What's new in NxFilter 4.6.9.4
Apr 19, 2024
- 'Config > Setup' not updating bug has been fixed.
New in NxFilter 4.6.9.3 (Apr 12, 2024)
- Web login limit feature has been added.
- Initialize session for SmtpConn by each instance.
- Baselist has been updated to 5274963.
New in NxFilter 4.6.9.2 (Apr 2, 2024)
- Custom DoH URL not working bug has been fixed.
- Apply 'Disable Version Check' to update notification email.
- Baselist has been updated to 5259216.
New in NxFilter 4.6.9.1 (Mar 15, 2024)
- Bug fix for Active Directory LDAPS communication.
- CSV Export function for user data has been added.
- Baselist has been updated to 5236099.
New in NxFilter 4.6.8.9 (Mar 5, 2024)
- 'Same as work-time policy' for free-time policy setup added on SandWatch.
- Breadcrumb link has been added for easier navigation on SandWatch.
- Tumblr and Blogspot HTTPS check has beed added for BlocklisUpdate.
- Log4j has been replace by Reload4j.
- Baselist has been updated to 5034874.
New in NxFilter 4.6.8.8 (Feb 20, 2024)
- Invalid domain check for JahaslistDao.importFile.
- System block list has been updated.
- User-agent string updated for internal web crawler.
- Baselist has been updated to 4934874.
New in NxFilter 4.6.8.7 (Feb 20, 2024)
- Invalid domain check for JahaslistDao.importFile.
- System block list has been updated.
- User-agent string updated for internal web crawler.
- Baselist has been updated to 4934874.
New in NxFilter 4.6.8.6 (Jan 30, 2024)
- Use in-memory lookup by LastError from BlockDao.
- Don't use TCP socket for /RUP, /CBK protocols.
- PolicyApplication has been removed.
- Block CName Cloaking when it's redirected to the sites in Gambling, Porn,
- Warez, Suspicious, Cryptocurrency categories.
- Baselist has been updated to 4674336.
New in NxFilter 4.6.8.4 (Dec 12, 2023)
- Escape null pointer exception for UserDao.joinGroup.
- Use cloud classifier for Jahaslist remote update.
- Do not cloud classifier query when html.errFlag set.
- Recat by cloud classifier when classification score is higer than 105.
- Creation time property for user and group has been added.
- Baselist has been updated to 4553610.
New in NxFilter 4.6.8.2 (Nov 20, 2023)
- WknownDic.isWellknownExactByRank has been added.
- Reset domain count in ServerProtection for top 10000 domains.
- Show update information on 'Classifier > Jahaslist'.
- Logger wrapper methods for FirstDao have been added.
- Set license from master node only if it's not empty.
- Slave node not having systemId bug has been fixed.
- Baselist has been updated to 4490475.
New in NxFilter 4.6.8.1 (Oct 23, 2023)
- Incorrect MIME type by CharsetFilter bug has been fixed.
- Baselist has been updated to 5206301.
New in NxFilter 4.6.7.9 (Oct 16, 2023)
- 'chkports' command for runcmd.sh script has been added.
- Error handling for UdpEncoder.decode has been added.
- Use nxfilter.org domain for Cloud classification queries.
- Baselist has been updated to 5181525.
New in NxFilter 4.6.7.8 (Sep 29, 2023)
- Language files have been updated.
- Use e.getString() instead of e.getCause() for AlertDao.test().
- Baselist has been updated to 5140844.
New in NxFilter 4.6.7.6 (Aug 15, 2023)
- /bin/runcmd.* scripts added.
- Free Jahaslist license size has been increased to 30.
- Base request count for license checking has been increased to 4000.
- Baselist has been updated to 4938928.
New in NxFilter 4.6.7.4 (Jul 20, 2023)
- /webapps/example has been copied into /guipack/sandwatch.
- Baselist has been updated to 4858558.
New in NxFilter 4.6.7.3 (Jun 9, 2023)
- Support NxProxy for Android v1.0.1 has been added.
- RecatMan fetch size has been increased to 20.
- Baselist has been updated to 4723833
New in NxFilter 4.6.7.2 (Jun 1, 2023)
- NxProxy auto-switch option has been removed.
- NxProxy for Android support has been added.
- Sub-admins log in to dashboard when they have the permission to dashboard.
- 'Enable File Logging' option for Syslog setup has been added.
- Baselist has been updated to 4714398.
New in NxFilter 4.6.6.4 (May 9, 2023)
- Deal with '/NXP', '/NXR' protocol by hxlistener without TCP connection.
- Accept agent ping signal on every minute.
- Signal log not appearing bug has been fixed.
- Select first_catid as catid in TopReport DAO class.
- Logo on GUI has been changed.
- Baselist has been updated to 4667364.
New in NxFilter 4.6.6.3 (Apr 20, 2023)
- Send drop message to CxBlock and custom agent when it's dropped.
- Make a new query if the original query doesn't have UDP size value on DoHListner.
- System menu permission has been added for sub-admin.
- Baselist has been updated to 4667364.
New in NxFilter 4.6.6.2 (Apr 4, 2023)
- NxClassifier queue size has been adjusted to 2000.
- UdpEncoder has been activated.
