All releases of Firewall Monitor


Release Notes: A bug where tcpdump files would get overwritten instead of appended to has been fixed. The tcpdump magic number problem has been fixed. A sniffer mode has been added which utilises Linux mmap() packet socket and is very fast.


Release Notes: A fix for broken permissions on libpcap file creation which could potentially make them world-readable, and minor performance enhancements.


Release Notes: This release fixes a major crashing bug when the kernel sends oversized packets, an old race condition in the libpcap code, and a small bug in syslog output. It optimizes the code, and adds some new and nicer error messages. fwmon now also emits an error when no output mode is specified.


Release Notes: A fix for a bug which caused corrupt libpcap files on logrotate, reworked SQL output (much simpler to use -rewrote initdb.sql to reflect the changes), printing the fwmark field out to logfiles, some minor documentation updates, and tidying up the code that works out ICMP type names.


Release Notes: A fix for a remote DoS caused by stack based buffer overflow (not exploitable to run shellcode), and removing limitations on size of printable packets.


Release Notes: The output has been buffered, so the monitor is now much faster under a heavy load. SQL output has been added, and the RPM now installs fwmon as a daemon.


Release Notes: A syslog logging facility has been added. When using chroot, fwmon now opens logfiles AFTER chrooting. Some of the documentation has been updated. RPM and Makefile install locations have been consolidated. A README.chroot file has been added as a quick guide to getting fwmon running in a chroot jail and with lowered privileges.


Release Notes: Lots of bugfixes were made, as well as some documentation fixes. Plenty of testing was done. This version is stable.


Release Notes: Lots of new documentation was added, including a man page. A few bugfixes were made. Documentation on using fwmon with iptables was also added.


Release Notes: Initial freshmeat announcement. This version is pratically a total re-write. New features include the ability to create tcpdump-style capture files of blocked traffic, many bugfixes, and major improvments to the documentation.