debian/changelog

   1 pve-firewall (3.0-11) unstable; urgency=medium
   2
   3   * #1764: rename 'ebtales_enable' option to 'ebtables'
   4
   5  -- Proxmox Support Team <support@proxmox.com>  Wed, 06 Jun 2018 16:18:13 +0200
   6
   7 pve-firewall (3.0-10) unstable; urgency=medium
   8
   9   * fix #1764: handle existing ebtables rules and allow disabling ebtables
  10
  11   * ebtables handling can be disabled via /etc/pve/firewall/cluster.fw's new
  12     ebtables_enable option.
  13
  14  -- Proxmox Support Team <support@proxmox.com>  Tue, 29 May 2018 15:14:33 +0200
  15
  16 pve-firewall (3.0-9) unstable; urgency=medium
  17
  18   * fix creation of ebltables FORWARD rule entry
  19
  20  -- Proxmox Support Team <support@proxmox.com>  Thu, 17 May 2018 14:41:27 +0200
  21
  22 pve-firewall (3.0-8) unstable; urgency=medium
  23
  24   * add ebtables support for better MAC filtering
  25
  26  -- Proxmox Support Team <support@proxmox.com>  Wed, 11 Apr 2018 14:25:41 +0200
  27
  28 pve-firewall (3.0-7) unstable; urgency=medium
  29
  30   * support distinct source and destination multi-port matching
  31
  32   * multi-port matching: when specifying the same list of ports for source and
  33     destination require them both to match, rather than one of them, as this
  34     was rather unexpected behavior
  35
  36  -- Proxmox Support Team <support@proxmox.com>  Mon, 12 Mar 2018 14:58:08 +0100
  37
  38 pve-firewall (3.0-6) unstable; urgency=medium
  39
  40   * fix #1319: don't fail postinst with masked service
  41
  42   * debian: switch to compat 9, drop init scripts, drop preinst
  43
  44   * check multiport limit in port ranges
  45
  46   * build: use git rev-parse for GITVERSION
  47
  48  -- Proxmox Support Team <support@proxmox.com>  Thu, 08 Mar 2018 13:53:11 +0100
  49
  50 pve-firewall (3.0-5) unstable; urgency=medium
  51
  52   * fix issue with disabled flag not being honored within groups
  53
  54  -- Proxmox Support Team <support@proxmox.com>  Thu, 07 Dec 2017 08:31:42 +0100
  55
  56 pve-firewall (3.0-4) unstable; urgency=medium
  57
  58   * fix issues with ipsets reloading unnecessarily or too late
  59
  60   * fix some typos in the logs
  61
  62  -- Proxmox Support Team <support@proxmox.com>  Thu, 16 Nov 2017 11:41:56 +0100
  63
  64 pve-firewall (3.0-3) unstable; urgency=medium
  65
  66   * Fix #1492: logger: use current timestamp if the packet doesn't have one
  67
  68  -- Proxmox Support Team <support@proxmox.com>  Tue, 12 Sep 2017 14:43:06 +0200
  69
  70 pve-firewall (3.0-2) unstable; urgency=medium
  71
  72   * Fix #1446: remove masks in case the package had previously been removed but
  73     not purged.