- Not listening on TCP/443 port bug has been fixed.
New in NxFilter 4.6.6.1 (Mar 30, 2023)
- 'category_id' has been replaced with 'first_catid' in top category query.
- Detailed logging for LogFacade in case of job queue flooding.
- The default maximum memory allocation has been increased to 1GB.
- TcpTalkie.loginMd5 has been removed.
- Asynchronous login session sharing in cluster has been implemented.
- UdpListener runs on slave node as well for asynchronous login session synching.
- Slave to master login session synch will be done by UdpTalkie.
- Master to slave login session synch will be done by UdpTalkie and ConfigLoader.
- Open UDP/19004 from instsvc.bat when creating NxFilter service for Windows.
- Well known domain list has been updated and its size increased to 300,000.
- 'stop_auto_delete' option has been added to cfg.properties file.
- Cloudflare cache for NxLocal has been removed.
- 'System > Setup > Misc > Disable Version Check' option has been added.
- Baselist has been updated to 4638844.
New in NxFilter 4.6.5.4 (Mar 3, 2023)
- NxClassifier ruleset has been updated to 637.
- RequestHandler.isRqDropDomain bug for not bypassing local domain correctly when there are too many wating queries in the queue has been fixed.
- Conditional forwarder feature has been added.
- Baselist has been updated to 4537434.
New in NxFilter 4.6.5.3 (Feb 8, 2023)
- Bug for old GUI not adding Active Directory setup corretly has been fixed.
- Suppressing log for Azure username not found by CxLogon.
- Add Client IP into access violation email.
- Drop ANY type query at default for new installation.
- Baselist has been updated to 4507060.
New in NxFilter 4.6.5.1 (Jan 24, 2023)
- Use UDP socket for sending log data between cluster nodes.
- Enable Config.useLocalJahaslist flag for Globlist.
- The size of domain columns in DB have been changed to 255.
- Try to close DB connections in ShutdownHook.
- Delete orphaned traffic data overnight.
- Set RD flag into block message if there's a recursion request.
- Traffic database cleanup script name has been changed to 'dbclean.sh'.
- Defragment function has been added into cleanup script.
- Delete login session on every node in a cluster by 'DELETE LOGIN SESSION'
- button on user test page.
- User login, logout by webpage will be notified to slave nodes by ConfigLoader.
- Baselist has been updated to 4499042.
New in NxFilter 4.6.4.5 (Jan 3, 2023)
- Unused blocked reasons have been removed.
- Config.adwareCatid flag has been removed.
- Freemarker library has been removed.
- 'System > Alert > Alert Events' menu has been added.
- User password change form has been added.
- Language files have been updated.
- Baselist has been updated to 4487203.
New in NxFilter 4.6.4.3 (Dec 19, 2022)
- Language files have been updated.
- DnsSetup.httpsDnsTimeout has been added.
- Custom DNS server for DNS over HTTPS option has been added.
- Baselist has been updated to 4469622.
New in NxFilter 4.6.4.1 (Nov 25, 2022)
- Max persistent cache size has been adjusted to 300000
- Delete persistent cache which is not updated for 7 days over night
- Upstream DNS column size has been increased to 64
- Baselist has been updated to 4467158
New in NxFilter 4.6.3.9 (Nov 25, 2022)
- ClusterSync.addBlocklistData has been added.
- Showing parent group instead of child group bug fixed on 'User > Group'.
- 'Exclude Empty Group' option has been added for Active Directory importation.
- Multiple IP for MS DNS value not allowed bug has been fixed.
New in NxFilter 4.6.3.8 (Nov 8, 2022)
- Baselist has been updated to 4456696.
New in NxFilter 4.6.3.6 (Oct 13, 2022)
- rediDomain rule has been enabled for NxClassifier.findCategory.
- Baselist has been updated to 4443843.
New in NxFilter 4.6.3.5 (Sep 26, 2022)
- Add down time in slave down alert email.
- Realy agent counting by master node.
- Login failure message on user login page has been added.
- Default timezone from startup.sh has been removed.
- Baselist has been updated to 4435424.
New in NxFilter 4.6.3.4 (Sep 14, 2022)
- Unclass report to main server has been stopped.
- Missing token for AD imported users have been restored.
New in NxFilter 4.6.3.3 (Sep 8, 2022)
- Ignore PartialResultException from AdapImport for DC only AD domain.
- Baselist has been updated to 4458254.
New in NxFilter 4.6.3.2 (Aug 22, 2022)
- BlockDomainResolver.setMyIp method has been added
- IBR protocol for LocalListener has been removed
- LNZ protocol for HxListener has been removed
- ip_session' table not updating on new user login bug has been fixed
- CXB protocol accepts Azure AD username
- UserDic not reloading after Azure AD import bug has been fixed
- Temporary whitelist bugs with Permanent, Group flags have been fixed
- Drop Packet by Whitelist and Request Type Control will be working
- even if 'Filter A Query Only' option is enabled
- Baselist has been updated to 4451596
New in NxFilter 4.6.3.1 (Aug 6, 2022)
- To find logged-in user by index.jsp in real-time way.
- BlockDao.isBlankBlock has been deprecated.
- Email library has been replaced to javax.mail.
