File: ChangeLog

package info (click to toggle)
nufw 2.4.3-2.2
  • links: PTS
  • area: main
  • in suites: wheezy
  • size: 5,728 kB
  • sloc: ansic: 32,174; sh: 10,146; python: 4,176; makefile: 965; perl: 630; lex: 176; php: 168; yacc: 117; xml: 34
file content (587 lines) | stat: -rw-r--r-- 27,253 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
2.4.3 (2010/08/13)
	- libnuclient: switch to next best mechanism if first one fails (Eric Leblond)
	- libnuclient: if auth fails with GSSAPI, retry with PLAIN (Pierre Chifflier)
	- libnuclient: avoid strlen usage at each iteration. (Eric Leblond)
	- libnuclient: tcp table reading optimisation (Eric Leblond)
	- libnuclient: fix segfault when computing hash of a deleted file (Pierre Chifflier)
	- nuauth: fix period handling (Eric Leblond)
	- nuauth: fix nufw counter leak (Eric Leblond)
	- nuauth: factorize nufw counter increase. (Eric Leblond)
	- nuauth: use atomic operation for nufw counter (Eric Leblond)
	- nuclient: add option to give SASL mech list (Pierre Chifflier)
	- nuauth: add option -q (quiet) to disable logging to stdout (Pierre Chifflier)
2.4.2 (2010/05/27)
	- log_mysql: don't over stress nuauth after DOS mode (Eric Leblond)
	- libnuclient: fix memory leak. (Eric Leblond)
	- nuauth: avoid double logging of some packets (Eric Leblond)
	- nussl: add support for several CA certificates in one PEM file (Pierre Chifflier)
	- Revert "NuSSL: fix sub CA" (Pierre Chifflier)
2.4.1 (2010/05/12)
	- libnussl: fix sub CA support
	- libnuclient: fix proc hash handling
	- nuauth_command: add thread pool information
	- nuauth_command: add "resfresh crl" command
2.4.0 (2010/03/02)
	- libnuclient: treat a read error
	- nussl: fix DN building in openssl mode
	- nuauth: set timestamp for connection message
	- log_ulogd2: update plugin
2.4.0-rc1 (2010/02/11)
	- pgsql: authentication failure logging
	- libnuclient: fix file descriptor leak
	- libnuclient: CPU usage optimization
	- nufw: switch libnetfilter_conntrack code to new API
	- log_ulogd2: update plugin
	- nuauth: don't reject packet when appname is invalid
	- client proto: negotiate protocol version
2.4.0-beta1 (2009/08/21)
	- Support for plugin in libnuclient
	- Protocol extension via plugin
	- configuration file for nufw and client
	- nussl:  TLS abstraction library
	- nuconfparser: Configuration library
	- nubase: Common use library
	- Client compute hash of application for advanced filtering
	- Auth quality support
	- Improved client-authentication server protocol
	- log_ulogd2 module: log packet via ulogd2
	- postauth_localuser module: sample postauthentication protocol
	- NuFW: introduce protocol client version 5 to add authentication
	  failure message on client side
	- Nuauth: add a flag to be able to disable log on a per-rule basis
2.2.10 (2007/12/04)
	- log_mysql: fix log prefix (avoid double ":" when used with nuface)
	- nuauth: fix crash when nufw is misconfigured and sends improper packet
	- improved BSD compatibility
2.2.9 (2007/11/26)
	- nuauth: leave when a module fails to load
	- nuauth: correctly fills headers of messages to nufw
	- plaintext module: parse needed files at start
	- nufw: ignore return of nfq_unbind_pf() due to change in linux 2.6.23.
	- nuauth: introduce nuauth_proto_wait_delay to get around a nasty
	  connection problem on laggy network.
2.2.8 (2007/11/07)
	- libnuclient, nuauth: fix protocol 2.2 on big endian.
	- log_mysql: add documentation file and add a IPv4 and an IPv6 dump
	- build system: improve autoconf compliance
	- nufw: fix infinite loop when nufw has no support for conntrack but
	  when nuauth try to kill connection
2.2.7 (2007/10/29)
	- nuaclgen: add support for userid based ACLs.
