arno-iptables-firewall (2.0.1.e-1) unstable; urgency=low * New upstream release. - Removed TRACE option. * Updated debian/copyright. * Bumped Standards-Version to 3.9.5; no changes necessary. * Bumped debhelper compatibility level to 9. * Adjust update-rc.d call to replace unsupported use of 'start' and 'stop' commands with 'defaults' and rely on LSB header information. -- Michael Hanke Thu, 08 May 2014 16:07:04 +0200 arno-iptables-firewall (2.0.1.d-1) unstable; urgency=low * New upstream release. - New plugins: nat-loopback, outbound-snat - New 'status-plugins' sub-command. - Addressed spurious error messages in conjunction with kmod (Closes: #684424) -- Michael Hanke Mon, 17 Dec 2012 09:07:02 +0100 arno-iptables-firewall (2.0.1.c-1) unstable; urgency=low * Upstream bugfix release. - Fix a script 'IFS' issue if IPv6 and DMZ is enabled together with DMZ_HOST_OPEN_IP - Support for newer kernels (3.4+) which replace ipt_LOG & ip6t_LOG with xt_LOG -- Michael Hanke Thu, 28 Jun 2012 08:13:04 +0200 arno-iptables-firewall (2.0.1.b-3) unstable; urgency=low * Add patch to use LSB init functions for logging. Thanks to Mike Miller and Christian Perrier (Closes: #672326). -- Michael Hanke Sun, 13 May 2012 20:05:16 +0200 arno-iptables-firewall (2.0.1.b-2) unstable; urgency=low * Upload to unstable. -- Michael Hanke Mon, 23 Apr 2012 21:06:16 +0200 arno-iptables-firewall (2.0.1.b-1) experimental; urgency=low * New upstream release. The package now supports conf.d-style configuration snippets at /etc/arno-iptables-firewall/conf.d (Closes: #653421, #658458). * Replace dependency on lynx with curl, due to upstream changes. * Bumped Standards-Version to 3.9.3; no changes necessary. * Remove DM-Upload flag -- no longer necessary. * Make debian/copyright comprehensive and copyright-format 1.0 compatible. * Fix pending l10n issues (Thanks to Christian Perrier for coordination). Debconf translations: * Dutch; (Jeroen Schot). Closes: #658454 * Danish (Joe Hansen). Closes: #661989 * Polish (Michał Kułach). Closes: #666776 * Use dh_lintian to install overrides. -- Michael Hanke Tue, 10 Apr 2012 11:13:34 +0200 arno-iptables-firewall (2.0.1-1) unstable; urgency=low * New upstream release. arno-fwfilter is now installed into /usr/bin. Obsolete configuration option DNS_FAST_FAIL & RESOLV_IPS have been removed. * Updated debian/copyright. -- Michael Hanke Tue, 17 Jan 2012 08:26:33 +0100 arno-iptables-firewall (2.0.0.c-1) unstable; urgency=low * New upstream maintenance release. Fixed multicast configuration issue (Closes: #631424) and updated several plugins. * Change strict dependency on rsyslogd to 'recommends'. This software can be used with other syslog daemons. However, out-of-the-box configuration is currently only provided for rsyslogd -- the default Debian syslog flavor. (Closes: #633530) -- Michael Hanke Tue, 04 Oct 2011 16:58:03 +0200 arno-iptables-firewall (2.0.0.b-1) unstable; urgency=low * New upstream bugfix release (Closes: #619496). Upstream merged the URL change related to #613631, but not the default option setting. * Added Japanese po-debconf template translation (Closes: #626801). Thanks to Hideki Yamane. * Update rsyslog handling, as the 'reload' action was removed (Closes: #628607). Added versioned dependency on the respective rsyslog release. Thanks to Michael Biebl for reporting. * Bumped Standards-Version to 3.9.2; no changes necessary. -- Michael Hanke Thu, 23 Jun 2011 17:36:49 -0400 arno-iptables-firewall (2.0.0.a-2) unstable; urgency=low * Fix bashisms in ipsec plugin (Closes: #617510). -- Michael Hanke Sun, 13 Mar 2011 14:05:16 -0400 arno-iptables-firewall (2.0.0.a-1) unstable; urgency=low * New upstream release -- first with IPv6 support (Closes: #594345). * Converted packaging to debhelper's dh. * Fixed issue