- Delete login sesseion by Reset Login Session button on User Test page.
- Block,logout.jsp page has been added.
- Baselist has been updated to 4448535.
New in NxFilter 4.6.2.5 (Jul 30, 2022)
- 500 error for user,adap_edit.jsp has been fixed.
New in NxFilter 4.6.2.2 (Jul 1, 2022)
- DBCP library has been updated to v2.9.0.
- DNS over HTTPS listener has been enabled.
- 'tcpNoDelay' flag set for the embedded Tomcat.
- Embedded Tomcat has been updated to v9.0.64.
- TLS v1.3 has been enabled for Tomcat.
- 'System > Mobile Config' menu has been added on SandWatch GUI pack.
- Login Page category has been added to Cloudlist.
- Set Config.publicBlockIp by an external HTTP query from HandyMan.
- Baselist has been updated to 4423977.
New in NxFilter 4.6.1.6 (Jun 15, 2022)
- 'Block CName Cloaking' option added on policies.
- 'Bypass DNS Checking' option added for blocklists.
- Baselist has been updated to 4412373.
New in NxFilter 4.6.1.5 (Jun 1, 2022)
- Disable CxBlock poicy when user authentication Disabled.
- IP range map not reloading bug fixed.
- Cloudlist mapping file updated to exclude Under Construction from Misc.
- Baselist has been updated to 4403363.
New in NxFilter 4.6.1.4 (May 19, 2022)
- RecatPopup has been added to 'Logging > Request' on SandWatch GUI.
- Baselist has been updated to 4397052.
New in NxFilter 4.6.1.2 (May 2, 2022)
- ParamTest.isValidRegex() -> isValidClassificationRule().
- Query again when cloud classifier query times out.
- User login page alias to 'http://server-address/login' added.
- /LOGIN, /LOGOUT, /ADMIN responses added for IBR query by CxForward.
- Baselist has been updated to 4386741.
New in NxFilter 4.6.1.1 (Apr 22, 2022)
- Agent signal bypassing bug fixed.
New in NxFilter 4.6.0.9 (Apr 21, 2022)
- Send NXDOMAIN when it's for Blocked Request Type.
- Prunsvr.exe has been removed.
- Temporary whitelist feature added.
- Faster loading method for whitlist applied.
- Djmod219.jar, v3.6.0 has been updated.
- Server side support for CxForward auto-discovery added.
- Delete action not working bug on 'System > Cluster' fixed.
New in NxFilter 4.6.0.8 (Apr 9, 2022)
- JRE has been embedded into Windows package.
- Disable 'nxfilter' service by uninstalling DEB package.
New in NxFilter 4.6.0.7 (Apr 6, 2022)
- Time format bug fixed on 'Logging > Admin Activity'.
- Delete more than 1 year old admin activity log.
- Baselist has been updated to 4379872.
New in NxFilter 4.6.0.6 (Apr 1, 2022)
- 'config,*.jsp' -> 'system,*.jsp'.
- IMPORT/EXPORT buttons added on 'Category > System', 'Categry > Custom', 'Classifier > Jahaslist'.
- - 'DELETE ALL' button added on custom category edit page.
- Sub-admin and GUI permission feature has been added.
- 'Logging > Admin Activity' GUI menu has been added.
- Version check function has been moved into main process for faster GUI login.
- Baselist has been updated to 4374277.
New in NxFilter 4.6.0.5 (Mar 22, 2022)
- Don't do automatic MS update bypassing anymore.
- NxClassifier ruleset has been updated to 618-3.
- Domain pattern dictionary has been updated.
- Query through DNS protocol disabled for CloudClassifier.
- - 'System > Alert', category missing bug fixed.
- Fetch limit on 'user,user.jsp' has been increased to 100000.
New in NxFilter 4.6.0.4 (Mar 15, 2022)
- Delete old jar files before install by DEB, EXE packages.
- 'System > Admin' page not working bug fixed.
- NxClassifier ruleset has been updated to 618-2.
- Baselist has been updated to 4098826.
New in NxFilter 4.6.0.3 (Mar 11, 2022)
- 'NEW AUTO-SWITCH DOMAIN' button has been added on 'Policy > NxProxy'.
- - 'svrinfo.jsp' has been added into SandWatch.
- Sorting by hidden ctime added on 'Logging > *'.
- Safe-search enforcing for DuckDuckGo, Yandex has been added.
- GUI lanuge support for Chinese, Dutch, Japanese, Polish, Turkish, Vietnamese has been added.
- Baselist has been updated to 4097826.
New in NxFilter 4.6.0.2 (Mar 2, 2022)
- 'Config' has been changed to 'System' on top menu.
- Multi language support has been added.
- 'System > Setup > Misc > GUI Language' option has been added.
- 'System > Setup > Misc > GUI Date Format' option has been added.
- Arts, Books/Comics, Cults categories added to Cloudlist.
- Sandwatch has been updated to v1.0.0.1.
- Cloudlist trial license has been activated.
New in NxFilter 4.6.0.1 (Mar 2, 2022)
- 'Config' has been changed to 'System' on top menu.
- Multi language support has been added.
- 'System > Setup > Misc > GUI Language' option has been added.
- 'System > Setup > Misc > GUI Date Format' option has been added.
