Firewall Builder Release Notes

  Version 0.9.4

     ----------------------------------------------------------------------

  What's new in this release:

     * Custom Service object has been introduced as a way to implement
       Feature Requests #414445 and #416447 (numbers are per bug tracking
       system on Sourceforge). Custom Service object allows for quick
       implementation of support for platform-specific extensions where
       command syntax is irregular, or special module needs to be loaded. As
       an example we include few objects supporting additional modules for
       iptables available through "patch-o-matic" collection.
     * iptables compiler now recognizes broadcast addresses and generates
       code into INPUT chain (Feature request #444932)
     * code optimizer has been improved in the policy compiler; compiler now
       generates code which is more compact and clear
     * support for certain development and experimental iptables features
       available through "patch-o-matic" collection has been added to the
       policy compiler. These features are :

          * NETMAP target (provides for static 1:1 mapping of network
            addresses in case both original and translated rule elements are
            networks of the same size)
          * drop table (logs all dropped packets via drop table, this feature
            should be turned on and off in global firewall options dialog)
          * ipv4options (recognizes following IPv4 options: source routing ,
            record route , timestamp)
          * Time matching (matches arrival time of the packet against start
            and stop times for the rule)

  Bugs fixed in iptables compiler:

     * none

  Bugs fixed in GUI:

     * typo in autoupgrade script which was supposed to bring user's data
       file from version 0.9.2 to 0.9.3 made this auto upgrade impossible.
       This bug is fixed now.
     * few other minor bugs discovered in testing