with missing location information in arno-fwfilter output (Closes: #613631). Thanks to Tony Evans for the report and the initial patch. * Updated maintainer email address. -- Michael Hanke Fri, 18 Feb 2011 11:24:59 -0500 arno-iptables-firewall (1.9.2.l-1) UNRELEASED; urgency=low * New upstream bugfix release. Merged missing init.d dependency patch with upstream (Closes: #594326). * Bumped Standards-Version to 3.9.1.0; no changes necessary. -- Michael Hanke Sat, 28 Aug 2010 09:25:20 -0400 arno-iptables-firewall (1.9.2.k-2) unstable; urgency=low * Move iproute from recommended to a dependency (Closes: #566117). Thanks to Tenno Sereme for reporting. -- Michael Hanke Sun, 11 Apr 2010 19:40:46 -0400 arno-iptables-firewall (1.9.2.k-1) unstable; urgency=low * New upstream release. * Switch to dpkg-source 3.0 (quilt) format * Move debconf patch into quilt series. * New patch to add missing init.d dependency on $remote_fs (forwarded upstream). -- Michael Hanke Sun, 11 Apr 2010 16:08:48 -0400 arno-iptables-firewall (1.9.2.j-1) unstable; urgency=low * New upstream release. * Bumped Standards-Version to 3.8.4.0; no changes necessary. -- Michael Hanke Sat, 06 Mar 2010 09:54:36 -0500 arno-iptables-firewall (1.9.2.h-1) unstable; urgency=low * New upstream release (Closes: #550222, #553036). * Unify dependency-based boot-order and old-style update-rc.d, to be similar to shorewall's behavior. * Add lintian override. The init script does handle 'stop', but it is shadowed by an if-clause. The 'else' branch handles 'stop' as well. -- Michael Hanke Sun, 10 Jan 2010 16:46:32 -0500 arno-iptables-firewall (1.9.2.f-1) unstable; urgency=low * New upstream release (Closes: #550222, #553036). * Adjust the legacy update-rc.d configuration to match the dependency-based setup determined from the LSB header of the init script. -- Michael Hanke Wed, 11 Nov 2009 08:23:31 -0500 arno-iptables-firewall (1.9.2.d-1) unstable; urgency=low * New upstream release. -- Michael Hanke Mon, 24 Aug 2009 07:40:12 -0400 arno-iptables-firewall (1.9.2.c-1) unstable; urgency=low * New upstream release. Missed release 1.9.0.b. * Bumped Standards-Version to 3.8.3.0; no changes necessary. * Added russian debconf translation (Closes: #541751). Thanks to Yuri Kozlov. -- Michael Hanke Sun, 23 Aug 2009 20:06:39 -0400 arno-iptables-firewall (1.9.2.a-1) unstable; urgency=low * New Upstream Version (Closes: #530045, #520011). Missed releases 1.9.0.c and 1.9.2. * Added spanish debconf translation (Closes: #522651). Thanks to Francisco Javier Cuadrado. * Bumped Standards-Version to 3.8.1; no changes necessary. * Increase debhelper compat-level to 5. -- Michael Hanke Tue, 09 Jun 2009 10:21:47 +0200 arno-iptables-firewall (1.9.0.b-1) unstable; urgency=low * New upstream version (Closes: #509684). Missed release 1.9.0.a. * Added default logging setup for rsyslog (including logrotate config). All firewall-related messages go into /var/log/arno-iptables-firewall by default. Updated README.Debian and NEWS.Debian accordingly. Thanks to Tim Small (Closes: #503198). * Do not install syslogd examples, since Debian switched to rsyslog. * All executable scripts are now installed into /usr/sbin, since they are useless for normal users without access to the logfiles. * Updated debian/copyright and converted it into a machine-readable format. * Added DM-allow flag. * Added VCS information to debian/control. -- Michael Hanke Sat, 28 Feb 2009 14:56:19 +0100 arno-iptables-firewall (1.8.8.o-3) unstable; urgency=low * Bumped Standards-Version to 3.8.0; no changes necessary. * Added "$network" to the init script's LSB Required-Start and Required-Stop header lines. Thanks to Chris Lamb for the patch (Closes: #493805). * Disabled IGD plugin by default (Closes: #493685). -- Michael Hanke Fri, 12 