- Arts, Books/Comics, Cults categories added to Cloudlist.
- Sandwatch has been updated to v1.0.0.1.
New in NxFilter 4.5.4.5 (Feb 24, 2022)
- Domain pattern dictionary has been updated
- Jahaslist update repository URL fetching bug fixed
- Baselist has been updated to 4086209
- Jahaslist category file has been updated
- Policy level DNS type control has been removed
New in NxFilter 4.5.4.4 (Feb 21, 2022)
- Data list added for username search on reports
- Show empty user report when the user doesn't exist
- Sorting by date on classifier,classified.jsp
- Apply tab on whitelist rule edit page
- Sandwatch has been updated to v0.9.9.5
New in NxFilter 4.5.4.3 (Feb 14, 2022)
- Login session TTL reset button has been added on user test page.
- UserDic -> UserDic2 as it's different from NxCloud's UserDic.
- NxClassifier ruleset has been updated to 618.
- Baselist has been updated to 4057207.
New in NxFilter 4.5.4.2 (Feb 1, 2022)
- Sandwatch became the default GUI.
- Delete orphaned domain index data from cleanup script.
- Sandwatch has been updated to v0.9.9.2.
- Domain pattern dictionary has been updated.
New in NxFilter 4.5.4.1 (Jan 24, 2022)
- Embedded Tomcat has been updated to v8.5.75.
- CBC mode cipher has been removed for webserver security.
- JSP compiler target has been changed to 1.8.
- WebSockerHandler has been removed.
- Baselist has been updated to 4057161.
New in NxFilter 4.5.3.2 (Jan 10, 2022)
- Top report generation speed up by 25%.
- Faster search algorithm for traffic data has been applied.
- Filter 'A' Query Only option added on 'Config > Setup > Misc'.
- Sandwatch has been updated to v0.9.9.1.
New in NxFilter 4.5.2.9 (Nov 30, 2021)
- UnivCache class has been added for speed up index.jsp response.
- Update notification email for the same version will not be sent again
- while it's running.
- Baselist has been updated to 4054350.
New in NxFilter 4.5.2.8 (Nov 9, 2021)
- Unicode domain names have been allowed on 'Whitelist > Domain' and 'Category > Custom'.
- Don't add NxError when it's a license problem.
- Request.isEdnsFlag has been removed.
- Sandwatch has been updated to v0.9.8.8.
- Reset index.jsp during startup process.
- Baselist has been updated to 4042739.
New in NxFilter 4.5.2.7 (Oct 20, 2021)
- Add a negative cache when there are 5 empty responses continuously for the same domain.
- Several antivirus software related domains have been added into common-bypass.tpl file.
- Baselist has been updated to 4032373.
New in NxFilter 4.5.2.6 (Sep 27, 2021)
- Sandwatch has been updated to v0.9.8.7.
- Baselist has been updated to 4019926.
New in NxFilter 4.5.2.5 (Sep 15, 2021)
- Delete cache for admin login page on startup.
- Use 'https://' for login redirection URL when it's on TCP/443 port.
New in NxFilter 4.5.2.4 (Sep 9, 2021)
- DoubleCheck thread for detecting master node down added.
- svrinfo.jsp' has been added.
New in NxFilter 4.5.2.3 (Aug 28, 2021)
- 500 error for 'Classifier > Classified' fixed.
New in NxFilter 4.5.2.2 (Aug 24, 2021)
- Baselist has been updated to 4000547.
- Sandwatch has been updated to v0.9.8.6.
New in NxFilter 4.5.2.1 (Aug 2, 2021)
- 'date_display' option added for configuration file.
- Sandwatch has been included.
- User expiration date selection bug fixed.
New in NxFilter 4.5.1.7 (Jul 19, 2021)
- Add record array length check into MsgUtil.getMinTtl.
- System exit when there's no 127.0.0.1 IP address to bind.
- Baselist has been updated to 3985278.
New in NxFilter 4.5.1.6 (Jun 21, 2021)
- Deal with 'REFUSED' return code for type 65 queries.
- Viewport meta tag added for default block page and welcome page.
- Duplicated entries for the same domain on 'Whitelist > Domain' blocked.
- Baselist has been updated to 3975892.
New in NxFilter 4.5.1.5 (May 28, 2021)
- Close LDAP connection before bail out from LdapUpdater.update.
- 'rss', 'feeds' subdomains excluded from NxClassifer domain scanning.
- Spaces to one space in Lib.escapeSql.
- Pie charts became clickable and linked to 'Logging > Request' search result.
- Baselist has been updated to 3965542.
New in NxFilter 4.5.1.4 (Apr 26, 2021)
- Category name change, Warez -> Warez/Torrent.
- Add custom category domain as lower case string.
- 'User > CxLogon' has been added.
- 'Auto-register for new users' option for CxLogon has been added.
- 'User > Mass Import' has been added.
- Baselist has been updated to 3947317.
New in NxFilter 4.5.1.1 (Apr 1, 2021)
- Cryptocurrency, Real Estate, Pets categories have been added to Cloudlist.
- Cryptocurrency, Pets categories have been added to Jahaslist.
- Well-known domain list has been updated.
- Djmod.jar has been updated to v3.3.1.