  74
  75   * improve logging on errors in the firewall configuration
  76
  77   * forbid trailing commas in lists as iptables-restore doesn't support them
  78
  79  -- Proxmox Support Team <support@proxmox.com>  Mon, 17 Jul 2017 15:24:40 +0200
  80
  81 pve-firewall (3.0-1) unstable; urgency=medium
  82
  83   * rebuild for Debian Stretch
  84
  85  -- Proxmox Support Team <support@proxmox.com>  Thu, 9 Mar 2017 14:04:17 +0100
  86
  87 pve-firewall (2.0-33) unstable; urgency=medium
  88
  89   * ipset: don't allow zero-prefix entries
  90
  91  -- Proxmox Support Team <support@proxmox.com>  Tue, 29 Nov 2016 12:18:04 +0100
  92
  93 pve-firewall (2.0-32) unstable; urgency=medium
  94
  95   * improve search for local-network
  96
  97  -- Proxmox Support Team <support@proxmox.com>  Tue, 29 Nov 2016 06:35:08 +0100
  98
  99 pve-firewall (2.0-31) unstable; urgency=medium
 100
 101   * don't try to apply ports to rules which don't support them
 102
 103  -- Proxmox Support Team <support@proxmox.com>  Thu, 06 Oct 2016 08:31:51 +0200
 104
 105 pve-firewall (2.0-30) unstable; urgency=medium
 106
 107   * add multicast DNS to the list of Macros
 108
 109   * add missing parameter descriptions
 110
 111   * build-depends: add dh-systemd
 112
 113  -- Proxmox Support Team <support@proxmox.com>  Fri, 16 Sep 2016 08:53:16 +0200
 114
 115 pve-firewall (2.0-29) unstable; urgency=medium
 116
 117   * prevent overwriting ipsets/sec. groups by renaming
 118
 119  -- Proxmox Support Team <support@proxmox.com>  Fri, 03 Jun 2016 16:46:10 +0200
 120
 121 pve-firewall (2.0-28) unstable; urgency=medium
 122
 123   * use pve-common's ipv4_mask_hash_localnet
 124
 125   * fix allowed group name length
 126
 127   * make group digest stable
 128
 129  -- Proxmox Support Team <support@proxmox.com>  Fri, 03 Jun 2016 11:01:47 +0200
 130
 131 pve-firewall (2.0-27) unstable; urgency=medium
 132
 133   * fix #972: make PVEFW-FWBR-* rule order stable
 134
 135  -- Proxmox Support Team <support@proxmox.com>  Tue, 17 May 2016 07:59:52 +0200
 136
 137 pve-firewall (2.0-26) unstable; urgency=medium
 138
 139   * fix #988: set rp_filter=2
 140
 141  -- Proxmox Support Team <support@proxmox.com>  Mon, 09 May 2016 10:01:28 +0200
 142
 143 pve-firewall (2.0-25) unstable; urgency=medium
 144
 145   * fix #945: add uninitialized check in lxc ipset compilation
 146
 147  -- Proxmox Support Team <support@proxmox.com>  Thu, 21 Apr 2016 09:58:33 +0200
 148
 149 pve-firewall (2.0-24) unstable; urgency=medium
 150
 151   * Build-Depend on pve-doc-generator
 152
 153   * generate manpage with pve-doc-generator
 154
 155  -- Proxmox Support Team <support@proxmox.com>  Wed, 06 Apr 2016 10:52:45 +0200
 156
 157 pve-firewall (2.0-23) unstable; urgency=medium
 158
 159   * use only the top bit for our accept marks
 160
 161  -- Proxmox Support Team <support@proxmox.com>  Fri, 01 Apr 2016 07:35:38 +0200
 162
 163 pve-firewall (2.0-22) unstable; urgency=medium
 164
 165   * Use cfs_config_path from PVE::QemuConfig
 166
 167  -- Proxmox Support Team <support@proxmox.com>  Tue, 08 Mar 2016 11:47:40 +0100
 168
 169 pve-firewall (2.0-21) unstable; urgency=medium
 170
 171   * added new 'ipfilter' option
 172
 173  -- Proxmox Support Team <support@proxmox.com>  Thu, 03 Mar 2016 09:43:39 +0100
 174
 175 pve-firewall (2.0-20) unstable; urgency=medium
 176
 177   * fix 901: encode unicode characters in sha digest
 178
 179  -- Proxmox Support Team <support@proxmox.com>  Mon, 29 Feb 2016 12:40:14 +0100
 180
 181 pve-firewall (2.0-19) unstable; urgency=medium
 182
 183   * Add radv option to VM options
 184
 185  -- Proxmox Support Team <support@proxmox.com>  Sat, 27 Feb 2016 10:24:42 +0100
 186
 187 pve-firewall (2.0-18) unstable; urgency=medium
 188
 189   * Add ndp option to host and VM firewall options
 190
 191   * Add router-solicitation to NeighborDiscovery macro
