Download NuFW 2.2.3

The NuFW program is an extensive firewall that can filter every connection based on the user’s rights and the operating system used. It uses an ldap server for checking the permissions and Netfilter for applying the set filtering technique. For more information about NuFW, please refer to this page. The developers have released version 2.2.3 with the following announcement:

Version 2.2.3:

NuFW 2.2.3 is available. This is a bug fix release. The main fixed issues are restoration of ICMP reject functionnality, and a fix for a problem bound to a regression in MySQL 5.0.

The changelog is as follows:

• libnuclient: fix compilation when used in external client.
• nufw: ask kernel to drop packet when nuauth can’t be reached.
• nuauth: add some check when dealing with certificate expiration.
• NuFW: recover ICMP reject functionality.
• log_mysql: handle reconnect as mysql default has changed with 5.0.
• Test system: add test of ICMP reject functionality.
• nuauth: fix logging or user session end

Version 2.2.2:

This release fixes numerous bugs and features some improvments. On this side, the display of iPv4 addresses is now improved as this is standard display and not IPv4 in IPv6 one. This restores compatibility with 2.0.

On bugs side, the main issue is the fix of a problem in protocol which has lead to an upgrade of nufw to nuauth protocol. Sadly, this breaks the compatibility of pre 2.2.2 nufw with post 2.2.2 nuauth. It is thus recommended to upgrade nufw servers and nuauth servers at the same time.

The full changelog is as follows:

• log_mysql: fix logging or connection closing
• NuFW: fix incompatibility between i386 and x86_64 due to alignment problem. This breaks compatibility with previous NuFW 2.2 releases.
• nufw: for TCP connection, only send message when session switches to ESTABLISHED and gets destroyed.
• nuauth: change criticality of some debug message to ease detection of protocol mistakes.
• NuFW: separate version number of client and nufw protocols
• NuFW: switch protocol number to v22_2 to be able to warn about incompatibility problems.
• nuauth: log IP in IPv4 format when they are IPv4
• log_syslog: log authentication failures
• nuauth: fix crash when nufw sends non SYN packets