	- nuauth: fix SASL rare crash on client authentication failure (sasl_dispose)
	- nuauth: fix command line parser: -p and -l were limited to 3 characters
	- nuauth: fix a buffer overflow (3 bytes) in base64 encoding function
	- nuauth: improve certificate file error handling
	- nuauth: leaver if socket command file is unavailable
	- pam_nufw: fix memset usage
2.2.6 (2007/10/09)
	- nuauth: fix rare bug causing infinite loop
	- Add auth_mysql module : authentication and ip authentication against
	a MySQL database
	- nuauth: introduces nuauth_single_user_client_limit and nuauth_single_ip_client_limit
	- nuauth: add capability to bind on multiple addresses
	- nuauth: can now have user-id based acls
2.2.5 (2007/09/10)
	- fix clients' Makefile for compatibility with automake 1.10
	- bugfix: disallow change of ipauth option on reload to avoid a crash
	- fix race condition (multi-threading) in system module (PAM)
2.2.4 (2007/08/20)
	- plaintext: fix parsing of IPv4 address
	- log_syslog: log with IPv4 address and not IPv4 in IPv6
	- nuauth: don't log packet appended to a connection
	- nuauth: improve some debug areas settings
	- nuauth: fix period handling
	- log_mysql, log_pgsql: fix a rare crash related to improper format
	string for 64 bits counters
2.2.3 (2007/08/01)
	- libnuclient: fix compilation when used in external client.
	- nufw: ask kernel to drop packet when nuauth can't be reached.
	- nuauth: add some check when dealing with certificate expiration.
	- NuFW: recover ICMP reject functionnality.
	- log_mysql: handle reconnect as mysql default as changed with 5.0.
	- Test system: add test of ICMP reject functionnality.
	- nuauth: fix closing of user session in database logging modules.
2.2.2 (2006/06/26)
	- log_mysql: fix logging of connection closing
	- NuFW: fix incompatibility between i386 and x86_64 due to alignement
	  problem. This break compatibility with previous NuFW 2.2.
	- nufw: for TCP connection, only send message when session switch to
	  ESTABLISHED and get destroyed.
	- nuauth: change criticity of some debug message to ease detection of
	  protocol mistakes.
	- NuFW: separate version number of client and nufw protocols
	- NuFW: switch protocol number to v22_2 to be able to warn about
	incompatibility probem.
	- nuauth: log IP in IPv4 format when they are IPv4
	- log_syslog: log authentication failures
	- nuauth: fix crash when nufw sends non SYN packet
2.2.1 (2007/06/17)
	- port change: IANA has assigned 4128 and 4129 to nufw and nuauth
	- x509_std: code cleaning and fix potential crash
	- NuFW: fix compilation on some distribution (for AMD64 architecture)
	- client manager: close the client socket even if shutdown fails
	- pam_nufw: fix free(home) in _get_runpid()
	- nutcpc: fix creation of .nufw directory
	- nuauth: fix memory leak in debug messages
2.2.0 (2007/05/29)
	- log_mysql: fix prefix setting in a sub case.
	- nuauth: improve doxygen documentation.
2.2.0-rc3 (2007/05/23)
	- By default, do not compile pam_nufw anymore.
	- nutcpc does now check presence of certificate authority.
	- Complete rewrite of debian packaging.
	- log_nuprelude: Add user info to idmef message when there is
	authentication failure.
	- nuauth: implement acl ordering (prio_to_nok=2)
	- mark_flag: new module used to modify packet mark using acl
	indication
2.2.0-rc2 (2007/04/27)
	- nuauth: add declaration of thread_pool_push
	- ldap: optimize filter
	- NuFW is now compatible with automake1.10
	- nufw: fix problem for host with libnetfilter_queue
	but without the latest iface related modifications.
	- nutcpc: add option -a to specify nuauth DN in certificate.
