1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
|
vyatta-cfg-firewall (0.13.7-1) unstable; urgency=low
* Fix Bug 2741 ENH: filter based on ICMP Type/code by name
-- Mohit Mehta <mohit.mehta@vyatta.com> Fri, 30 Jan 2009 18:39:18 -0800
vyatta-cfg-firewall (0.13.7) unstable; urgency=low
[ Bob Gilligan ]
* Add support for IPv6 address ranges.
[ Mohit Mehta ]
* Use iptables comment to identify CLI rule numbers in iptables output
-- Mohit Mehta <mohit.mehta@vyatta.com> Fri, 30 Jan 2009 11:17:19 -0800
vyatta-cfg-firewall (0.13.6) unstable; urgency=low
* Fix Bug 2474 https://bugzilla.vyatta.com/show_bug.cgi?id=2474
-- Mohit Mehta <mohit.mehta@vyatta.com> Mon, 26 Jan 2009 16:45:01 -0800
vyatta-cfg-firewall (0.13.5) unstable; urgency=low
* Bugfix 4062: Don't reference parameters outside the config tree.
-- Bob Gilligan <gilligan@vyatta.com> Fri, 23 Jan 2009 14:09:27 -0800
vyatta-cfg-firewall (0.13.4) unstable; urgency=low
* Initial support for IPv6.
-- Bob Gilligan <gilligan@vyatta.com> Thu, 22 Jan 2009 13:36:29 -0800
vyatta-cfg-firewall (0.13.3) unstable; urgency=low
* UNRELEASED
* - Fix Bug 2223 Add rate rate limiting / burst limiting functions to
the Vyatta firewall
* Fix Bug 3653 Add the ability to configure time-based firewall rules
* Fix Bug 3653 Add the ability to configure time-based firewall rules
-- Mohit Mehta <mohit.mehta@vyatta.com> Fri, 16 Jan 2009 18:33:11 -0800
vyatta-cfg-firewall (0.13.2) unstable; urgency=low
* UNRELEASED
* Fix Bug 3653 Add the ability to configure time-based firewall rules
-- Mohit Mehta <mohit.mehta@vyatta.com> Tue, 13 Jan 2009 18:09:11 -0800
vyatta-cfg-firewall (0.13.1) unstable; urgency=low
[ An-Cheng Huang ]
* add support for development build
[ Stephen Hemminger ]
* Rename VyattaIpTablesRule to Vyatta::IpTables::Rule
* Convert to Vyatta::Config
* Convert VyattaConfig to Vyatta::Config
* Fix reference to Vyatta::Misc
[ An-Cheng Huang ]
* fix for perl module reorganization
* add ipp2p config options
[ Stig Thormodsrud ]
* Convert to use Vyatta::
[ Bob Gilligan ]
* Cleanup firewall templates for readability. Update help strings to
reflect IPv4.
[ Stig Thormodsrud ]
* Warning are now enabled - don't reference undefined values.
[ An-Cheng Huang ]
* update maintainer information
* "files" file should be removed before package build
[ Stig Thormodsrud ]
* Fix 3626: Not all protocol numbers are accepted in firewall rules.
* Fix 2563: Add firewall-rule specific disable configuration
parameter.
[ An-Cheng Huang ]
-- An-Cheng Huang <ancheng@vyatta.com> Thu, 08 Jan 2009 09:20:14 -0800
vyatta-cfg-firewall (0.13) unstable; urgency=low
3.2.0
[ Mark O'Brien ]
[ Bob Gilligan ]
* Bugfix: 3684
[ Stephen Hemminger ]
* add firewall hooks for ethernet bonding
[ An-Cheng Huang ]
* fix for bug 3622: add pre-SNAT hook
* fix for bug 3604: add fragment matching options
* fix conntrack enabling mechanism
* fix for bug 2224: add "recent" matching
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@firebolt.vyatta.com> Tue, 25 Nov 2008 19:08:40 -0800
vyatta-cfg-firewall (0.12) unstable; urgency=low
3.1.3
[ Mark O'Brien ]
[ An-Cheng Huang ]
* fix conntrack enabling mechanism
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@firebolt.vyatta.com> Tue, 19 Aug 2008 17:48:24 -0700
vyatta-cfg-firewall (0.11) unstable; urgency=low
3.1.1
[ Mark O'Brien ]
[ An-Cheng Huang ]
* increment firewall config syntax version for hollywood.
