All releases tagged Stable
Release Notes: This is just a maintenance release fixing a few minor bugs and upping the version to 1.0.
Release Notes: IPv6 DHCP rules were fixed. Certain conn track rules were moved around, because they normally would not be used outside of a specific context. Code was cleaned up and some bugs were fixed.
Release Notes: This release fixes the location of the closing IPv6 if statement, adds default policy rules, fixes a stray NEW conntrack match that was causing incoming connections to be allowed even if blocked, and adds advanced port controls for IPv4 and IPv6.
Release Notes: IPV6_ROUTEDCLIENTBLOCK has been changed to allow blocking only on specific subnets. There is support for allowing IPV6 critical ICMP messages (on by default), a new config option for interception of IPv4 packets (aka transparent proxy support), the script now requires bash 3.0 or higher, and work has begun on variable error checking.
Release Notes: Some of the configuration clutter was moved to conf/. Work on a configuration tool was begun. An option to use state or the conntrack module for state tracking was added. The default gateway interface and IP address of an interface can now be optionally automatically detected.
Release Notes: Important fixes were made for coding errors involving IPv6 variable changes.
Release Notes: Module loading, init script fixes, trusted DNS servers options, improved IPv6 code to bring it partially in sync with IPv4 features, and the addition of IPv6 marking support. IPv6 variables/options have been renamed.
Release Notes: RFC1918 blocking, some possible fixes for DHCP, advanced blocking support for IPv4/IPv6, and general cleanups.
Release Notes: Minor changes were made in directory and file layout (rc.firewall was renamed to bin/firewall-sosdg and sym-linked). References to /bin/sh were changed to /bin/bash. Preparations were made for the v1.0 release.
Release Notes: The ability to inject custom commands at various places throughout the firewall's loading progress was added. Colorization of output was improved. The bogons code was removed for the time being since it was never finished.
