2000-08-04 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Tag: FWCTL_0_28
• fwctllog: Only warn (don't die) when encoutering an invalid syslog line.

2000-08-01 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• test.pl: Added test for ICA module.
• Fwctl/Services/ica.pm: New ICA module.
• README: Added requirements for Net::IPv4Addr 0.10.
• NEWS: News for 0.28.
• Fwctl.spec: Updated for version 0.28. Updated spec file to use new macros.
• Fwctl.pm (VERSION): Changed version number to 0.28. Required Net::IPv4Addr 0.10.
• Changed copyright to GPL only.
• test-data/in/deny-snmp-INT_NET-nolog: Removed unessary rules because of Net::IPv4Addr 0.10
• test-data/in/deny-netbios-INT_NET-nolog: Removed unessary rules because of Net::IPv4Addr 0.10

2000-06-20 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Copyright: put under GPL only for ipchains.
• Fwctl/Services/ipsec.pm (accept_rules): Load module when portfw is turned on.
• Fwctl/Services/pptp.pm (accept_rules): Load module when portfw is turned on.

2000-06-11 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_27
• Fwctl/RuleSet.pm: (all_masq_forward_ruleset) removed. (all_umasq_forward_ruleset) removed. (ip_forward_ruleset) Changed implementation for all service. (doc) Changed copyright.
• Fwctl/Services/all.pm: Add rules to all chains: tcp, udp and icmp, to fix problem related to rules optimization.

2000-06-07 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Fwctl.pm: (routes) Return a destination based routing table. (find_interface) Handle case of two routes with one more specific than the other. (interfaces) Fixed a bug when setting the interfaces. (doc) Copyright is all to iNsu.
• test-data/etc/interfaces: Better interface definition for an IP alias.
• IPChains/PortFW.pm: Changed Copyright. Removed assignment to undef which requires perl 5.005.

2000-05-12 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• fwctlreport: Removed page header and put report's date under the title.
• Fwctl/Report.pm (report_iterator): Assumes that records are already sorted by time stamp to reduce memory consumption. (remove_duplicates): Was transformed on is_duplicate which is called before adding each records, again to reduce memory usage.

2000-05-08 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Fwctl.spec (Requires): Requires Net-IPv4Addr >= 0.09
• Makefile.PL (PREREQ): Requires Net::IPv4Addr >= 0.09
• TAG: FWCTL_0_26
• Fwctl.spec (Version): Updated version number to 0.26.
• Fwctl.pm (VERSION): Updated version number to 0.26
• fwctllog (read_records): Throw exception when it is not possible to parse a Packet log: line.
• NEWS : Added user changes for 0.26.
• TODO: Added list of requested enhancements.

2000-05-05 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• fwctllog : Fixe parsing of chains with - in it. (Thanks Bernd Eckenfels).

2000-02-17 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_25_1
• fwctl.logrotate: Moved back weekly report to log rotation script.
• fwctl.cron: Moved back weekly report to log rotation script.

2000-02-16 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_25
• fwctl.logrotate: Moved weekly reports to fwctl.cron.
• fwctl.cron: Added weekly reports from logrotate.d sample configuration.

2000-02-11 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• fwctl: Fixed problem with the way the new switches were interpreted.
• fwctlreport.pm: Changed way to select subset of records with an expression rather than many switches.
• Fwctl/Report.pm: Changed way to select subset of records with an expression rather than many switches.
• Fwctl.spec: Updated for version 0.25.
• Fwctl/Report.pm: When removing duplicates, we should compare src and dst ip using eq not ==.

2000-02-07 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• fwctl.logrotate: Added service_host_sum to weekly report and drop src_host.
• Fwctl/Services/name_service.pm: When using the server option, accepts UDP queries from any source port.
• fwctl.logrotate: endpostrotate -> endscript.

2000-01-30 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• fwctl: Added --nocopy, --nolog, --default and --mark options to override default policy.
• Fwctl.pm: Possibility to override defaults policy for logging, copy, deny policy and marking.

