changelog firewall-easy >0.30pre


0.30	- First debian package, included autodetection of IP, net/mask and DNS
	    autodetection must be considered BETA
	- Added other kernel independent commands:
	    firewall-stop, firewall-resetcounters
	- Preliminary (simplest possible) version of firewall-list
	- Added PPP aditional protection: antispoofppp-up, antispoofppp-down
	- firewall-easy-lib updated to doc autodetection


0.30pre:

firewall-easy-lib (RULES)
0.30pre2	- To avoid unnecesary "for" loops:
		    RED_LO -> RED_LO1
		- IP_ADSL -> IP_ADSL1,  GW_ADSL -> GW_ADSL1
		- I forgot to put $ to vars inside $SPOOF
		- ipchains claims protocol if port specified 

0.30pre3	- Do not log $NO_IP, we deny them by a reason, and DoS attack
		    possible

0.30pre5	- Doc: REDIR must be used as "->port" with no spaces
		- Doc: remove VARS do not need $ as starting char
		- Added output rule allowing IP alias "autotest" in 1.1.1.1

0.30pre6	- Several doc enhacements (comments in the file)
		- Expand 'counter' rule from 513 to 512:514 for "r" commands
		- Added 'counter' rules for tftp, and bootp

0.30pre7	- tftp is only udp...


fwgen-ipchains (SCRIPT GENERATOR)
0.30pre2	- Big bug not loading IPLOCAL,IPREMOTE,HI from config file
		- Config vars are writted to the script even when commented

0.30pre3	- Simplify pattern in vars-config detection (same meaning)
		- Added support for REDIR action
		- Syntax errors clearer
		- Enable forward automatically if using MASQUERADE or REDIR
		- Bug "#import" also does import
		- Bug LOGALLDENY did not work
		- Replacing tabs in contents of vars by spaces
		- Bug INTERFACE, IPLOCAL, IPREMOTE now work with several values
		- Bug with IPLOCAL/IPREMOTE and port="*" in variable part

0.30pre4	- Variable part more clear (it already worked)
		- Bug with zero port/icmp interpreted as "" by awk
		- Added echo rule when doing debug
		- Not rewritting /etc/testfw if it exists (good for tripwire)

0.30pre5	- Bug in NO rules * means IPLOCAL/IPREMOTE instead of 0/0 as
		 one can expect (does not afect to standard firewall-easy-lib)
		- Added "Setting up firewall" message to script
		- Added commented name firewall-ipchains to script
		- Initialize some vars before use (awk already did it, but...)


firewall-easy.conf (IFACES/IP CONFIG)
0.30pre2	- Do not set by default 'IP_ADSL1=0/0' but 'IP_ADSL= ' to
		    avoid antispoof DENY of every packet from Internet, this
		    means error messages if IP_ADSL is set and IP_ADSL not

0.30		- Added autodetection of IP, net/mask and DNS
