui checks if file being opened is read-only and gives a warning.
- GUI aborts "exit" operation if changes in the file could not be saved (this happens if file permissions do nto allow writing or there has been an error while writing to the file)
- added support for all ICMP types and codes assigned by IANA here: http://www.iana.org/assignments/icmp-parameters
- Implemented feature req. #611323 "Allow modprobe path specification"
- Implemented feature req. #613424: consolidation of objects in a rule. All policy compilers detect and eliminate duplicate objects in rules

## Bugs fixed in libfwbuilder API:

- bug #605944: multicast addresses in FORWARD chain
- bug #607380: host with no IP creates 'any' rule.
- bug #571882: address arithmetics broken on SPARC

## Bugs fixed in GUI:

- bug #609355: Rules are not copied properly (direction was lost when interface policy rule was copied via clipboard)
- bug #608448: GUI crash leaving interface policy and bug #608717: GUI crashes while dragging rules.
- bug #609342: Problems with ISO-8859-2 letters in SNMP (now program cleans up strings before storing them to make sure all data conforms with UTF-8 encoding). Also now setting encoding "utf-8" in xml file.
- support request #609956: use name of the interface, or word 'global', to substitute macro %I in custom log prefix
- bug #608717: GUI crash while dragging rules if main window positioned beyond left or right screen edge

## Bugs fixed in iptables policy compiler fwb_ipt:

- bug #609052: Incorrect syntax when using time and log (missing space between custom log prefix and "-m time")
- bug (no number) that caused indefinite loop in case interface or address object had empty netmask
- bug (no number) where compiler did not process negation properly if one of the objects in the rule element with negation was a firewall or one of its interfaces.
- bug (no number) where compiler failed to add "-o interface" for SNAT or DNAT rules if virtual address was used in TSrc or ODst (resp.)
- Implemented feature Req. #603726 and fixed bug #614898: bridged and dedicated dhcp.

## Bugs fixed in ipfilter policy compiler fwb_ipf:

- bug #614896: unexpected keyword ()). Compiler used to insert extra whitespaces around the number in block return-icmp-as-dest(3) construct.