8Signs Firewall Changelog

What's new in 8Signs Firewall 3.02

Aug 23, 2007
  • Fixed bug that could cause the firewall to crash if the user attempted to sort an IP Address Group

New in 8Signs Firewall 3.01 Beta C (Jun 12, 2007)

  • Improvements:
  • DNS Names - rules can now be based on DNS names in place of IP addresses. For example, you can now create a rule allowing RDP access _only_ from a particular host machine (i.e. your laptop running a dyndns client)
  • Added a Port Scan exceptions list. You can now designate IP addresses that are exempt from the Port Scan setting "Ban the IP address of the scanner". This is useful for people who want to ban (unknown) port scanners, but need to allow a monitoring application to scan their system.
  • Added a registry value for ICMP stateful inspection timeout.
  • Added the ability to modify IP Groups from the command line. Following is the command set that is available:
  • dfw.exe -ipgroup update -name {name of group} -file {filename}
  • dfw.exe -ipgroup add {address, address1-address2, address/mask} -name {name of group}
  • dfw.exe -ipgroup delete {address, address1-address2, address/mask} -name {name of group}
  • These commands will allow you to add/delete/modify IP Address Groups. For example, let's say you have a rule that is allowing access to your SQL Server on port 1433. The Remote Addresses that this rule will apply to are in an IP Group that you've created called SQLAllow. If you want to add IP address 209.103.14.89 to this group (meaning that this IP could then connect to the SQL Server), the command line would be:
  • dfw.exe -ipgroup add 209.103.14.89 -name SQLAllow
  • Command functions:
  • update - will replace the entries in the group with those in the filename you have specified
  • add - will add IP's to the group (can use single addresses, ranges, or address/mask combintations)
  • delete - will remove IP's from the group
  • Added an external log viewer application that allows you to create filtered views of your firewall log entries. This application requires Microsoft's .Net 2.0.
  • Bug Fixes:
  • Fix to Ports display not working on all 2003 Servers
  • Fix to Remote Admin Tool not displaying IP Groups correctly after making a change to the group.
  • Fix to Remote Admin Tool not displaying log entries.
  • Fix to default values for NTP client and server rules.
  • Fix to certain log entries being displayed twice.

New in 8Signs Firewall 3.01 Beta A (May 30, 2007)

  • Improvements:
  • DNS Names - rules can now be based on DNS names in place of IP addresses. For example, you can now create a rule allowing RDP access _only_ from a particular host machine (i.e. your laptop running a dyndns client)
  • Added a Port Scan exceptions list. You can now designate IP addresses that are exempt from the Port Scan setting "Ban the IP address of the scanner". This is useful for people who want to ban (unknown) port scanners, but need to allow a monitoring application to scan their system.
  • Added a registry value for ICMP stateful inspection timeout.
  • Added the ability to modify IP Groups from the command line. Following is the command set that is available:
  • dfw.exe -ipgroup update -name {name of group} -file {filename}
  • dfw.exe -ipgroup add {address, address1-address2, address/mask} -name {name of group}
  • dfw.exe -ipgroup delete {address, address1-address2, address/mask} -name {name of group}
  • These commands will allow you to add/delete/modify IP Address Groups. For example, let's say you have a rule that is allowing access to your SQL Server on port 1433. The Remote Addresses that this rule will apply to are in an IP Group that you've created called SQLAllow. If you want to add IP address 209.103.14.89 to this group (meaning that this IP could then connect to the SQL Server), the command line would be:
  • dfw.exe -ipgroup add 209.103.14.89 -name SQLAllow
  • Command functions:
  • update - will replace the entries in the group with those in the filename you have specified
  • add - will add IP's to the group (can use single addresses, ranges, or address/mask combintations)
  • delete - will remove IP's from the group
  • Added an external log viewer application that allows you to create filtered views of your firewall log entries. This application requires Microsoft's .Net 2.0.
  • Bug Fixes:
  • Fix to Ports display not working on all 2003 Servers
  • Fix to Remote Admin Tool not displaying IP Groups correctly after making a change to the group.
  • Fix to Remote Admin Tool not displaying log entries.
  • Fix to default values for NTP client and server rules.
  • Fix to certain log entries being displayed twice.