- Bypass system block if it's a request from the server.
- Baselist has been updated to 3922792.
- NxClassifier ruleset has been updated to 574.
New in NxFilter 4.3.9.4 (Mar 24, 2021)
- Cache control scripts have been added.
- AttackerDic has been disabled as it's been replaced by ServerProtection.
- Remove noise words from title in NxClassifier.findCategory.
- NxClassifier ruleset has been updated to 445.
- Set '*_load_balance' to 'FALSE' at default.
- Baselist has been updated to 3894447.
New in NxFilter 4.3.9.2 (Feb 18, 2021)
- Adding default upstream server arbitrarily bug fixed.
New in NxFilter 4.3.9.1 (Feb 5, 2021)
- Change pipes to underscores for HX query.
- Allow non-standard DNS port into 'Upstream DNS Server' on 'DNS > Setup'.
- Baselist has been updated to 3751633.
New in NxFilter 4.3.8.9 (Jan 20, 2021)
- Unset Alert Categories at default.
- Use 'block_public_ip' option when it's actually set.
- Baselist has been updated to 3740797.
New in NxFilter 4.3.8.8 (Dec 18, 2020)
- Max file size for a blocklist has been increased to 30MB.
- Block by request type before attack domain detection.
- Check index existence inside updateDbConfigTo413.
- Baselist has been updated to 3727033.
New in NxFilter 4.3.8.7 (Nov 18, 2020)
- NxRelay policy update through HTTP added.
- Baselist has been updated to 3709649.
New in NxFilter 4.3.8.6 (Oct 21, 2020)
- '/nxfilter/conf/system-block.txt' added for System Block Domains.
- Baselist has been updated to 3694015.
New in NxFilter 4.3.8.5 (Sep 22, 2020)
- 'version.bat', 'version.sh' scripts have been added.
- Ruleset adjust for ordering Business category at the last.
- ReducedLog class added.
- Auto-switch support for filtering between NxProxy and NxFilter added.
- Exclude OPT record from Persistent Record cache deserializing.
- Baselist has been updated to 3677641.
New in NxFilter 4.3.8.2 (Aug 19, 2020)
- Baselist has been updated to 3641806.
New in NxFilter 4.3.8.1 (Jul 28, 2020)
- Bypass login redirection when it's AAAA query.
- To deal with TIME_KW from cloud classifier.
- Populate DNS access control from 'dns-allow-ip.txt' and 'dns-block-ip.txt'.
- To support domain mapping to user.
- 'DNS > Server Protection' menu added.
- Block by DNS request type feature added.
- NxClassifier.setExcludedFlag -> NxClassifier.setErrFlag.
- Show error reason on 'Classifier > Test Run'.
New in NxFilter 4.3.7.4 (Jul 7, 2020)
- Baselist has been updated to 3615648.
New in NxFilter 4.3.7.3 (Jun 19, 2020)
- NxClassifier.parseMetaRefresh bug fixed.
- NxClassifier ruleset has been updated to 442-2.
- Set retry count to 1 in for ResolverMan.
- Ignore additional records for Response.updateAnswerTtl().
- Baselist has been updated to 3570601.
- Cache refresh for every DNS request bug has been fixed.
New in NxFilter 4.3.7.2 (Jun 5, 2020)
- Don't start a new thread for upstream query.
- Rewrite ZoneTransfer and ZoneLookup classes according to library update.
- 'Allowed IP for Login Redirection' has been removed.
- New IP based access control, 'DNS > Access Control' has been added.
- Login redirection only works when it's A or AAAA query.
- Use IpRangeMap for UserDic.findByIp.
- Baselist has been updated to 3557219.
New in NxFilter 4.3.6.5 (May 25, 2020)
- Set restarter for MyClassifier.
- ServerProtection.TRIGGER_DOMAIN_CNT has been increased to 200.
- ServerProtection.TRIGGER_IP_CNT has been increased to 400.
- Safe-search CNAME domain cache bug fixed.
New in NxFilter 4.3.6.2 (Mar 27, 2020)
- Timeout for DNS connection will be set inside ResolverMan.createResolver.
- Category name check on JahaslistDic.find.
- Password size limit has been increased to 128.
- Baselist has been updated to 3477079.
New in NxFilter 4.3.6.1 (Feb 24, 2020)
- Check null for NxErr.catnameLine.
- ServerProtection.TRIGGER_DOMAIN_CNT has been increased to 300.
- ServerProtection.TRIGGER_IP_CNT has been increased to 300.
- Whitelist will be applieed to 'Drop Attack Request By Domain'.
- Persistent cache TTL has been adjusted to 8 hours.
- 'Bypass Microsoft Update' option has been removed from GUI.
- '*.microsoft.com', '*.windowsupdate.com' will be exposed on 'Whitelist > Domain'.
- 'Silent Block' option added on 'Config > Setup'.
New in NxFilter 4.3.5.6 (Feb 6, 2020)
- NxClassifier ruleset has been updated to 442.
- Don't delete old traffic data on startup if it's deleted on midnight.
- 'cleanup.bat', 'cleanup.sh' scripts added for deleting old traffic data.
- Null pointer exception check for HttpsLookup.JsonToMsg has been added.
