bump version to 4.0-9

[pve-firewall.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 6f10814b02caaf3bbfbcc4a26da2e89d25cbab35..9c1e55ade985befd8d246f28e17c8bbb4763a777 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,42 @@
+pve-firewall (4.0-9) pve; urgency=medium
+
+  * ensure port range used for offline storage migration and insecure migration
+    traffic is allowed by default rule set.
+
+ -- Proxmox Support Team <support@proxmox.com>  Tue, 03 Dec 2019 08:12:20 +0100
+
+pve-firewall (4.0-8) pve; urgency=medium
+
+  * increase default nf_conntrack_max to the kernel's default
+
+  * fix some "use of uninitialized value" warnings when updating CIDRs
+
+  * update schema documentation
+
+  * add explicit dependency on libpve-cluster-perl
+
+  * add support for "raw" tables
+
+  * add options for synflood protection for host firewall:
+    - nf_conntrack_tcp_timeout_syn_recv
+    - protection_synflood: boolean
+    - protection_synflood_rate: SYN rate limit (default 200 per second)
+    - protection_synflood_burst: SYN burst limit (default 1000)
+
+ -- Proxmox Support Team <support@proxmox.com>  Mon, 18 Nov 2019 13:48:20 +0100
+
+pve-firewall (4.0-7) pve; urgency=medium
+
+  * only add VM chains and rules if VM firewall is enabled
+
+ -- Proxmox Support Team <support@proxmox.com>  Wed, 7 Aug 2019 10:55:06 +0200
+
+pve-firewall (4.0-6) pve; urgency=medium
+
+  * firewall macros: add new Ceph protocol v2 port while keeping v1 port
+
+ -- Proxmox Support Team <support@proxmox.com>  Tue, 23 Jul 2019 18:57:48 +0200
+
 pve-firewall (4.0-5) pve; urgency=medium
 
   * don't use any base path at all for calls to external binaries to make use