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@firebolt.vyatta.com> Sat, 28 Jun 2008 11:22:07 -0700
vyatta-cfg-firewall (0.10) unstable; urgency=low
3.1.0
[ Mark O'Brien ]
[ Stephen Hemminger ]
* Use regular snmpd
[ Bob Gilligan ]
* Bugfix: 2120
* Bugfix: 2122
[ rbalocca ]
* Add vyatta-snmpd
[ An-Cheng Huang ]
* rename "mangle" to "modify"
[ rbalocca ]
* Ignore derived files
[ An-Cheng Huang ]
* allow firewall rule to match inbound IPsec packets.
* add "inspect" action (maps to QUEUE) so "custom" traffic-filter for
IPS
* add mangle table support to firewall configuration. initial
implementation
[ rbalocca ]
* Convert to our method of changelog creation
[ Bob Gilligan ]
* Add firewall templates for PPPOA, PPPOE, and classical IP over ATM,
on
[ Mohit Mehta ]
* Fix Bug 3069 Help strings should be standardized
[ An-Cheng Huang ]
* add post-firewall hook for other features
* fix for bug 3127: look for an exact match to replace/delete.
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@firebolt.vyatta.com> Tue, 17 Jun 2008 09:26:05 -0700
vyatta-cfg-firewall (0.9) unstable; urgency=low
3.0.5
-- Mark O'Brien <mobrien@vyatta.com> Tue, 06 May 2008 12:43:09 -0700
vyatta-cfg-firewall (0.8) unstable; urgency=low
3.0.4
-- Mark O'Brien <mobrien@vyatta.com> Mon, 05 May 2008 16:40:28 -0700
vyatta-cfg-firewall (0.7) unstable; urgency=low
3.0.3
[ Mark O'Brien ]
[ rbalocca ]
* Indicate the VC4.0.2 release candidate in the changelog
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Tue, 29 Apr 2008 16:42:09 -0700
vyatta-cfg-firewall (0.6) unstable; urgency=low
VC4.0.2
[ Mark O'Brien ]
[ An-Cheng Huang ]
* fix for bug 3167: get the actual return status from iptables.
* fix for bug 3167: disallow multiport specification if both source
and
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Sat, 19 Apr 2008 11:55:56 -0700
vyatta-cfg-firewall (0.5) unstable; urgency=low
VC4.0.2 release candidate
[ Mark O'Brien ]
[ An-Cheng Huang ]
* fix for bug 3127: look for an exact match to replace/delete.
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Wed, 16 Apr 2008 09:49:51 -0700
vyatta-cfg-firewall (0.4) unstable; urgency=low
3.0.2
[ Mark O'Brien ]
* 3.0.1
[ rbalocca ]
* Fix debian dependencies
* Set dependencies on either bash or vyatta-bash
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Fri, 04 Apr 2008 18:00:16 -0700
vyatta-cfg-firewall (0.3) unstable; urgency=low
VC4.0.1
[ Mark O'Brien ]
[ An-Cheng Huang ]
* fix a problem in the interaction between "firewall" and
"interfaces".
[ Stephen Hemminger ]
* Replace VPL with GPLv2
* Change to GPLv2
* Update debian/copyright for GPLv2
* update from VPL1 to GPLv2
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Tue, 18 Mar 2008 19:03:26 -0700
vyatta-cfg-firewall (0.2) unstable; urgency=low
vc4.0.0
[ Mark O'Brien ]
[ An-Cheng Huang ]
* convert templates to new syntax
* fix for bug 2591: update help text
* fix for bug 2528: collapse source/destination "address" and
"network".
* fix for bug 2789: merge port configuration options.
* merge ports in show output
* merge address range into address
* add address validation
* move common module to vyatta-cfg
[ Bob Gilligan ]
* Extend firewall support to PPPOE interfaces.
[ Stig Thormodsrud ]
* Add firewall node to tunnel interface
* Remove vif node as it's not valid for tunnel interfaces.
[ Mark O'Brien ]
-- Mark O'Brien <mobrien@vyatta.com> Mon, 25 Feb 2008 17:38:04 -0800
vyatta-cfg-firewall (0.1) unstable; urgency=low
* Initial Release.
-- Bob Gilligan <gilligan@vyatta.com> Mon, 10 Dec 2007 11:03:18 -0700
|