 192
 193  -- Proxmox Support Team <support@proxmox.com>  Fri, 19 Feb 2016 10:01:22 +0100
 194
 195 pve-firewall (2.0-17) unstable; urgency=medium
 196
 197   * Don't leave empty FW config files behind
 198
 199  -- Proxmox Support Team <support@proxmox.com>  Mon, 08 Feb 2016 14:09:24 +0100
 200
 201 pve-firewall (2.0-16) unstable; urgency=medium
 202
 203   * logger: basic ipv6 support
 204
 205   * add DHCPv6 macro
 206
 207   * add dhcpv6 support to the dhcp option
 208
 209  -- Proxmox Support Team <support@proxmox.com>  Tue, 26 Jan 2016 16:52:14 +0100
 210
 211 pve-firewall (2.0-15) unstable; urgency=medium
 212
 213   * fix bug #859: use $security_group_name_pattern in iptables_get_chains
 214
 215   * fix some regular expressions mixups
 216
 217  -- Proxmox Support Team <support@proxmox.com>  Thu, 07 Jan 2016 16:33:23 +0100
 218
 219 pve-firewall (2.0-14) unstable; urgency=medium
 220
 221   * fix systemd service dependencies
 222
 223  -- Proxmox Support Team <support@proxmox.com>  Fri, 27 Nov 2015 10:52:57 +0100
 224
 225 pve-firewall (2.0-13) unstable; urgency=medium
 226
 227   * allow numeric icmp types
 228
 229  -- Proxmox Support Team <support@proxmox.com>  Fri, 23 Oct 2015 13:21:53 +0200
 230
 231 pve-firewall (2.0-12) unstable; urgency=medium
 232
 233   * implement bash completions
 234
 235   * convert pve-firewall into a PVE::Service class
 236
 237  -- Proxmox Support Team <support@proxmox.com>  Thu, 24 Sep 2015 12:15:00 +0200
 238
 239 pve-firewall (2.0-11) unstable; urgency=medium
 240
 241   * iptables_get_chains: fix veth device name
 242
 243  -- Proxmox Support Team <support@proxmox.com>  Tue, 08 Sep 2015 07:54:35 +0200
 244
 245 pve-firewall (2.0-10) unstable; urgency=medium
 246
 247   * new helper: clone_vmfw_conf()
 248
 249  -- Proxmox Support Team <support@proxmox.com>  Tue, 25 Aug 2015 06:47:49 +0200
 250
 251 pve-firewall (2.0-9) unstable; urgency=medium
 252
 253   * remove firewall config file subroutine added
 254
 255  -- Proxmox Support Team <support@proxmox.com>  Wed, 19 Aug 2015 15:42:51 +0200
 256
 257 pve-firewall (2.0-8) unstable; urgency=medium
 258
 259   * adopt regresion tests for lxc containers
 260
 261   * removed firewall code for openVZ
 262
 263   *  Subroutine verify_rule fixed to correctly check only for "net\d+"
 264   interface device names
 265
 266  -- Proxmox Support Team <support@proxmox.com>  Wed, 12 Aug 2015 12:01:43 +0200
 267
 268 pve-firewall (2.0-7) unstable; urgency=medium
 269
 270   * added firewall code for lxc
 271
 272  -- Proxmox Support Team <support@proxmox.com>  Mon, 10 Aug 2015 09:21:14 +0200
 273
 274 pve-firewall (2.0-6) unstable; urgency=medium
 275
 276   * firewall ipversion comparison fix
 277
 278  -- Proxmox Support Team <support@proxmox.com>  Tue, 04 Aug 2015 11:14:51 +0200
 279
 280 pve-firewall (2.0-5) unstable; urgency=medium
 281
 282   * add ipv6 neighbor discovery and solicitation macros
 283
 284   * ip6tables accepts both spellings of the word neighbor
 285
 286   * added Ceph macro
 287
 288  -- Proxmox Support Team <support@proxmox.com>  Mon, 27 Jul 2015 13:20:55 +0200
 289
 290 pve-firewall (2.0-4) unstable; urgency=medium
 291
 292   * include manual page for pve-firewall
 293
 294  -- Proxmox Support Team <support@proxmox.com>  Sat, 27 Jun 2015 16:26:28 +0200
 295
 296 pve-firewall (2.0-3) unstable; urgency=medium
 297
 298   * use noawait trigers for pve-api-updates
 299
 300  -- Proxmox Support Team <support@proxmox.com>  Mon, 01 Jun 2015 12:33:06 +0200
 301
 302 pve-firewall (2.0-2) unstable; urgency=medium
 303
 304   * trigger pve-api-updates event
 305
 306  -- Proxmox Support Team <support@proxmox.com>  Tue, 05 May 2015 15:10:24 +0200
 307
 308 pve-firewall (2.0-1) unstable; urgency=medium
 309
 310   * recompile for debian jessie
 311