2000-01-26 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_24
• fwctl.logrotate: Make sure that only one week of report is generated in the postrotate script.
• Fwctl/Report.pm: (BEGIN) Conditional loading of Date::Manip wasn't working.
• IPChains/PortFW.pm: (new) Added /sbin:/bin:/usr/sbin:/usr/bin to PATH.
• fwctlreport: Fix problem when there are no records, and output NO RECORDS. Default details report wasn't working properly.
• fwctlacctreport: Fix problem when there are no records, and output NO RECORDS.
• Fwctl.pm: Check for ipchains in PATH at startup. Use die and warn instead than croak and carp for user errors. Incremented version number.

2000-01-23 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_23
• fwctl.cron: Transform to crontab format. Dumps accounting counters every 15mins. Preprocess kernel logs every hour and generates daily reports.
• fwctl.logrotate: Added fwctl_log to rotation. Generates weekly reports in the postrotate script.
• Fwctl/AcctReport.pm: (read_records) Fix problem with opening STDIN.
• Fwctl/Report.pm: (read_records) Fix problem with opening STDIN.
• Fwctl.pm: (version) Updated version number to 0.23.
• fwctlacctreport: (pod) Added program documentation.
• Fwctl/AcctReport.pm: (pod) Added module documentation.

2000-01-21 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Fwctl/AcctReport.pm: New module to generates report from accounting data.
• fwctlacctreport: Added program to generates text report from accounting data.

2000-01-18 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• test.pl(test): Add tests for interfaces with same IPs and aliases with interface specification.
• Fwctl.pm (expand): Each elements of the expansions is now an array ref which contains ( host_or_network, interface ). (find_host_alias): Normalize IP addresses (.001 -> .1). Removes interface specification. (configure): Rewrite for new semantics of expand. (read_aliases): Permit interface specification in expansion by giving the interface name in parentheses after the host or subnet. Tagged all default aliases with their proper interface. (read_rules): Rewrote for new expand semantics. This makes the function simpler, the only special cases being portfw.

2000-01-17 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• test.pl (test): Added test for masquerading of ftp service.
• Fwctl/Services/ftp.pm (accept_rules): Problem with masquerading of the ftp port data connection fixed. (account_rules): Wasn't switching between src and dst ports in port forwarding condition. Problem with masquerading of the ftp port data connection fixed.

2000-01-14 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Fwctl.pm (read_interfaces): Allow wildcard interface specification (ppp+).

2000-01-10 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Fwctl/Report.pm: Module to generate reports. This module is the report backend. fwctlreport is a frontend which displays the generated report in text.
• fwctlreport: Packet filter report generation utility added.
• fwctllog: Added possibility to generates record log for only a specific period of time.
• TODO: Removed items about log report tool.

1999-12-22 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• fwctllog (main): Fix for broken turn of year logic.

1999-12-21 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Fwctl.pm (find_interface_by_dev): New method to find an interface by its associated device. (find_host_alias): New method to find the alias related to an host. (find_host_alias): When looking for subnets alias, we were skipping aliases with a /.
• fwctllog: New program to preprocess kernel firewall logs for later analysis.

1999-12-20 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• test.pl: Added test for pptp with portfw option.
• Fwctl/Services/ipsec.pm: Added support for portfw option.
• Fwctl/Services/pptp.pm: Added support for portfw option.
• Fwctl.pm(BEGIN): Even if ipmasqadm was not present, loading IPChains::PortFW was considered sucessfully loaded and triggered an error at configuration time.
• Fwctl/RuleSet.pm(BEGIN): Use eval {} rather than eval "". (ip_forward_ruleset): Removed restrictions on tcp and udp for the portfw option. (ip_portfw_forward_ruleset): Generates rules suitable for generic IP forwarding.

f1999-12-17 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Tag: FWCTL_0_22
• fwctl(flush): Flush with warning if there is a configuration file problem.
• Fwctl.pm(flush_chains,really_flush_chains) Added a really_flush_chains method that can be called without an object.
• Several: Added port forwarding support.