- Use 'dns.google' instead of 'dns.google.com' for DoH to Google DNS.
- Baselist has been updated to 3413419.
New in NxFilter 4.3.5.5 (Feb 6, 2020)
- Write domain, user, client IP counts by logAll data.
- Add default policyId and a new token for the new user by login request approval.
- Config.start_time has been added.
- Negative cache will be applied on IPv6 response.
- Baselist has been updated to 3335847.
- Display uptime on 'Report > Usage'.
- Set true to 'drop_attack_request_by_domain', 'drop_attack_request_by_ip' at default.
New in NxFilter 4.3.5.4 (Dec 4, 2019)
- Djmod has been updated to 219.
- NxProxy support added.
- The number of users for a free Jahaslist license has been increased to 25.
- JSONObject with ordering added.
- Global.STATIC_KW, Global.BLOCK_KW added.
- Exporting Syslog in JSON format at default.
- Block,proxy.jsp has been removed as a redundancy.
- External block redirection IP has been removed as a redundancy.
- IPv6 block redirection IP has been removed as a redundancy.
- Cache control by JSP code has been added into 'top.jsp'.
- - 'Config > Admin > Client Password' has been readded.
- Baselist has been updated to 3266825.
New in NxFilter 4.3.5.3 (Oct 22, 2019)
- NxClassifier ruleset updated to 440-5.
- Globlist supports up to 5 policies.
- Baselist has been updated to 3179377.
New in NxFilter 4.3.5.2 (Oct 6, 2019)
- ServerProtection class added.
- Default request queue size has been increased to 2000.
- Jahaslist has been updated to 3140451.
New in NxFilter 4.3.4.9 (Sep 10, 2019)
- Trim the result of Config.getHostname.
- Answer 'use-application-dns.net' with NXDOMAIN.
- Jahaslist has been updated to 3086091.
New in NxFilter 4.3.4.8 (Aug 19, 2019)
- Use req_sum, block_sum for trend chart.
- Nxlib.css has been updated to 4348.
- New popup form has been applied on 'Classifier > Classified'.
- - 'Policy > Chromebook' has been removed.
- - 'Config > Admin > Client Password' has been removed.
- Set line_cnt to 0 in BlocklistUpdate.setActiveThread.
- Jahaslist has been updated to 3048949.
New in NxFilter 4.3.4.7 (Jul 30, 2019)
- Info box color restored to the old green one.
- The initial LogCache size on master node limited to 100,000.
- ZoneTransfer.update not to block startup process.
- nxlib.css has been updated to 4347.
- Jahaslist has been updated to 3011156.
New in NxFilter 4.3.4.6 (Jul 19, 2019)
- Fieldset, legend for GUI have been applied.
- Pagination has been added on Whitelist and Policy.
- Nxlib.css has been updated to 4346.
New in NxFilter 4.3.4.5 (Jul 10, 2019)
- DbMan.getDbJahastlist -> DbMan.getDbJahaslistMaster.
- Run BlocklistUpdate only when it's not a slave node.
- ClusterSync class for slave node added.
- nxd.cluster package has been separated.
- Jahaslist has been updated to 2956013.
New in NxFilter 4.3.4.4 (Jun 23, 2019)
- Use space as the delimeter for Allowed IP.
- Exact matching rule by adding a tailing dot introduced for Allowed IP.
- Slave node to use local Jahaslist at default.
- Read local license file first always.
- Local domain option added on User > RADIUS.
- Adding new users by 802.1x authetication.
- Restore IP session when NxFilter restarts.
- Lazy loading for slave node applied on LogWriter.loadLogCache.
- Config > VxLogon' -> 'User > VxLogon'.
New in NxFilter 4.3.4.3 (Jun 7, 2019)
- User login by RADIUS added.
- Jahaslist has been updated to 2841147.
New in NxFilter 4.3.4.2 (May 2, 2019)
- Cloudflare DNS server IP cache for NxLocal added.
- Verify Jahaslist size only when there's no search keyword on classifier,jahaslist.jsp.
- '/LNZ' protocol will be ignored over cloud.
- Delete old firewall rules in 'instsvc.bat'.
- '-' allowed in all 'name' properties.
- NxClassifier ruleset updated to 440-4.
- Jahaslist has been updated to 2762212
New in NxFilter 4.3.4.1 (Apr 12, 2019)
- Validation check for '|)' for classifier rule.
- NxClassifier ruleset updated to 440-3.
- Wait 2 seconds for graceful shutdown on LocalListener.
- Increase ruleset modification count when it's through GUI.
- Add Local DNS and Local Domain into NxClient policy.
- NxLocal support added.
- Uppercases allowed on LDAP setup.
- '/LNZ' protocol added for CxBlock.
- 'ldap.admin' column size increased to 256.
- '-' allowed in group name.
- Jahaslist has been updated to 2730651.
New in NxFilter 4.3.3.9 (Mar 20, 2019)
- Graceful shutdown for LogWriter has been introduced.
- Copy 'nxfilter.service' into '/etc/systemd/system' by 'deb' package.
- Write a log message for master node down.
- Don't do login redirection on 'index.jsp' when 'Disable Login Redirection'
- option eabled.
- 'config.disable_login_redirection' column added into Local database.