	- log_mysql: set protocol information in compatibility mode
	- libnuclient: restore some interesting features of 2.0 API
	- NuFW: fix certificate authentication
	- tests: new system for doing unitary tests on NuFW
	- log_mysql: add mysql_admin_bofh option to destroy user connections
	when session finished
	- mark_field: set mark on packet with glob matching on packet fields
	- nuauth: fix possible problem on nufw disconnect on busy systems
	- nuauth: can now have mandatory per-certificate authentication
	- ldap module: add new option ldap_use_ipv4_schema to have compatibility with
	  IPv4 tools
	- nuauth: fix crash when nufw send concatenated requests
	- nuauth: improve debugging messages
	- nuauth: fix bug when user packet comes first (nufw disconnection).
2.2.0-rc1 (2007/03/08)
	- log_mysql: add option to log by default in SQL
	database with IPV4 schema
	- libnuclient: add nu_get_home_dir function which is not
	dependant of HOME environment variable
	- nufw: fix compilation in ipq mode (workaround ipq.h problem)
	- nufw: modify interface name fetching code
	- NuFW: Port of 2.0 modifications (from r2715 to r2728)
	- implement globbing matching in application filtering
	- add support for flags on acl
	- implement async logging following flag setting
	- cache is now resetted during reload
	- nuauth: command mode through a unix socket and a python script
	is given as exemple
	- nuauth: modify thread pools system (better handling of signals)
	- nufw: add -A to set debug areas and adjust areas in code
2.1.1 (2007/01/03)
	- suppress ldap authentication code
	- add support for log prefix
	- add support for guest group
	- mark_group: new module dedicated to packet marking
	- NuFW: doxygen documentation improvement
	- NuFW: support for interface name transmission from kernel to nuauth
2.1.0 (2006/09/01)
	- fix period handling (user OR and and AND between period item of a
	  period)
	- fix memory leak in ldap module
	- IPv6 support:
	  - clients, nufw and nuauth are able to communicate using IPv4 or IPv6
	  - nuauth store all addresses in IPv6 structure, IPv4 use format
	    "::ffff:[ipv4]"
	  - MySQL store IP address in BINARY(16) instead of INTEGER field
	  - Prelude, MySQL, PostgreSQL, etc. modules support IPv6 addresses
	  - Plaintext module is able to parse IPv4 and IPv6 addresses
	  - Rejectting a packet can send ICMP(v4) or ICMPv6 (depending on source
	    IP address type)
	  - support ICMPv6 protocol
	- new client API, main changes:
	  - don't use callback to get username, password and tls password anymore:
	    directly send the strings
	  - don't delete the session when loosing connection: just delete old TLS
	    session (and socket) using a "reset" function
	  - keep same Diffie Hellman parameters for the session (don't regenerate
	    them on each reconnection): that's good because it looks to use lot of
		CPU (and maybe /dev/random)
	  - the client send username and password in UTF-8
	- don't make core dump on fatal errors (in nuauth, nutcpc and pam_nufw)
	- libnuclient: use gcrypt_malloc_secure() to disallow username and
	  password to be moved to the swap
	- protocol v3 compatibility (for client and nufw server)
	- Introduce two new modules type:
	 - user_session_modify : called when auth is successfull this module
	 can modify all params (usefull to set expire or something else)
	 - finalise_packet: modify packet content just before decision (useful
	 to set mark and/or expire according to advanced policy)
	 - Accounting capabilities: conntrack is now dumping accounting
	 information
2.0 (2005/05/22)
	- nuauth : fix period handling
	- libnuclient : fix crash when specified hostname is unvalid
	- nutcpc : do not try to reconnect if password has changed, this will
	  avoid to block user account after multiple retries
	- pam_nufw : initial release
2.0-rc2 (2006/05/15)
	- nuauth : add sanity check on type of field contained in a packet
	- libnuclient : fix MacOSX port
	- nuauth SQL user session logging : close opened user session when leaving or when starting
	- nuauth modules : systematic use of static declared function to avoid conflict
2.0-rc1 (2006/05/04)
	- nufw : fix possible problem with connection fixed timeout and NAT