Dec 2008 08:37:50 +0100 arno-iptables-firewall (1.8.8.o-2) unstable; urgency=low * Add dnsutils to the recommended packages (Closes: #471430). -- Michael Hanke Tue, 18 Mar 2008 09:55:05 +0100 arno-iptables-firewall (1.8.8.o-1) unstable; urgency=low * New Upstream Version (Closes: #469322). * Fix broken multi-route plugin (Closes: #470634). * Make the package recommend lynx instead of depending on it, as it is only needed for the optional arno-fwfilter script. -- Michael Hanke Thu, 13 Mar 2008 11:30:26 +0100 arno-iptables-firewall (1.8.8.n-1) unstable; urgency=low * New Upstream Version (Closes: #466972). Missed 1.8.8m, which only lived for a few days. * Minor change to the packaging documentation. Thanks to Joost van Baal. -- Michael Hanke Thu, 28 Feb 2008 09:51:03 +0100 arno-iptables-firewall (1.8.8.l-1) unstable; urgency=low * New Upstream Version. Missed 1.8.8.j and 1.8.8.k. * Moved plugins to /usr/share/arno-iptables-firewall/plugins as they are not really config files. Updated NEWS.Debian and README.Debian to announce this change. * Fixed config file path in multiroute plugin. * Bumped Standards-Version to 3.7.3; no changes necessary. * Modified debian/watch file to only track stable releases. * Sponsored upload by Joost van Baal . -- Michael Hanke Fri, 25 Jan 2008 16:15:58 +0100 arno-iptables-firewall (1.8.8.i-2) unstable; urgency=low * Added 'iproute' to the recommended packages, as it is required by one of the plugins. Thanks to Joost van Baal for spotting this one. * Added Portuguese debconf translation (Thanks to Américo Monteiro). Closes: #435181. * Switch to new-style homepage field in debian/control. * Sponsored upload by Joost van Baal . -- Michael Hanke Mon, 26 Nov 2007 10:26:23 +0100 arno-iptables-firewall (1.8.8.i-1) unstable; urgency=low * New Upstream Version. Fixes a bug in the NAT forwarding rules which caused using subnets as source restriction not to work. New plugins: Racoon IPSEC VPN Plugin, transparent DNAT plugin * Cleanup of the rules file. Most install task are now done by debhelper instead of countless cp calls. * Stopped manual parsing of dpkg status database. MD5 sum extraction for moving conffiles on package upgrade is now done by using dpkg-query. * Abandoned dpatch in favor of Git. * Sponsored upload by Joost van Baal . -- Michael Hanke Mon, 9 Jul 2007 12:07:57 +0200 arno-iptables-firewall (1.8.8.h-1) unstable; urgency=low * New upstream release. Fix broken plugin loader. (Closes: #409609, #412191) * Prevent parallel make threads in debian/rules to satisfy dpatch requirement. -- Michael Hanke Mon, 26 Feb 2007 21:51:55 +0100 arno-iptables-firewall (1.8.8.g-2) unstable; urgency=low * Added missing dependency to lynx (thanks to Joost van Baal). * Minor addition to the arno-fwfilter manpage (also thanks to Joost van Baal). * Added a note about plugin handling to README.Debian. * Sponsored upload by Joost van Baal . -- Michael Hanke Mon, 22 Jan 2007 10:23:59 +0100 arno-iptables-firewall (1.8.8.g-1) unstable; urgency=low * New upstream release. -- Michael Hanke Sun, 14 Jan 2007 20:43:29 +0100 arno-iptables-firewall (1.8.8.f-1) unstable; urgency=low * New upstream release (1.8.8.d was never released and 'e' only lived for a few days). * Updated copyright file: License is now GPL v2 only. -- Michael Hanke Tue, 9 Jan 2007 16:17:19 +0100 arno-iptables-firewall (1.8.8.c-1) unstable; urgency=low * New upstream release (fixed MAC-filter). -- Michael Hanke Mon, 30 Oct 2006 08:18:55 +0100 arno-iptables-firewall (1.8.8.b-1) unstable; urgency=low * New upstream release (missed 1.8.8.a). -- Michael Hanke Fri, 27 Oct 2006 14:05:52 +0200 arno-iptables-firewall (1.8.8-1) unstable; urgency=low * New upstream release. * Moved all config files to /etc/arno-iptables-firewall. Noted in NEWS.Debian. * Fixed