ufw

Download project files

0.31 release from the 0.31 series released 2012-03-09

Release information

Release notes:

ufw 0.31 is primarily a bug fix release and incorporates all the fixes from 0.30.1. It has better support for IPv6, multicast service discovery, netbios connection tracking, updated translations, testsuite improvements and other bug fixes.

Changelog:

* allow UPnP multicast for service discovery (LP: #764933)
* conf/ufw.defaults:
  - remove IRC connection tracking, which is only required for DCC
  - allow nf_conntrack_netbios_ns (Samba) (LP: #360975)
* enable IPv6 by default
* fix 'allow to any ipv6' when IPv6 is enabled
* update manpage references to ufw and ufw-framework to include the section
* update check-requirements to prompt to continue with tests that may
  autoload modules. Add '-f' option to check-requirements and update test
  suite accordingly (LP: #782816)
* don't fail when running 'show listening' under fakeroot (LP: #812516)
* add syntax-check to Makefile
* add man-check to Makefile
* src/util.py: use codes.open(..., 'UTF-8') to better support non-english
  locales in third-party frontends. Analysis and patch suggestion thanks to
  S. Nizio. (LP: #921758)
* conf/ufw.defaults and doc/ufw-framework.8: add info on tftp connection
  tracking modules
* fix traceback when specifying '--dry-run' with no arguments (LP: #946332)
* tests/testlib.sh: add 'http-or-www' argument to do_cmd() to try to
  account for /etc/services files with http/udp instead of www/udp. Adjust
  bad/apps and root/normalization for this (LP: #947224)
* conf/before6.rules: use correct ports for DHCPv6 and limit source and
  destination addresses to autoconfiguration addresses (fe80::/10). Thanks
  to Mathieu Trudel-Lapierre (LP: #947416)
* import new and updated Launchpad translations:
  - po/ar.po, po/ast.po (new), po/bg.po, po/bs.po (new), po/ca.po, po/cs.po,
    po/da.po, po/de.po, po/el.po, po/en_AU.po, po/en_GB.po, po/es.po,
    po/fi.po, po/fr.po, po/he.po, po/hu.po, po/id.po, po/it.po,
    po/ja.po (new), po/nb.po, po/nl.po, po/pl.po, po/pt_BR.po, po/pt.po,
    po/ru.po, po/sk.po, po/sl.po, po/sr.po, po/sv.po, po/tl.po,
    po/ur.po (new), po/zh_CN.po
  - thanks to all contributors: https://translations.launchpad.net/ufw
* allow multiple interface matching via '+'. Thanks to Oliver Hookins.
  (LP: #611838)
* allow application profiles to start with a digit (LP: #663632)
* don't traceback in show listening when a rule references a non-existent
  interface (LP: #840500)

File	Description	Downloads
ufw-0.31.tar.gz (md5, sig)	0.31 release	105 last downloaded 78 weeks ago
Total downloads:		105

0.30.1 release from the 0.30 series released 2011-03-22

Release information

Release notes:

ufw 0.30.1 is a bugfix release which adds python 2.7 support, man page updates and various refinements to the default IPv6 policy.

Changelog:

  * allow for python 2.7 (verified to work with python 2.7.1)
  * fix improper display of error messages. Patch thanks to Serguey Basalaev (LP: #580032)
  * profiles/ufw-mailserver: remove Postfix reference
  * fix typo in warning (LP: #637876)
  * fix manpage reference to /etc/default/ufw (Closes: 601111)
  * mention quoting of application profile names with spaces (LP: #715676)
  * fix man-page hyphenation in ufw.8
  * run_tests.sh: adjust PATH if iptables can't be found
  * adjust /etc/ufw/sysctl.conf to have commented out entries for ipv6 privacy addressing
  * profiles/ufw-fileserver: add svnserve profile (LP: #501140)
  * use 'UFW AUDIT INVALID' for INVALID packets in medium and higher
  * DROP packets with RH0 headers (LP: #740249)
  * update README to discuss the default ruleset
  * only allow mDNS multicast (LP: #740256)
  * allow ping replies from multicast (LP: #720605)

File	Description	Downloads
ufw-0.30.1.tar.gz (md5, sig)	0.30.1 release	1,891 last downloaded 67 weeks ago
Total downloads:		1,891

0.30 release from the 0.30 series released 2010-08-28

Release information

Release notes:

ufw 0.30 adds an example Upstart script, several new reports, many logging fixes, an example rsyslog configuration, delete by rule number, better IPv6 support, and many other bug fixes.

