<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2><IMG alt="daughter" hspace=0
src="http://rbdie.com/extent.gif" align=baseline
border=0></FONT></DIV>
<DIV><FONT face=Arial size=2>Improvements and bug fixes in the GUI The user can
search for objects using regular expressions matching their names or attributes.
Both prolog and epilog are expected to be shell scripts and are added to the
generated shell script that activates firewall. See Release Notes for the list of
bug fixes and improvements. For iptables this action is translated into user-defined
chain.</FONT></DIV>
<DIV><FONT face=Arial size=2>Added support for dynamic interface addresses in
ipfilter.</FONT></DIV>
<DIV><FONT face=Arial size=2>This is not final implementation yet but it is
already does what I indended.</FONT></DIV>
<DIV><FONT face=Arial size=2>For PF this action is translated into an anchor
with the name the same as the name of the branch defined by the administrator.
Compilers for iptables, ipfw, ipf and PIX generate bunch of rules matching each
address read from the file.</FONT></DIV>
<DIV><FONT face=Arial size=2>The name of the chain is the name of the branch
choosen by administrator. Importer can properly interpret both formats.</FONT></DIV>
<DIV><FONT face=Arial size=2>See Release Notes for complete list of bugs fixed
in this release. Summary page shown in the end reflects this as failed install. This
seems to be a decent workaround. It is now possible to generate rules to mark
packets in the OUTPUT chain of the mangle table. Code has been fixed in many places
where text strings were not properly marked for localization.</FONT></DIV>
<DIV><FONT face=Arial size=2>It also comes with bugfixes and updated
localization.</FONT></DIV>
<DIV><FONT face=Arial size=2>This feature helps to work around errors in the
policy that block access to the firewall from the management workstation. Checking
"Test mode" checkbox in the installer options dialog should enable widgets that
configure automatic reboot timeout.</FONT></DIV>
<DIV><FONT face=Arial size=2>I plan on making release some time next week.
Object tree is not synchronized with firewall policy view.</FONT></DIV>
<DIV><FONT face=Arial size=2>GUI crash in a situation when one of the resource
files was missing has been fixed, code compiles and works on Solaris and few minor
bugs have been fixed in the compiler for iptables.</FONT></DIV>
<DIV><FONT face=Arial size=2>See Release Notes for the complete list. One of the
most important improvements in the web site is that it now has a "Search"
function.</FONT></DIV>
<DIV><FONT face=Arial size=2>The new web site is designed around a Firewall
Builder "cookbook", a dynamic collection of the tips and tricks, examples of the
network configurations and firewall policies that support them. Improvements in
"Find" function: administrator can now drag an object into a well in the find dialog
panel to make it search for this particular object.</FONT></DIV>
<DIV><FONT face=Arial size=2>Code has been fixed in many places where text
strings were not properly marked for localization. Just type few words in the input
field and click the button, it will scan all the documents, comments and postings
and show everything related to your query.</FONT></DIV>
<DIV><FONT face=Arial size=2>This is useful when there are many firewalls in the
tree that need to be compiled and installed in one go.</FONT></DIV>
<DIV><FONT face=Arial size=2>The GUI got confused when user enter full path to
the policy file in the "Output file name" input field in the "Compiler" tab of
firewall object dialog.</FONT></DIV>
<DIV><FONT face=Arial size=2>Safety Net Install works around this problem and
maintains communication through the tunnel at all times. Improvements and changes in
the GUI The GUI works much faster with very large object trees.</FONT></DIV>
<DIV><FONT face=Arial size=2>The name of the chain is the name of the branch
choosen by administrator.</FONT></DIV>
<DIV><FONT face=Arial size=2>This helps avoid double warning when a library is
deleted.</FONT></DIV>
<DIV><FONT face=Arial size=2>Interfaces without "ip address" in the
configuration are marked as "unnumbered" in the firewall builder object tree. This
operation also helps identify changes made to objects in two copies of the same data
file.</FONT></DIV>
<DIV><FONT face=Arial size=2>This allows fwbedit to quickly create objects and
still ensure their IDs are unique fwbedit Fwbedit can now create objects and repair
broken object database.</FONT></DIV>
<DIV><FONT face=Arial size=2>The object can be configured to read the file at
compile time or at run time.</FONT></DIV>
<DIV><FONT face=Arial size=2>Doing this only if original rule did not have
negation and we do not add any virtual addresses for NAT. We still have quite a bit
of work to do though, particularly localization has only
began.</FONT></DIV></BODY></HTML>