20 October 2004

NuFW 0.9.5, new no-client mode available

NuFW 0.9.5 introduces a new no-client mode. It is a fallback method : When no NuFW client are connected from a computer that needs to authenticate packets, NuFW tries to authenticate the user with a module provided method. For the moment only an ident module is provided but other modules will soon be available.

This method has advantages

 No client is needed
 Multiple nuauth can be supported transparently for user

and disadvantages

 Nuauth has to trust external system, authentication is not performed against OUR database
 No application and OS filtering
 Less efficient than client mode : user request has to be done for each connection, it is only done once at client start for client mode.

Other changes are mainly plaintext module improvment : It now supports lists of ports and lists of IPs and/or subnets in the same rule.