- Warning when you have an incomplete copy of Jahaslist on Classifier > Jahaslist'.
- Whiteone.isGlobal bug with system block domains fixed.
New in NxFilter 4.3.3.8 (Mar 2, 2019)
- Multi-policy loophole with Globlist has been closed down.
- V4.3.3.8 of 'domain-pattern.txt' applied.
- Jahaslist has been updated to 2674438.
- New action-info CSS applied.
New in NxFilter 4.3.3.7 (Feb 25, 2019)
- 'Classifier > blocklist' menu added.
- New well known domain list applied.
- CategoryCustomDao.selectDomainCount added.
New in NxFilter 4.3.3.5 (Feb 12, 2019)
- Common bypass domain will not be loaded when the domain is already whitelisted on 'Whitelist > Domain'.
New in NxFilter 4.3.3.4 (Feb 11, 2019)
- V4.3.3.4 of 'domain-pattern.txt' applied.
- Config.DEFAULT_HTTPS_PORT set to 443.
- Custom domain related params moved into Global class.
- NxClassifier ruleset updated to 440-2.
- Select only the first 2,000 data for CategoryData.getDomainList.
- CategoryData.hasDomainList flag has been removed.
- Use ConcurrentHashMap for WhiteoneDic.domainMap.
- 'Whitelist > Common Bypass' added.
- New Jahaslist category 'Suspicious' added.
- Jahaslist has been updated to 2645292.
New in NxFilter 4.3.3.3 (Jan 16, 2019)
- Cloud classifier uses HTTPS only.
- SSL Certificate CN added on LDAP importation setup for using LDAPS
- protocol.
- NXZ format for Jahaslist import/export introduced.
- NxClassifier ruleset updated to 440.
- Jahaslist has been updated to 2583200.
New in NxFilter 4.3.3.2 (Dec 20, 2018)
- Check the specific 'listen_ip' rather than localhost if any IP specified when it starts.
- Jahaslist has been updated to 2554268.
- V4.3.3.2 of 'domain-pattern.txt' applied.
New in NxFilter 4.3.3.1 (Nov 26, 2018)
- Total bypass by whitelist applies first.
- Whiteone.systemBlock and DnsSetup.dropHostnameWithoutDomain work
- Only on global level.
- Global level WhiteOne.bypassFilter bypasses attack domain detection.
- V4.3.3.1 of 'domain-pattern.txt' applied.
- Botnet detection rule adjusted to exclude valid subdomains.
New in NxFilter 4.3.2.9 (Nov 16, 2018)
- AttackerDic.isAttackDomain not bypassing 'A' type query bug fixed.
- Config.attackDomainCnt added.
New in NxFilter 4.3.2.8 (Nov 14, 2018)
- Cloud classifier feature added.
- DDOS protection by attacker target domain detection added.
- To be able to unset alert email address on 'Config > Alert'.
- NxClassifier ruleset updated to 439-2.
- Jahaslist has been updated to 2467342.
- - 'Admin Password' -> 'Current Password' on Config > Admin.
- Add port number when it's redirected to login, logout domains.
- V4.3.2.8 of 'domain-pattern.txt' applied.
New in NxFilter 4.3.2.7 (Oct 18, 2018)
- Extract domain from URL on Domain > Test.
- v4.3.2.7 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to 439.
- Use LocalTalkie.clearJahasDicCache() on DAO classes.
- Jahaslist has been updated to 2443476.
New in NxFilter 4.3.2.6 (Oct 4, 2018)
- Allow zero classifier on slave node.
- DnsSetup.allowPtrForServerIp added.
- LoginListener.dealLoginPolicy removed.
- Include wildcard domain redirection into the redirection list for client.
- NxResolveRunnableMan.maxThreadNum has been increased to 2048.
- Config.queueFullExit flag has been removed.
- Drop queries except A, AAAA type queries when the request queue is full.
- Whiteone.systemBlockFlag added for blocking browser specific HTTPS DNS.
- Remove cache type check for negative cache.
- Cache ANY type query.
- Maximum number of custom classified domains set to 300,000.
- 'Policy > Chromebook' menu added for CxBlock.
New in NxFilter 4.3.2.5 (Sep 13, 2018)
- Support IPv6 safe-search forwarding by RespCache.
- Use cloned message on RespCache.
- NxClient policy disabled bug fixed.
- Jahaslist has been updated to 2392825.
New in NxFilter 4.3.2.4 (Sep 8, 2018)
- SafeCache related changes rolled back.
New in NxFilter 4.3.2.3 (Sep 6, 2018)
- Possible null pointer exception bug from MsgUtil.RecordArrayToString fixed.
- Process 'Bypass All' after local resolver forwarding.
- Null data permitted into persistent_cache.authority_arr column.
- Persistent cache not adding with Minimum Responses enabled bug fixed.
- SafeSearchCache class replacing RespCache for safe-search forward.
- Safe-search forward for IPv6 added.
- EDNS identifier verification enabled.
New in NxFilter 4.3.2.2 (Aug 29, 2018)
- JSP pages with 'noacl,' prefix will be regarded as user pages.
- Config.bypassEmptyDomain flag removed.
- Use LocalListener.loginMd5 on UserLoginDao.login.
