1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
arno-iptables-firewall (2.0.1.b-1) experimental; urgency=low
* The package now supports a conf.d-style configuration option that
makes it possible to tweak the configuration without editing the default
configuration files. Consequently, the Debconf-based configuration settings
(if enabled) are no longer written into a custom 'debconf.cfg', but use
this mechanism also. Additional configuration snippets can be placed into
/etc/arno-iptables-filewall/conf.d. All files with extension '.conf' will
be sourced after the main configuration file and either overwrite or
extend the default.
-- Michael Hanke <mih@debian.org> Tue, 10 Apr 2012 10:58:18 +0200
arno-iptables-firewall (1.9.2.a-1) unstable; urgency=low
* With this release the syntax of the config file is slightly changed. From
now on the '#' (hash-character) is used as the new separator for interface
restrictions (i.e. eth0#....).
-- Michael Hanke <michael.hanke@gmail.com> Tue, 09 Jun 2009 10:12:23 +0200
arno-iptables-firewall (1.9.0.a-1) unstable; urgency=low
* The syntax and layout of the configuration file has been changed. Several
variable names have been modified, but the most notable difference is the
switch from ':' to '~' as port separator string. Although most
installations that exclusively use the debconf-managed configuration
settings should also work with this version, it is nevertheless recommend
to verify the firewall setup before reenabling the firewall after
upgrading. more information is available in
/usr/share/doc/arno-iptables-firewall/README.gz
* The 1.9 branch now uses a leightweight init.d script without a verbose
status dump during startup. The 'old' status report is available when
manually starting the firewall using /usr/sbin/arno-iptables-firewall.
Additionally, this script, as well as the init.d scripti, provides a details
iptables configuration dump via the 'status' command.
* A default rsyslog configuration (and corresponding logrotate setup) for
firewall-related messages is has been added. Such messages will now be
logged into /var/log/arno-iptables-firewall.
-- Michael Hanke <michael.hanke@gmail.com> Fri, 20 Feb 2009 07:31:15 +0100
arno-iptables-firewall (1.8.8.l-1) unstable; urgency=low
* The location of the firewall plugins has changed. The plugins itself are
now placed in /usr/share/arno-iptables-firewall/plugins, while their
configuration files remain in /etc/arno-iptables-firewall/plugins.
Unmodified plugins are silently moved on package upgrade. If any of the
plugins were modified, the modified plugin is preserved in
/etc/arno-iptables-firewall/plugins (with a '.dpkg-old' suffix). However,
only plugins in the new location will be used by the firewall and custom
modifications have to be updated manually.
-- Michael Hanke <michael.hanke@gmail.com> Fri, 25 Jan 2008 11:20:04 +0100
arno-iptables-firewall (1.8.8-1) unstable; urgency=low
* The location of the config files has been changed. All files are now
located in /etc/arno-iptables-firewall/. Config files of previous package
versions are automatically moved into the new location and any
customizations will be preserved. This includes MAC filter lists and host
blacklists as well as custom iptables rules.
-- Michael Hanke <michael.hanke@gmail.com> Thu, 5 Oct 2006 16:07:34 +0200
|
