Firewall Builder Roadmap
this roadmap document outlines plans for the next few vesions of
Firewall Builder. I am going to maintain this document as accurate as
I can, but I can't put any time estimates in it. I run the project in
my spare time and can not commit to any deadlines.
Version 1.0
Highlights of this version: This is first stable release, so there are only few new features.
- Support for copy/paste operations in text fields
- support for "sysinfo" parameters for Host object
- "Where used" function
- fixed printing for firewalls and added support for printing of Hosts and Networks
- GUI came with new icons by Hector Rivera Falu
Version 1.0.1
Highlights of this version:With this version, we started work on porting
Firewall Builder to win32 platform and
added support for iptfilter and OpenBSD pf firewalls.
- GUI:
- Use gdk_pixbuf library instead of imlib
- basic functions for key and certificate generation and management
- support for "Address Range" object
- previously missing TCP flags in TCP Service object (PSH and URG)
- API:
- Support for "Address Range" object
- new classes for firewall management and poicy deployment
- new classes for policy compilers (namespace fwcompiler)
- work has begun on porting API to win32 platform
- Policy Compiler for OpenBSD PF:
- Initial relase, intended for beta testing. Most of the features are implemented
and work
- Policy Compiler for ipfilter:
- Although we used to have policy compiler for ipfilter in the past, this one
is complete rewrite using fwcompiler API. This is initial relase.
Version 1.0.2
Highlights
of this version: New policy compiler for iptables,
bugfixes. As of this version, I stop fixing bugs and making
changes in the old iptables compiler fwbuilder-iptables to
free up cycles for the work on the new one. The goal is to switch to
fwbuilder-ipt in two or three versions (see below). Also testing GUI, the
API and policy compilers on FreeBSD.
- GUI:
- Improvements to speed up the GUI for large policies
- Port to FreeBSD, additional testing on Solaris 8
- Bugfixes
- API
- bugfixes and improvements in fwcompiler
- Port to FreeBSD, additional testing on Solaris 8
- New policy compiler for iptables (fwbuilder-ipt)
- Policy Compiler for OpenBSD PF:
- Policy Compiler for ipfilter:
Version 1.0.3
Highlights of this version:
Bugfix release. No new features. The goal of this release is to
collect feedback on the new iptables compiler, fix bugs and make sure
old compiler can be discontinued. Therefore there will be no changes
to DTD and no new features.
- GUI:
- API
- bugfixes and improvements in fwcompiler in order to
support all three policy compilers
- Policy compiler for iptables (fwbuilder-ipt)
- Policy Compiler for OpenBSD PF:
- Policy Compiler for ipfilter:
Version 1.0.4
Highlights of this version: Internationalization
support using GNU gettext. French translation. More bugs fixed in
the new policy compiler for iptables.
Version 1.0.5
Highlights of this version: Support for unnumbered
interfaces, virtual addresses in interfaces (ip aliases) and
multicast. Bugfixes. Old policy compiler for iptables won't be
included in this relase and will be removed from CVS
repository. Because of changes in DTD and API needed to
support unnumbered interfaces and virtual addresses, old copies of
policy compiler fwbuilder-iptables will stop working.
- GUI:
- Add elements and functions needed to support virtual
addresses
- API
- Add classes and methods needed for multiple addresses on
interfaces
- Policy compiler for iptables (fwbuilder-ipt)
- Support for unnumbered interfaces and ip aliases and
multicast. Bugfixes.
- Policy Compiler for OpenBSD PF:
- Support for unnumbered interfaces and ip aliases and
multicast. Bugfixes
- Policy Compiler for ipfilter:
- Support for unnumbered interfaces and ip aliases and
multicast. Bugfixes