1999-12-16 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• IPChains/PortFW.pm: New.
• Fwctl/Services/ipsec.pm: New service module.
• Fwctl/Services/pptp.pm: New service module.
• Fwctl.pm(reset_fw): Added oth-in, oth-out and oth-fwd chains. Protocol optimisation on the output chains wasn't working. (Packets passed through all the chain)
• Fwctl/Services/icmp_pkt.pm: New service module.
• Fwctl/Services/udp_pkt.pm: New service module.
• Fwctl/Services/ip_pkt.pm: New service module.
• Fwctl/RuleSet.pm (constants and others): MASQ constants are not a bit fields and added FWDMASQ and MASQNOHIGH values. (determine_base,accept_ip_ruleset): Masquerading isn't limited to icmp,udp and tcp protocol anymore.

1999-12-15 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Fwctl.pm(read_aliases,pod): Added IF_REM_NETS alias that expands to all remote network attach to an interface.
• test.pl: Print current test being run and strip whitespace before comparing regression tests results.
• Fwctl/RuleSet.pm(accept_ip_ruleset): Handle case of forwarding on the same interface when src and dst are on different network.

1999-11-22 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• fwctl.init(check): Check was flushing the rules instead of doing a check.

1999-10-20 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Fwctl.pm (read_aliases): <IF>_NETS aliases was defined as an array references which caused a bug in expand().

1999-10-19 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_21
• Fwctl/Services/rsh.pm: Documentation fixes.
• Fwctl/Services/redirect.pm: New service definition.
• Fwctl/Services/lpd.pm: New service definition.
• Fwctl/Services/pcanywhere.pm: New service definition.
• Fwctl/Services/hylafax.pm: Properly inherits from ftp now.
• Fwctl/Services/ping.pm (account_rules): Was calling accept_ip_ruleset instead of acct_ip_ruleset.
• test.pl: Removed bytes and packets counters from regression test. Added new tests.
• Several files: Network::IPv4Addr got renamed to Net::IPv4Addr.
• fwctl.logrotate: New file for logrotate.
• fwctl (main): Added flush command which resets the firewall.
• Fwctl.pm (flush_chains): Added flush_chains method which reset the packet filters to ACCEPT everything. (Thanks to Bernd Eckenfels <ecki@lina.inka.de>) (global): Moved configuration under /etc rather than /etc/sysconfig. (read_rules): Services expect IPChains options in $options->{options}.
• debian/: Debian packaging b Bernd Eckenfels <ecki@lina.inka.de>.

1999-09-15 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_20
• Fwctl.pm: Fixes documentation.
• README: Add instructions for non RedHat users.

1999-09-03 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_18
• Fwctl/Services/dhcp.pm Added missing rules from client ip

  to all broadcast address.

• etc/rules Fixed some small errors in the

  example rules file.

1999-08-23 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_17
• Fwctl.pm Forgot to increment version number.

1999-08-23 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_16
• Fwctl.pm Fixed quote inserted before commit.

1999-08-23 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_15
• Fwctl.pm(find_interface) Check first for local IP. This caused

  a problem when there multiple interface aliases on the same subnet.

1999-08-19 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_14
• etc/aliases Updated to give a more
• etc/rules complete example setup.
• etc/interfaces
• Fwctl/Services/ftp.pm ctrl_port wasn't listed

  as a valid option.

Added a data_port option.

• Fwctl/Services/hylafax.pm Added HylaFAX module.
• Fwctl/Services/syslog.pm Added syslog module.

1999-07-13 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_13
• Fwctl/Services/ping.pm: Corrected masquerading error.
• test.pl: Added test for masqueraded

  ping to the Internet.

1999-07-09 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• TAG: FWCTL_0_12.
• Fwctl/Services/rsh.pm: Stderr is from dst to src.
• fwctl.init: Added restart and reload action.

  Fixed a typo.

• Fwctl.pm (dump_acct): Add -n switch when dumping

  chains to preven DNS lockup.

1999-07-05 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Completed test suite.
• TAG: FWCTL_0_11.

1999-05-29 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• Internal release. Completed all features and documentation.
• Begin testing.
• Version 0.10

1999-05-15 Francis J. Lacoste <francis.lacoste@iNsu.COM>

• original version; created by h2xs 1.19