	- nufw : add -M option to use mark to select conntrack event to be sent to
	  nuauth
	- NuFW : fix hello mode authentication
	- doxygen documentation improvement
	- nuauth : add antispoofing test to hello mode authentication
2.0-beta2 (2006/06/27)
	- nuauth : fix period reloading
	- nuauth : fix logging as UNAUTHENTICATED DROP of established packet
	- nuauth: fix bug in policy test
2.0-beta1 (2006/04/24)
	- nuauth : bugfix on the PostGreSQL log module thanks to Julian Reich
	- nuauth :fix bug in max client number test
	- nuauth|nufw : really close socket in all cases now
	- nuauth : certificate checking improvement
	- nuauth : separate sasl and tls code
	- nufw: cleaning of tls end of session
	- linuclient : introduce nu_client_global_init to avoid multiple
	  global initialisation of gnutls and sasl
	- define protocol version 3 : protocol version 2 with a fix on
	  endianess
	- nuauth : fix crash when multiple logging modules are used (if one of
	  them is mysql)
	- libnuclient : free connection table
	- libnuclient : fix multithreaded code
	- nuauth: store user identifiers in 32 bits (and not 16), but still send
	  user id. in 16 bits to nufw (with a warning)
	- new configure option: --with-perf-display, display benchmark of user
	  authentification
	- nuauth: fixes about buffer underflow, check that received packet are big
	  enough before casting them to structure
	- nufw and nuauth: fix buffer overflow caused: replace strncpy with the
	  new macro SECURE_STRNCPY which always write '\0' on last position, and
	  replace call like sscanf(..., "%10s", ...) with SECURE_STRNCPY
	- nufw: whole code is documented using doxygen syntax
	- nufw and nuauth: use shorter syntax to display debug messages
	- nufw and nuauth: fixes to make them compile in strict ANSI mode
	  with gcc (using -ansi option)
	- nufw and nuauth: fix memory leaks, some of them detected with the great
	  tool Valgrind
	- nuauth: reorganize source code, split big function in small
	  sub-functions and move some functions in new files
	- nufw and nuauth: remove dead code and unused variable/macro
	- nufw and nuauth: use more explicit names for variables and structures,
	  rename for example 'c' to 'socket'
	- nuauth, module script: fix a security bug, quote script arguments
	- small changes to make flawfinder and rats tools happy
	- replace obsolete usleep() with nanosleep()
	- Introduce lock in tls code because gnuTLS is NOT really threadsafe (does
	  NOT support thread sending on the same TLS session)
	- stronger security in mysql and  postgresql modules: use secure_sprintf()
	  instead of classic sprintf() and quote all user strings
	- stronger security in script module: quote all arguments
	- fix some minor bugs detected by Valgrind
	- check inet_ntop() and inet_addr() errors
	- small changes to make nufw and nuauth source code ANSI C compliant
	- fix gcc compilation flags: use -O0 in bug mode instead of -02, and
	  detect all warnings with -Wextra (or -W for gcc < 4.0)
	- use pointer and not object during logging
	- bugfix:nuauth: don't crash anymore if configuration file doesn't exist
	- nuauth: fix gnutls problem (multithread writing and reading)
	- nuauth: multiple modules with separate conf
	- nuauth: stop threads (and thread pools) before exiting NuAuth. Use a
	mutex to ask a thread to stop. Each thread use timeout of one second,
	and don't use any blocking function anymore (use function with timeout
	instead: eg. use g_async_queue_timed_pop() instead of g_async_queue_pop())
	- nuauth: port of system_convert_username_to_lowercase option (from 1.0)
	- NuFW : ICMP reject via decision 3.
	- xml_defs : new module for periods definition
	- nuauth : add nuauth_module_certificate_check and
	nuauth_module_certificate_to_uid configuration variables (work
	sponsorised by EOLE)
	- x509_std : new module with standard check and function for
	nuauth_module_certificate_check and nuauth_module_certificate_to_uid
	- nuauth : modify config file parsing to avoid memory leak
	- nuauth : add option nuauth_debug_area to be able to specify logging area
	- nuauth: add Prelude IDS module which can log packet events and user
	  session.