Changelog:

  * add example Upstart script
  * error out when filesystem is read-only (LP: #430053)
  * catch exception if can't find parent pid when refreshing application profiles (LP: #424528)
  * update manpage to clarify 'show' command (LP: #453083)
  * update setup.py to use sys.executable and cleanup required binaries
  * update test suite
    - better handle iptables < 1.4 (tested with 1.3.8)
    - allow alternate interpreter
  * write loglevel rules to user rules (LP: #459925)
  * properly log INVALID packets for medium and higher (LP: #480789)
  * Makefile: clean up POTFILES target
  * generate binary translations in setup.py rather than shipping them in source (LP: #490366)
  * src/ufw-init-functions: don't run 'already started' check unless ENABLED. This should improve boot speed such that iptables is not needlessly called which results in an unneeded modprobe.
  * manpage fixes thanks to Loic Minier
  * set "default" sysctl values before "all" values. Thanks to Loic Minier
  * clean up parser to make it easier to add new functionality
  * don't log LIMIT rules if logging is off (LP: #512131)
  * fix for noisy services getting logged. Added new 'skip-to-policy' chains that are now used in after*.rules (LP: #488032)
  * add rsyslog example configuration and update README
  * add reset command (LP: #436608)
  * add --force option to enable (LP: #496267)
  * decode("utf-8") some strings in 'status' to correct formatting errors with with multibyte characters
  * add more reports
  * add delete by rule number (LP: #367571)
  * add support for IPv6 tunnels and 6to4 (LP: #502655)
  * fix occasional ufw errors during boot with upstart (/tmp not available) (LP: #521359)
  * normalize IPv6 addresses to standard python shortened notation
  * follow iptables and don't require that an interface ends with a number (LP: #568877)
  * really allow IPv6 neighbor discovery (LP: #611982)
  * add support for IPSec via the esp and ah protocols (LP: #606997)
  * update check-requirements to not check ip6tables modules needed for the 'limit' command
  * import updated Launchpad translations:
    - po/ar.po, po/bg.po, po/ca.po, po/cs.po, po/da.po, po/de.po, po/el.po,
      po/en_AU.po, po/en_GB.po, po/es.po, po/fi.po, po/fr.po, po/he.po,
      po/hu.po, po/id.po, po/it.po, po/nb.po, po/nl.po, po/pl.po, po/pt_BR.po,
      po/pt.po, po/ru.po, po/sk.po, po/sl.po, po/sr.po, po/sv.po, po/tl.po,
      po/zh_CN.po
    - thanks to all contributors: https://translations.launchpad.net/ufw

File	Description	Downloads
ufw-0.30.tar.gz (md5, sig)	0.30 release	1,107 last downloaded 78 weeks ago
Total downloads:		1,107

0.29.3 release from the 0.29 series released 2010-01-29

Release information

Release notes:

Minor bug fix release.

Changelog:

ufw (0.29.3) RELEASED

* unconditionally restore new 'skip-to-policy' chains, fully resolving
LP: #488032

File	Description	Downloads
ufw-0.29.3.tar.gz (md5, sig)	0.29.3 release	1,481 last downloaded 67 weeks ago
Total downloads:		1,481

0.29.1 release from the 0.29 series released 2009-11-12

Release information

Release notes:

Minor bug fix release.

Changelog:

  * error out when filesystem is read-only (LP: #430053)
  * catch exception if can't find parent pid when refreshing application
    profiles (LP: #424528)
  * add upstart example
  * src/ufw-init: add add 'quiet' option on start, also check for QUIET
  * write loglevel rules to user rules (LP: #459925)
  * properly log INVALID packets for medium and higher (LP: #480789)

File	Description	Downloads
ufw-0.29.1.tar.gz (md5, sig)	0.29.1 release	525 last downloaded 78 weeks ago
Total downloads:		525

0.29 release from the 0.29 series released 2009-08-26

Release information

Release notes:

ufw 0.29 adds egress filtering support, improved documentation and new translations.

Changelog:

ufw (0.29) RELEASED; urgency=low

  * add egress filtering support:
    - CLI command allows specifying direction in simple and extended syntax
    - status reporting shows outgoing policy and outgoing rules
    - allow changing default outgoing policy
    - connection tracking rules for state NEW, when using a default policy
      of ACCEPT for INPUT and OUTPUT, are now put in their own chains, rather
      than configured in before*.rules
    - add state RELATED,ESTABLISHED rule to ufw-before-output in before*.rules
      like we do with ufw-before-input, to increase performance
    - DEFAULT_OUTPUT_POLICY and DEFAULT_INPUT_POLICY can now also be set to
      ACCEPT_NO_TRACK, which avoids adding connection tracking rules for
      state NEW
    - update documentation for the above
  * add tests/check-requirements and integrate into test suite. This script
    can be used to make sure that your system has all the required iptables
    and netfilter functionality as described in README
  * add doc/ufw-framework.8
  * allow deletion of non-existent application rules introduced in 0.24.
    (LP: #407810)
  * import Launchpad translations:
    - po/ar.po, po/bg.po, po/ca.po, po/cs.po, po/da.po, po/de.po, po/el.po,
      po/en_AU.po, po/en_GB.po, po/fi.po, po/fr.po, po/he.po, po/hu.po,
      po/id.po, po/it.po, po/nb.po, po/nl.po, po/pl.po, po/pt_BR.po, po/pt.po,
      po/ru.po, po/sk.po, po/sl.po, po/sr.po, po/sv.po, po/tl.po, po/zh_CN.po
    - thanks to all contributors: https://translations.launchpad.net/ufw
    - moved translations into locales/po and locales/mo. setup.py installs
      files in locales/mo
    - translations are now installed into ${prefix}/share/ufw/messages

File	Description	Downloads
ufw-0.29.tar.gz (md5, sig)	0.29 release	884 last downloaded 78 weeks ago
Total downloads:		884

0.28 release from the 0.28 series released 2009-07-24

Release information

Release notes:

The release adds interface rule support to the extended syntax, bash completion as well as smaller translation and bug fixes.

Changelog:

  * translation fixes
  * add interface rules
  * update Makefile to fail if byte-compiling failed
  * install rules files 0640 (LP: #393187)
  * adjust help command for proper translation and bash completion support
  * add limit command to help (LP: #358964)
  * add shell-completion/bash. Based on work by Didier Roche
  * tests/*: updated with 'nostats' option so redundant tests are counted
    in test results. Update many root tests to use 'nostats'
  * look for location of iptables and set IPTABLES_DIR in common.py. Adjust
    calls to ip[6]tables* to use IPTABLES_DIR
  * fix harmless but annoying bug where multi-rule application rules ended
    up with ::/0 in the tuple line in user.rules (IPV4) when not specifying a
    destination or source address and IPV6 is enabled
  * make insert rule logic more robust
  * update setup.py to install user rules and init script helpers into
    /lib, rather than /var/lib and /usr/share/ufw. Update tests,
    backend_iptables.py, ufw-init and documentation accordingly. (LP: #400208)

File	Description	Downloads
ufw-0.28.tar.gz (md5, sig)	0.28 release	154 last downloaded 78 weeks ago
Total downloads:		154

0.27.1 release from the 0.27-jaunty series released 2009-05-08

Release information

Release notes:

Minor release for translation fixes.

Changelog:

* update README for instructions on integrating ufw into the boot process
* adjust strings to better conform with translation guidelines (LP: #353424)
* adjust translation location to work with rosetta

File	Description	Downloads
ufw-0.27.1.tar.gz (md5, sig)	0.27.1 release tarball	299 last downloaded 78 weeks ago
Total downloads:		299

0.27 release from the 0.27-jaunty series released 2009-03-19

Release information

Changelog:

  * don't do symlink check anymore (LP: #317700)
  * don't do hidden file check anymore (LP: #319226). Hidden application
    profiles are already skipped, so this check only bumps into revision
    control systems
  * add 'status numbered' command
  * more comments in conf/sysctl.conf
  * add insert rule support (LP: #260745)
  * read in rules from /var/lib/ufw/*.rules. This helps keep status inline
    with reality and fixes (LP: #262975)
  * add loglevel support. This also changed the default rules files
  * add per rule logging support
  * get rid of redundant RETURN rules
  * update LIMIT logging prefix
  * update setup.py to use subprocess instead of Popen3

File	Description	Downloads
ufw-0.27.tar.gz (md5, sig)	0.27 release tarball	866 last downloaded 78 weeks ago
Total downloads:		866

0.26 release from the 0.26 series released 2009-02-27

Release information

Changelog:

* fix formatting when using 'app update all' (LP: #300726)
* add runtime version check for iptables and warn if using IPv6 application
   rules with iptables < 1.4
* Makefile: depend on translations when making tarball
* remove more useless newlines
* man page updates
* display interfaces and exact packet counters in 'status raw'
* support REJECT for rules, default policy and default application policy
   (LP: #197322)
* only flush and delete ufw chains
* add a 'flush-all' command to ufw-init
* add MANAGE_BUILTINS option to /etc/default/ufw, and when set to 'yes'
   flush the built-in chains too

File	Description	Downloads
ufw-0.26.tar.gz (md5, sig)	0.26 release tarball	174 last downloaded 78 weeks ago
Total downloads:		174