                         Firewall Builder Release Notes

  Version 0.9.3

     ----------------------------------------------------------------------

   This release includes many fixes for bugs reported for v0.9.2 and some new
   features as well

  What's new in this release:

     * New objects discovery method has been implemented: this time Firewall
       Builder can perform scan of your network and run SNMP query against
       hosts supporting SNMP. It pulls ARP table from each host and finds
       other hosts this way. It can also determine names and configuration of
       all network interfaces, so when you use this information to create an
       object for the firewall it will have all its interfaces added right
       away.

       So, now Firewall Builder can help you create objects for your network
       in three ways:
          * Read file in format /etc/hosts(5)
          * Import DNS zone
          * Run SNMP queries to find hosts via ARP tables of other hosts

     * Druid pages dealing with objects found by discovery process have been
       improved. Now user can filter lists of network and host addresses to
       focus on those they really need to create objects for.
     * several improvements have been made to configure script (aiming at
       smooth compile process on different OS)
     * iptables compiler now supports REDIRECT target
     * both GUI and iptables compiler now support additional policy rule
       option "stateless". This allows for marking certain rules in the
       policy as not requiring stateful inspection. This feature, if used
       properly, can improve performance without compromising security.
       However, by default all rules are generated with " -m state --state
       NEW" options as before
     * iptables compiler can create static ARP entries and associated routes
       needed for DNAT translations. This feature can be activated in
       iptables options tab in firewall dialog

  Bugs fixed in iptables compiler:

     * #440557: previously optimizer could not distinguish TCP protcols with
       different options and generated incorrect code.
     * #440390: synax error in construct '--tcp-flag ALL ,SYN '
     * #441979: generated wrong interface rules when direction was "both"

  Bugs fixed in GUI:

     * gui crashed if user hit TAB on empty "Address" field in Interface
       dialog
     * gui crashed after "Help me build policy" Druid if Policy or NAT were
       showing in the right pane of the main window (Support request #437759)
     * pop-up menu in group view did not activate "Open", "Copy" and "Cut"
       items when it really should
     * #444048 (spelling error in log level parameter)
     * few other minor bugs discovered in testing