	- nuauth : nuauth_reject_authenticated_drop option is now here to
	choose if we drop or reject ACL that match IPV4 header but when user
	is not in the group.
	- nuauth : period checking is now done in main code (not in module
	anymore) to avoid problem with cache.
	- move conffile.h from src/nuauth/include to src/nuauth and suppress
	  src/nuauth/include
1.1.3 (2006/01/25)
	- nutrackd : PostGreSQL support
	- Fixes in the PostGreSQL log module (removed the useless server_port
	variable, fixed a very stupid strlen bug on port)
	- nufw|nuauth : expiration of connection is now possible
	- nufw : new switch -C to handle conntrack destroy event by sending a
	  message to nuauth. This is mandatory for connection expiration
	  system.
	- nuauth : handle nufw destroy message
	- nufw : restore compilation of nufw in libipq mode
	- nuauth : introduce a ppol of thread for user session logging
	- nuauth : fix a stupid but critical bug on module reloading
	- nuauth : introduce nuauth_number_session_loggers to specify the
	  number of threads in the user session logging pool
	- nuauth : change type of limited_connection_handler to suppress
	  compilation warning
	- nuauth : new hook for time period definition
	- plaintext : add period check
	- plaintext : add example for time period creation (define '5x8' period)
	- nutcpc : working on freebsd :-) (but mono user for the moment)
	- nutcpc : working on Mac OS X :-) (but mono user for the moment)
	- nuauth : user connect policy (see config file for detail)
	- libnuclient : fix typo that could cause a hang
	- nuauth : a user session duration can now be set
1.1.2 (2005/12/22)
	- nufw : new threads architecture
	- libnuclient : fix potential problem with new thread architecture
	- nuauth : modules reloading
	- nuauth : config reloading (partial)
	- nutrackd : config file option added and an example conf is now
	  provided
1.1.1 (2005/12/14)
	- new session logging module system (hook at user connection and
	  disconnection)
	- libscript : new session logging module
	- log_mysql module : now able to log connection event to a dedicated
	  table
	- libnuclient : new threads organisation, it should now be thread-safe
1.1.0 (2005/12/06)
	- full "a posteriori" IP authentication for mono user system via hello message system
	- nufw : port to libnetfilter_queue
	- NuFW : many small fixes in the debian/ subdir : start in correct runlevels,
	have smoother init scripts.
	- nutcpc : add -l option to disable use of lock
	- NuFW : all exchanges between clients and nuauth are now done in
	UTF-8 by default. Use --with-utf8 at configure time to select this
	behaviour on client side.
	- plaintext module : cleaning and icmp support
	- increase internal message usage instead of sending directly
	structure to queue.
	- nufw : get rid of old UDP protocol
	- nuauth : fix double free problem linked with string_escape function
	- libnuclient : new algo in push mode
	- libnuclient : UDP support, need recent kernel
	- nuauth : multi modules support
	- nutrackd : brand new connection tracking system based on
	libconntrack
1.0.11 (2005/07/26)
	- NuFW : port to big endian architecture. It has been tested on a
	powerpc.
	- nuauth : fix a bug that causes nuauth to crash when launched with an
	empty nuauth.conf
	- nufw : better handling of non-IP packet
	- nufw : added option -n to permit a strict match of the nuauth
	certificat
	- nuauth : client certificat check is stricter
	- nuauth : better handling on incorrect user OS announce
1.0.10, "Michel Rocard" release (2005/07/13)
	- libnuclient : ignore SIGPIPE to avoid crash when HELLO packet can
	not be sent
1.0.9 (2005/07/04)
	- NuFW : added a USER_HELLO message to be able to detect broken
	connnection really fast.
