NuFW 2.2.0-rc1 is available. All planned features have been implemented and test phase is almost complete.
The main new features are:
A command mode which can interact with nuauth to modify things such as debug_level or to disconnect selected users.
Globbing matching on application name in acl
Compatibility of mysql logging to be able to use 2.0 databases
The full changelog is as follows:
Less memory consumption. Increased stability.
Ipv6 support
log_mysql: add option to log by default in SQL database with IPV4 schema
libnuclient: add nu_get_home_dir function which is not dependant of HOME environment variable
nufw: fix compilation in ipq mode (workaround ipq.h problem)
nufw: modify interface name fetching code
NuFW: Port of 2.0 modifications (from r2715 to r2728)
implement globbing matching in application filtering
add support for flags on acl
implement async logging following flag setting
cache is now resetted during reload
nuauth: command mode through a unix socket and a python script is given as exemple
nuauth: modify thread pools system (better handling of signals)
nufw: add -A to set debug areas and adjust areas in code
SQL log : log_prefix allows for tracability from Log to suitable ACL.
libnuclient : Diffie Hellman can be unactivated and source address can be personalised (usable mostly for tests)
nuauth : splitting of some modules
NuFW : connections can now be marked according to user and/or group ID.
nuauth : new "session_expire" module.