                         Firewall Builder Release Notes

Version 1.0.6

   GUI and compilers v1.0.6 require API library libfwbuilder version 0.10.10

Summary

   This is bug fix release.

   For those who wish to build from source, instructions are outlined in the
   document "Install and Build instructions" on our web site here

What's new

     * Added support for bridging iptables firewalls (experimental)
     * checking that data retrieved from the host via SNMP query for sysDesc
       MIB variables conforms to NVT ASCII coding.
     * manual sort of tree branches is back. Automatic tree sorting is too
       cumbersom and sometimes leads to unexpected "jumping" of objects in
       the tree.
     * implemented sorting of objects in the tree by name or by property.
     * interface properties in the tree shows its address.
     * Gui checks if file being opened is read-only and gives a warning.
     * GUI aborts "exit" operation if changes in the file could not be saved
       (this happens if file permissions do nto allow writing or there has
       been an error while writing to the file)
     * added support for all ICMP types and codes assigned by IANA here:
       http://www.iana.org/assignments/icmp-parameters
     * Implemented feature req. #611323 "Allow modprobe path specification"
     * Implemented feature req. #613424: consolidation of objects in a rule.
       All policy compilers detect and eliminate duplicate objects in rules

     ----------------------------------------------------------------------

Bugs fixed in libfwbuilder API:

     * bug #605944: multicast addresses in FORWARD chain
     * bug #607380: host with no IP creates 'any' rule.
     * bug #571882: address arithmetics broken on SPARC

Bugs fixed in GUI:

     * bug #609355: Rules are not copied properly (direction was lost when
       interface policy rule was copied via clipboard)
     * bug #608448: GUI crash leaving interface policy and bug #608717: GUI
       crashes while dragging rules.
     * bug #609342: Problems with ISO-8859-2 letters in SNMP (now program
       cleans up strings before storing them to make sure all data conforms
       with UTF-8 encoding). Also now setting encoding "utf-8" in xml file.
     * support request #609956: use name of the interface, or word 'global',
       to substitute macro %I in custom log prefix
     * bug #608717: GUI crash while dragging rules if main window positioned
       beyond left or right screen edge

Bugs fixed in iptables policy compiler fwb_ipt:

     * bug #609052: Incorrect syntax when using time and log (missing space
       between custom log prefix and "-m time")
     * bug (no number) that caused indefinite loop in case interface or
       address object had empty netmask
     * bug (no number) where compiler did not process negation properly if
       one of the objects in the rule element with negation was a firewall or
       one of its interfaces.
     * bug (no number) where compiler failed to add "-o interface" for SNAT
       or DNAT rules if virtual address was used in TSrc or ODst (resp.)
     * Implemented feature Req. #603726 and fixed bug #614898: bridged and
       dedicated dhcp.

Bugs fixed in ipfilter policy compiler fwb_ipf:

     * bug #614896: unexpected keyword ()). Compiler used to insert extra
       whitespaces around the number in block return-icmp-as-dest(3)
       construct.