	- NuFW : Documentation update
	- nuauth : user packet decoding code cleanup
1.0.8 (2005/06/10)
	- nutcpc : suppress useless opening of /dev/random in nu_client_init2
1.0.7 (2005/06/07)
	- nuauth : remove a double free in postgresql module
1.0.6 (2005/06/02)
	- libnuclient : add copyright in nuclient.h
	- libnuclient : add code for integration of libnuclient in C++ project
	- nutcpc : add -V flag to print version
	- nuauth : build fixes for gcc 3.4 (was checking for the return of some
	  void functions)
	- nuauth : solve problem whith pgsql log module in
	nuauth_log_users_strict mode
	- libnuclient : add TCP_KEEPALIVE option on socket
	- nutcpc : add -k option to kill current nutcpc
1.0.5 (2005/05/16)
	- added nuauth_log_users_without_realm : remove realm from username
	before logging
	- libnuclient : now authenticate packet which are SYN retransmit
1.0.4 (2005/05/09)
	- tls_sasl_worker number of threads is set from a variable now.
	- timeout on authentication negotiation can now be set with
	nuauth_auth_nego_timeout option
	- nufw : tls session ending and restart is now treaded correctly
	- libnuclient : handle an error case as it should be
1.0.3 (2005/04/29)
	- cleanly get out of sasl negotiation
	- suppress useless debug messages
	- client lib now does not require certificates when nu_client_init is
	  called (nuapplet case)
	- add a check of mysql ssl function existence in configure
	- clean tls and sasl related code
	- add mutex in pam module because pam_winbind is not thread safe
	- correct MySQL and Pgsql log modules to log unauthenticated drop
	- solve restart problem by setting option SO_REUSEADDR on socket
	- add KEEPALIVE on connection socket to detect dead connections
	- add system_convert_username_to_uppercase option to have username convert
	automatically to uppercase if needed
	- should fix an endianess problem on PPC (for client lib)
1.0.2 (2005/03/29)
	- add nuauth_number_loggers in config file
	- nufw can now verify nuauth server certificates (specify ca file with -a
	  to do so)
	- structure.h is now in the nufw directory as it is only used by it
	- nuauth certificat check is now more strict
	- libnuclient does not require a certificate and a key, this is now
	optional
	- fix crash of nufw in debug mode 7 and over (when running as daemon)
	- plaintext module fix : now correctly answer when an acl with no
	group is found
1.0.1 (2005/03/16)
	- log strict was not implemented strictly, this is now really strict
	- small patch applied to cleanly compile on mipsel (thanks to Florian
	Fainelli)
1.0.0 (2005/03/08)
	- add tags DEBUG_ENABLE to speed up things
	- add configure	option --with-debug
	- suppress some compilation warnings
	- remove useless AC_DEFUN in configure.ac
	- nuaclgen display modified for equality filter
1.0.0-rc2 (2005/03/01)
	- works on autoconf to solve excessive linking
	- nufw answer correctly to -V and -h
	- nufw compilation is not done if libipq is not present
	- authentication by certs now fallback to password based
	authentication to support generic certs
	- nuauth tls server for nufw now correctly handles violent disconnect
	- nuauth tls server for client handles better network problem
1.0.0-rc1  (2005/02/16)
	- get around bug link with g_message
	- initial 64bit port
	- code cleaning
	- nutcpc : support renegociation
	- logging : restore user numeric support
	- pam compilation is now optional
	- plaintext : 64 bit port
	- logging : finish app and os logging
	- nuauth : add support for multiusers client
	- libnuclient : correct packet generation code
	- rework cache code and make it optionnal
0.9.6 (2004/12/14)
	- mysql and postgresql log module updates  : added username where
	missing, now supporting the client_os and client_app SQL fields. See
	doc/MIGRATING-TO-0.9.6 for upgrade instructions.