bug that the firewall was not configured and restarted properly on fresh installs. * The package uses debconf to inform the user about necessary restarts even if it was previously indicated that debconf management is not wanted. This is done because to user has to be informed anyway and debconf is the most configurable mechanism. * Fixed an inconvenience that caused the restart debconf question to be displayed twice. * Sponsored upload by Joost van Baal . -- Michael Hanke Sat, 7 Oct 2006 21:30:22 +0200 arno-iptables-firewall (1.8.6.c-4) unstable; urgency=low * The diff is now managed using dpatch. * Added Brazilian Portuguese debconf translation (Thanks to Felipe Augusto van de Wiel). Closes: 390410 * Added build-dependency to po-debconf. * Added minimal patch with LSB compliant init script description. * Sponsored upload by Joost van Baal . -- Michael Hanke Tue, 3 Oct 2006 16:46:58 +0200 arno-iptables-firewall (1.8.6.c-3) unstable; urgency=low * Fixed typo in french translation. Thanks to Florentin Duneau. (Closes: #379109) * Sponsored upload by Joost van Baal . -- Michael Hanke Fri, 21 Jul 2006 17:07:44 +0200 arno-iptables-firewall (1.8.6.c-2) unstable; urgency=low * French translation update. Thanks to Florentin Duneau.(Closes: #367392) * Bumped Standards-Version to 3.7.2; no changes necessary. * Sponsored upload by Joost van Baal . -- Michael Hanke Thu, 29 Jun 2006 15:04:13 +0200 arno-iptables-firewall (1.8.6.c-1) unstable; urgency=low * New upstream release. * Improved debconf templates to conform to the guidelines in the Developers Reference. (Closes: #360579) * Added several translations of the debconf templates (cs, nb, sv, vi, fr). Thanks to debian-i18n. (Closes: #361110, #362626) * Sponsored upload by Joost van Baal . -- Michael Hanke Thu, 6 Apr 2006 20:06:06 +0200 arno-iptables-firewall (1.8.6.b-1) unstable; urgency=low * New upstream release. * First upload to Debian archive, sponsored by Joost van Baal (Closes: #325696) -- Michael Hanke Thu, 30 Mar 2006 11:27:22 +0100 arno-iptables-firewall (1.8.6.a-1) unstable; urgency=low * New upstream release. * Modified watch file to reflect the new versioning scheme. -- Michael Hanke Wed, 8 Mar 2006 21:16:45 +0100 arno-iptables-firewall (1.8.6-1) unstable; urgency=low * New upstream release. -- Michael Hanke Sun, 19 Feb 2006 09:24:43 +0100 arno-iptables-firewall (1.8.5-rc6-1) unstable; urgency=low * New upstream release-candidate. -- Michael Hanke Sun, 12 Feb 2006 15:50:49 +0100 arno-iptables-firewall (1.8.5-rc5-1) unstable; urgency=low * New upstream release-candidate. -- Michael Hanke Tue, 7 Feb 2006 15:11:04 +0100 arno-iptables-firewall (1.8.5-rc4-2) unstable; urgency=low * Bugfix: If specification of NATable internal network was left empty as recommended by debconf, the firewall failed to start. * Added a lintian override for the debconf related error 'settitle-requires-versioned-depends config'. This package depends on the appropriate versions of debconf or cdebconf. * Updated Italian debconf translation (Thanks to Gianluca Ficarelli). -- Michael Hanke Tue, 24 Jan 2006 20:24:37 +0100 arno-iptables-firewall (1.8.5-rc4-1) unstable; urgency=low * New upstream release-candidate. * Using debconf for this package is now optional. * Bugfix: debconf dependency. -- Michael Hanke Tue, 3 Jan 2006 20:52:57 +0100 arno-iptables-firewall (1.8.5-rc3-1) unstable; urgency=low * New upstream release-candidate. (Missed: 1.8.5-BETA1 (2005-10-30), 1.8.5-RC1 (2005-12-02), 1.8.5-RC2 (2005-12-09)). -- Michael Hanke Thu, 22 Dec 2005 14:33:59 +0100 arno-iptables-firewall (1.8.4d-2) unstable; urgency=low * Corrected several typos. * Moved arno-multiroute.sh to the examples. * Bugfix: Added alternative dependency to debconf-2.0. * Create an empty /etc/arno-firewall-custum-rules