

                  Firewall Builder  Release Notes




Version 0.8.7
February 1, 2001


This is bugfix release. It incorporates several fixes in both GUI and
compilers reported by beta-testers. We also include beta version of
new XML DTD (see etc/fwbuilder.dtd). This release still does not use it,
it is included for preview purposes. We welcome feedback ! 

There should be no more 0.8.x releases as we start major rewrite to
switch to the new XML DTD. Significant improvements to GUI are coming
with it, too. This is what is going to become 0.9.0 when it is ready.



Firewall Builder GUI
--------------------

Minor bugfixes. Support for libxml2


Compilers
---------

Static buffer overflow in fwcompiler.c eliminated. This overflow and
core dump used to happen while processing firewall rules with large
number of objects.


XML DTD
-------

This release comes with beta version of our new data presentation
format. We ship it only for demosntration purposes, so people can take
a look and provide feedback.




Version 0.8.6
January 24, 2001


Firewall Builder GUI
--------------------

This is mostly bugfix release, fixing bugs and problems found during
beta-testing of v 0.8.5   We appreciate help of everyone who contributed
their ideas, notes, bugs and suggestions. See file Credits for the list of
contributors.

Problems fixed in this release:

 - numerous build problems on RedHat 7.0, including proper detection
   of libxml in configure

 - fixed bug where bogus path was stored in config.h file while building
   RPMs

 - build support scripts were reqritten; project now builds on Solaris

 - improper error detection while reading preferences and object data files

 - various crashes because of insufficient error checking


New features in GUI:


 - now GUI checks IP address and netmasks syntax and automatically suggests
   "natural" netmask for the network object

 - finally implemented comments editing for firewall policy rules

 - package ships with proper example, see README.example and objects.xml
   in directory "examples"

 - added support for iptables platform.



Compilers
---------


This is the first release which ships with working iptables policy
compiler.

Example object database comes with three different firewall
definitions based on ipchains, ipfilter and iptables platform.



XML data presentation 
-----------------------

We are in process of reviewing and brushing out our XML data presentation
layer and data format. Currently you can find work in progress file
fwbuilder.dtd in 'etc' project directory. It is not complete, and software
itself still uses older format, not matching this DTD.


If you are compiler developer:

1. Do not rely on current data format - it will change soon.
2. Do not rely on fwbuilder.dtd yet - it is not finished and likely
to be chnaged.


If you are user:

1. Do not be alarmed by the future change in format - we will provide
   migration tool to convert your data files.  


If you are developer:

1. Your ideas and comments regarding DTD format are very welcome.