	- ident module fix
	- ldap module : schema change and appname and osname
	- nuaclgen : switch to use equality schema by default
	- SQL logging : application name and osname support
	- TLS : certificat verification support
	- TLS : complete option management
	- certificate authentication (SASL EXTERNAL mechanism)
	- system authentication module (pam+system)
	- nu_client_init2 : use callbacks with sasl and tls
0.9.5 (2004/10/20)
	- infrastructure for ip authentication
	- ident module for ip authentication (experimental, does not work when
	nuauth is in daemon mode)
	- ipq.h problem with redhat solved
	- fix bugs related to acl check when ready
	- configure.ac modification for module support
	- user check module now receive user@domain
	- plaintext module : use lists of ports (or ports ranges) in the plaintext ACLs
	- plaintext module : Add multiple IP addresses (or subnet) in a same rule.
0.9.4 (2004/10/04)
	- new push system : after having received packet, nuauth warns clients
	on a concerned computer that they need to check if they have emit a packet.
	- use private datas in queue system for cache answer
0.9.3 (2004/09/23)
	- libnuclient : reconnect is automatic
	- libnuclient : better error handling via errno
	- nufw : signal handling for verbosity
	- nuauth : application filtering support (modules : plaintext)
	- nuauth : OS filtering support (modules : plaintext)
0.9.2 (2004/09/08)
	- change unused field id_gw to a packet_length field in nufw->nuauth
	packet.
	- libnuclient works correctly now (nuapplet and nutcpc are ok)
	- nufw_gw_addr is now a list : first entry is udp server AND all
	entries are authorized nufw servers
	- more strict on cache usage accounting (atomic operation)
	- intercept sigpipe on nufw
0.9.1 (2004/09/02)
	- nuauth : now outputs some information (through g_message) when receiving signal POLL
	- nuauth : signal USR1 increases log level, USR2 decreases it.
	- client datas are now stored in a hash (this solve a bug on connect)
	- include necessary Makefile.am in the doc directory
	- TLS exchange between nufw and nuauth
	- multiple nufws per nuauth
0.9.0 (2004/08/26)
	- protocol 2
	- use TLS+SASL
	- cache system for acl
	- per connection datas for user
0.8.2 (2004/07/30)
	- user logging level is finally taken into account
	- connectio hash code optimisation
	- some man pages and docs
0.8.1b (2004/07/20)
	- correct nuclient.h header
0.8.1 (2004/07/14)
	- client library
	- little code and packaging cleaning
0.8 (2004/07/02)
	- username logging in SQL database when log sync is enable
	- security fix on nufw
0.7.1 (2004/06/14)
        - add option for SSO feature : log before granted packet
        - major code cleaning
0.7 (2004/03/31)
        - SSL encryption between client and server
        - correct handle of a limit case on reemission
        - optimisation of ldap module
0.6.5 (2004/03/11)
        - correct problem with bad packets
        - optimisation of hash related code
        - warning suppression
        - LDAP and mysql with SSL support
        - nutcpc improved
0.6.4 (2004/01/09)
        - correct locking problems
        - don't exit on socket read problem
0.6.3 (2004/01/07)
        - change syslog log module output for established packet
        - give a nutop.conf example
0.6.2 (2004/01/05)
        - correct bug on user packet parsing
        - "clean" rewrite of search_and_fill function
        - packet timeout is checked now
0.6.1 (2003/12/09) :
        - Correct bug on acl DROP
        - Clean lock system
        - NuFW send Control message when needed
0.6.0 (2003/12/02):
        - Mysql and PostgreSQL users activity logging fully functionnal and
          tested
        - Updated Config file so it suits all possible features
        - Debugged some problems on ACL checking
0.5.4 (2003/11/19)
	- nuauth conntrack modification
        - config file stuffs
0.5.3 (2003/10/29)
	- nuauth conntrack modification
0.5.2 (2003/10/20)
	- added capability to mark packet with userid
0.5.1 (2003/10/02)
	- new GDBM user check modules
	- external modules structure fixed
	- mutex and memory leak problem solved
0.5 (2003/09/29)
	- configuration file for nuauth
	- external auth modules for nuauth
	- using syslog
0.4 (2003/09/17)
	- code cleaning
	- improvement in protocol security
0.3 (2003/09/01)
	- first complete release
0.1a (2003/07/04)
	- use of autoconf
	- a miniserver is provided