use $security_group_name_pattern in iptables_get_chains

[pve-firewall.git] / debian / changelog

pve-firewall (2.0-14) unstable; urgency=medium

  * fix systemd service dependencies

 -- Proxmox Support Team <support@proxmox.com>  Fri, 27 Nov 2015 10:52:57 +0100

pve-firewall (2.0-13) unstable; urgency=medium

  * allow numeric icmp types

 -- Proxmox Support Team <support@proxmox.com>  Fri, 23 Oct 2015 13:21:53 +0200

pve-firewall (2.0-12) unstable; urgency=medium

  * implement bash completions

  * convert pve-firewall into a PVE::Service class

 -- Proxmox Support Team <support@proxmox.com>  Thu, 24 Sep 2015 12:15:00 +0200

pve-firewall (2.0-11) unstable; urgency=medium

  * iptables_get_chains: fix veth device name

 -- Proxmox Support Team <support@proxmox.com>  Tue, 08 Sep 2015 07:54:35 +0200

pve-firewall (2.0-10) unstable; urgency=medium

  * new helper: clone_vmfw_conf() 

 -- Proxmox Support Team <support@proxmox.com>  Tue, 25 Aug 2015 06:47:49 +0200

pve-firewall (2.0-9) unstable; urgency=medium

  * remove firewall config file subroutine added

 -- Proxmox Support Team <support@proxmox.com>  Wed, 19 Aug 2015 15:42:51 +0200

pve-firewall (2.0-8) unstable; urgency=medium

  * adopt regresion tests for lxc containers

  * removed firewall code for openVZ

  *  Subroutine verify_rule fixed to correctly check only for "net\d+"
  interface device names

 -- Proxmox Support Team <support@proxmox.com>  Wed, 12 Aug 2015 12:01:43 +0200

pve-firewall (2.0-7) unstable; urgency=medium

  * added firewall code for lxc

 -- Proxmox Support Team <support@proxmox.com>  Mon, 10 Aug 2015 09:21:14 +0200

pve-firewall (2.0-6) unstable; urgency=medium

  * firewall ipversion comparison fix

 -- Proxmox Support Team <support@proxmox.com>  Tue, 04 Aug 2015 11:14:51 +0200

pve-firewall (2.0-5) unstable; urgency=medium

  * add ipv6 neighbor discovery and solicitation macros

  * ip6tables accepts both spellings of the word neighbor

  * added Ceph macro

 -- Proxmox Support Team <support@proxmox.com>  Mon, 27 Jul 2015 13:20:55 +0200

pve-firewall (2.0-4) unstable; urgency=medium

  * include manual page for pve-firewall

 -- Proxmox Support Team <support@proxmox.com>  Sat, 27 Jun 2015 16:26:28 +0200

pve-firewall (2.0-3) unstable; urgency=medium

  * use noawait trigers for pve-api-updates

 -- Proxmox Support Team <support@proxmox.com>  Mon, 01 Jun 2015 12:33:06 +0200

pve-firewall (2.0-2) unstable; urgency=medium

  * trigger pve-api-updates event
  
 -- Proxmox Support Team <support@proxmox.com>  Tue, 05 May 2015 15:10:24 +0200

pve-firewall (2.0-1) unstable; urgency=medium

  * recompile for debian jessie

 -- Proxmox Support Team <support@proxmox.com>  Fri, 27 Feb 2015 12:22:04 +0100

pve-firewall (1.0-18) unstable; urgency=low

  * fix alias lookup

 -- Proxmox Support Team <support@proxmox.com>  Mon, 09 Feb 2015 09:32:03 +0100

pve-firewall (1.0-17) unstable; urgency=low

  * fix restart behavior 

 -- Proxmox Support Team <support@proxmox.com>  Thu, 15 Jan 2015 06:45:58 +0100

pve-firewall (1.0-16) unstable; urgency=low

  * use new Daemon class from pve-common

 -- Proxmox Support Team <support@proxmox.com>  Thu, 18 Dec 2014 09:45:07 +0100

pve-firewall (1.0-15) unstable; urgency=low

  * bug fix: load cluster conf for host rules

 -- Proxmox Support Team <support@proxmox.com>  Fri, 12 Dec 2014 06:33:28 +0100

pve-firewall (1.0-14) unstable; urgency=low

  *  do not use ipset list chains
  
  *  remove preinst script (not needed anymore) 

 -- Proxmox Support Team <support@proxmox.com>  Fri, 05 Dec 2014 13:42:00 +0100

pve-firewall (1.0-13) unstable; urgency=low

  * fix ipset remove order

 -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Nov 2014 12:45:48 +0100

pve-firewall (1.0-12) unstable; urgency=low

  * add preinst script to clear ipset from older installation (because 
    sets cannot be swapped if there type does not match.
  
 -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Nov 2014 08:59:38 +0100

pve-firewall (1.0-11) unstable; urgency=low

  * bug fix: correctly set ipversion for aliases in verify_rule
  
  * save restore commands into files to make debugging 
    easier (/var/lib/pve-firewall/)

 -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Nov 2014 08:04:05 +0100

pve-firewall (1.0-10) unstable; urgency=low

  * add IPv6 support for VMs (hostfw is IPv4 only)

 -- Proxmox Support Team <support@proxmox.com>  Wed, 26 Nov 2014 07:00:29 +0100

pve-firewall (1.0-9) unstable; urgency=low

  * fix max ipset name name length

 -- Proxmox Support Team <support@proxmox.com>  Tue, 14 Oct 2014 16:29:34 +0200

pve-firewall (1.0-8) unstable; urgency=low

  * implement permission

 -- Proxmox Support Team <support@proxmox.com>  Mon, 08 Sep 2014 12:15:21 +0200

pve-firewall (1.0-7) unstable; urgency=low

  * proxy host rule API calls to correct node
  
  * always generate MAC and IP filter rules if firewall is enabled on NIC

 -- Proxmox Support Team <support@proxmox.com>  Thu, 26 Jun 2014 07:12:57 +0200

pve-firewall (1.0-6) unstable; urgency=low

  * ipmlement ipfilter ipsets

 -- Proxmox Support Team <support@proxmox.com>  Thu, 12 Jun 2014 08:37:08 +0200

pve-firewall (1.0-5) unstable; urgency=low

  * remove ipsets when firewall disabled

 -- Proxmox Support Team <support@proxmox.com>  Wed, 04 Jun 2014 08:50:18 +0200

pve-firewall (1.0-4) unstable; urgency=low

  * depend on iptables and ipset

 -- Proxmox Support Team <support@proxmox.com>  Wed, 04 Jun 2014 06:45:33 +0200

pve-firewall (1.0-3) unstable; urgency=low

  * change dh_installinit order (register pvefw-logger before pve-firewall)

 -- Proxmox Support Team <support@proxmox.com>  Wed, 04 Jun 2014 06:24:21 +0200

pve-firewall (1.0-2) unstable; urgency=low

  * add experimental nflog logging daemon

 -- Proxmox Support Team <support@proxmox.com>  Thu, 13 Mar 2014 08:27:01 +0100

pve-firewall (1.0-1) unstable; urgency=low

  * initial package

 -- Proxmox Support Team <support@proxmox.com>  Mon, 03 Mar 2014 08:37:06 +0100