 312  -- Proxmox Support Team <support@proxmox.com>  Fri, 27 Feb 2015 12:22:04 +0100
 313
 314 pve-firewall (1.0-18) unstable; urgency=low
 315
 316   * fix alias lookup
 317
 318  -- Proxmox Support Team <support@proxmox.com>  Mon, 09 Feb 2015 09:32:03 +0100
 319
 320 pve-firewall (1.0-17) unstable; urgency=low
 321
 322   * fix restart behavior
 323
 324  -- Proxmox Support Team <support@proxmox.com>  Thu, 15 Jan 2015 06:45:58 +0100
 325
 326 pve-firewall (1.0-16) unstable; urgency=low
 327
 328   * use new Daemon class from pve-common
 329
 330  -- Proxmox Support Team <support@proxmox.com>  Thu, 18 Dec 2014 09:45:07 +0100
 331
 332 pve-firewall (1.0-15) unstable; urgency=low
 333
 334   * bug fix: load cluster conf for host rules
 335
 336  -- Proxmox Support Team <support@proxmox.com>  Fri, 12 Dec 2014 06:33:28 +0100
 337
 338 pve-firewall (1.0-14) unstable; urgency=low
 339
 340   *  do not use ipset list chains
 341
 342   *  remove preinst script (not needed anymore)
 343
 344  -- Proxmox Support Team <support@proxmox.com>  Fri, 05 Dec 2014 13:42:00 +0100
 345
 346 pve-firewall (1.0-13) unstable; urgency=low
 347
 348   * fix ipset remove order
 349
 350  -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Nov 2014 12:45:48 +0100
 351
 352 pve-firewall (1.0-12) unstable; urgency=low
 353
 354   * add preinst script to clear ipset from older installation (because
 355     sets cannot be swapped if there type does not match.
 356
 357  -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Nov 2014 08:59:38 +0100
 358
 359 pve-firewall (1.0-11) unstable; urgency=low
 360
 361   * bug fix: correctly set ipversion for aliases in verify_rule
 362
 363   * save restore commands into files to make debugging
 364     easier (/var/lib/pve-firewall/)
 365
 366  -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Nov 2014 08:04:05 +0100
 367
 368 pve-firewall (1.0-10) unstable; urgency=low
 369
 370   * add IPv6 support for VMs (hostfw is IPv4 only)
 371
 372  -- Proxmox Support Team <support@proxmox.com>  Wed, 26 Nov 2014 07:00:29 +0100
 373
 374 pve-firewall (1.0-9) unstable; urgency=low
 375
 376   * fix max ipset name name length
 377
 378  -- Proxmox Support Team <support@proxmox.com>  Tue, 14 Oct 2014 16:29:34 +0200
 379
 380 pve-firewall (1.0-8) unstable; urgency=low
 381
 382   * implement permission
 383
 384  -- Proxmox Support Team <support@proxmox.com>  Mon, 08 Sep 2014 12:15:21 +0200
 385
 386 pve-firewall (1.0-7) unstable; urgency=low
 387
 388   * proxy host rule API calls to correct node
 389
 390   * always generate MAC and IP filter rules if firewall is enabled on NIC
 391
 392  -- Proxmox Support Team <support@proxmox.com>  Thu, 26 Jun 2014 07:12:57 +0200
 393
 394 pve-firewall (1.0-6) unstable; urgency=low
 395
 396   * ipmlement ipfilter ipsets
 397
 398  -- Proxmox Support Team <support@proxmox.com>  Thu, 12 Jun 2014 08:37:08 +0200
 399
 400 pve-firewall (1.0-5) unstable; urgency=low
 401
 402   * remove ipsets when firewall disabled
 403
 404  -- Proxmox Support Team <support@proxmox.com>  Wed, 04 Jun 2014 08:50:18 +0200
 405
 406 pve-firewall (1.0-4) unstable; urgency=low
 407
 408   * depend on iptables and ipset
 409
 410  -- Proxmox Support Team <support@proxmox.com>  Wed, 04 Jun 2014 06:45:33 +0200
 411
 412 pve-firewall (1.0-3) unstable; urgency=low
 413
 414   * change dh_installinit order (register pvefw-logger before pve-firewall)
 415
 416  -- Proxmox Support Team <support@proxmox.com>  Wed, 04 Jun 2014 06:24:21 +0200
 417
 418 pve-firewall (1.0-2) unstable; urgency=low
 419
 420   * add experimental nflog logging daemon
 421
 422  -- Proxmox Support Team <support@proxmox.com>  Thu, 13 Mar 2014 08:27:01 +0100
 423
 424 pve-firewall (1.0-1) unstable; urgency=low
 425
 426   * initial package
 427
 428  -- Proxmox Support Team <support@proxmox.com>  Mon, 03 Mar 2014 08:37:06 +0100
 429