file on install. * Added comments about firewall logging to README.Debian. * Stripped debian/watch from useless comments. * Thanks to Joost van Baal for pointing at those bugs. -- Michael Hanke Wed, 23 Nov 2005 19:49:56 +0100 arno-iptables-firewall (1.8.4d-1) unstable; urgency=low * New upstream release * Custom iptable rules are now read from /etc/arno-firewall-custom-rules -- Michael Hanke Thu, 27 Oct 2005 21:28:36 +0200 arno-iptables-firewall (1.8.4c-3) unstable; urgency=low * More precise debconf questions (Thanks to Gianluca Ficarelli). -- Michael Hanke Wed, 12 Oct 2005 15:00:02 +0200 arno-iptables-firewall (1.8.4c-2) unstable; urgency=low * Bugfix: Syntax error in debian/config script. * Added German translation for debconf templates using po-debconf. * More descriptive debconf templates. * Split DC_OPEN_PORTS in DC_OPEN_TCP and DC_OPEN_UDP for a more precise configuration of open ports. * All debconf variables use the same name as the corresponding upstream variable, but with the prefix 'DC_'. -- Michael Hanke Mon, 10 Oct 2005 08:39:26 +0200 arno-iptables-firewall (1.8.4c-1) unstable; urgency=low * New upstream release. * New Debconf configuration procedure. NAT configuration is only attempted if internal network interfaces are specified. One can now configure internal network with and without access to external networks via Debconf. * Bugfix: NAT configuration did not work out of the box, because INTERNAL_NET was not set properly. * Improved Debconf templates. * The config script now properly unsets NAT-related variables when the internal network interfaces are removed during package reconfiguring. -- Michael Hanke Mon, 3 Oct 2005 14:05:06 +0200 arno-iptables-firewall (1.8.4b-6) unstable; urgency=low * Remove unused Debconf variable from config file. -- Michael Hanke Sun, 2 Oct 2005 20:59:36 +0200 arno-iptables-firewall (1.8.4b-5) unstable; urgency=low * Added debconf question whether the host should be pingable on the external network interfaces. * Change priorities of debconf question to minimize user interaction. * Improved debconf template with suggestions for the unsure. * Bugfix: Defaults for debconf were not correctly read from installed configuration file. * Bugfix: lintian reported too long description line in debian/control. -- Michael Hanke Mon, 26 Sep 2005 10:25:52 +0200 arno-iptables-firewall (1.8.4b-4) unstable; urgency=low * New package description. -- Michael Hanke Fri, 23 Sep 2005 10:57:06 +0200 arno-iptables-firewall (1.8.4b-3) unstable; urgency=low * NAT configuration for internal networks is now handled by debconf. -- Michael Hanke Thu, 22 Sep 2005 21:54:29 +0200 arno-iptables-firewall (1.8.4b-2) unstable; urgency=low * Renamed 'fwfilter' script to 'arno-fwfilter' to prevent name clashes. * Added manpage for 'arno-fwfilter'. -- Michael Hanke Mon, 19 Sep 2005 13:02:49 +0200 arno-iptables-firewall (1.8.4b-1) unstable; urgency=low * New upstream release that fixed some syntax errors in the config script. -- Michael Hanke Wed, 14 Sep 2005 19:46:55 +0200 arno-iptables-firewall (1.8.4a-1) unstable; urgency=low * New upstream release. -- Michael Hanke Fri, 9 Sep 2005 08:21:22 +0200 arno-iptables-firewall (1.8.4-2) unstable; urgency=low * The init.d script is now started just before the network interfaces are available during the boot process. * The package now cares for the initial setup of the external interface(s) via debconf. -- Michael Hanke Tue, 6 Sep 2005 20:50:58 +0200 arno-iptables-firewall (1.8.4-1) unstable; urgency=low * Initial Release. * Modified filename of the init.d script and the location of the configuration file to conform to the Debian policy. * Modified the 'reload' command of the init.d script to 'force-reload'. -- Michael Hanke Tue, 30 Aug 2005 11:12:25 +0200