- UTF-8 encoding applied on net.Talkie and net.Listener.
- '/CXB' protocol for base64 encoded username from CxLogon added.
- Redirection only works for A type query.
- Fix truncate table bug from v4.1.1 update.
- Create 'persistent_cache' table only if not exists on 4280 update.
- 'startsWith' check for Global.NSLOOKUP_DOMAIN on request handler.
- 'startsWith' check for Global.BLOCK_DOMAIN on request handler.
New in NxFilter 4.3.2.1 (Aug 20, 2018)
- Request.parseHttpsQuery works with the local bind IP other than '127.0.0.1'.
- Add a dot to a domain name on DnsListener if there's no tailing dot.
- When there's no associated user, relay signals and EDNS queries will be blocked
- instead of Login Redirection.
- DnsListener, HxListener will use Config.listenIP and Config.dnsPort.
- Initialize Request.realUname to an empty string rather than null.
New in NxFilter 4.3.2.0 (Aug 14, 2018)
- Thread pool applied on UDP client connection.
- Global.BLACKLIST_TYPE_NONE has been removed.
- Request.isUnsupportedProtocol flag has been removed.
- Jahaslist has been updated to 2352337.
- Bind on listenIP for DnsListener, HxListener, WebSocketHandler.
- Clean up additional section for relay signal.
- Listner for DNS over SSL enabled.
- Add one more NxError for NxRelay client IP.
New in NxFilter 4.3.1.1 (Jul 22, 2018)
- Classifier.DomainQueue.size returns domainList.size.
- HtmlPatternDetector has been disabled.
- JahasUpdate().copyRulesetToSlaveLocalDb() added.
- NxClassifier ruleset updated to 438.
- Jahaslist has been updated to 2319531.
New in NxFilter 4.3.1.0 (Jul 15, 2018)
- Fail-safe with HTTPS DNS not working bug fixed.
- NodeTalkie.isAuthedUser removed since we can do it with LocalTalkie.
- Keep login session into local session map on UserLoginDao.login.
- Use file DB when it updates classifier ruleset.
- Call MsgUtil.sendBuf directly in MsgUtil.sendBlockMsg.
- Keep local copy of LastError map.
- Config.agentPolicyUpdatePeriod has been removed.
- 'Policy > Remote Filter' and 'Policy > Application Control' merged into 'Policy > NxClient'.
- Minimum cache TTL and block cache TTL introduced.
- Dynamic DNS has been removed on GUI level.
- Detailed output from nxwrapper.exe applied.
New in NxFilter 4.3.0.0 (Jul 14, 2018)
- New persistent cache serialization scheme applied.
- License verification process by License Manager added.
- CxLogon support added.
- EDirectory link has been removed on top menu.
- Print agentName on log message on LoginListener.
- Group selectbox added on user edit page for manually created users.
- Jahaslist has been updated to 2279690.
- Send NX domain answer to private PTR query of we are not in a private
- network.
- Send NX domain answer when drop packet option enabled on 'DNS > Setup'.
New in NxFilter 4.3.0 (Jul 6, 2018)
- New persistent cache serialization scheme applied.
- License verification process by License Manager added.
- CxLogon support added.
- EDirectory link has been removed on top menu.
- Print agentName on log message on LoginListener.
- Group selectbox added on user edit page for manually created users.
- Jahaslist has been updated to 2279690.
- Send NX domain answer to private PTR query of we are not in a private
- network.
- Send NX domain answer when drop packet option enabled on 'DNS > Setup'.
New in NxFilter 4.2.7 (Jun 8, 2018)
- 4 digits version system introduced.
- NxClassifier.MAX_CONTENT_LEN increased to 500000.
- Exclude HTML comments from NxClassifier parsing.
- Send license expiration emails 5 times within 15 days before the expiration date.
- Redirection with '0.0.0.0' as a destination IP will be bypassed.
- Domain to IP redirection comes before domain to domain redirection.
- Classifier.NxHtml.HtmlPatternDetector added.
- V4.2.7.0 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to 436.
- Jahaslist has been updated to 2236181.
New in NxFilter 4.2.6-p1 (May 28, 2018)
- DNS over HTTPS support added.
- ClassifierRulset.incModCnt added.
- No system categories' option has been removed.
- v4.2.6 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to 433.
- Jahaslist has been updated to 2179277.
- p1, Wildcard redirection added.
- p1, Bypass caching when there's no ARecord for an A type query.
- p1, JahaslistDic cache size increased to 3000
New in NxFilter 4.2.6 (May 4, 2018)
- DNS over HTTPS support added.
- ClassifierRulset.incModCnt added.
- 'No system categories' option has been removed.
- v4.2.6 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to 433.
- Jahaslist has been updated to 2179277.
New in NxFilter 4.2.5 (Apr 21, 2018)
- Maximum subdomain chopping count on JahasDic.findId adjusted to 5.
- Duplicated token check on UserDao added.
- User policy overrides group policy.
- Redundant 'catnameLine' and 'grpLine' have been removed from making unique keyword for logging.
- Active Directory integration over cloud with NxRelay added.
New in NxFilter 4.2.4 (Apr 2, 2018)
- 200 milliseconds delay for '/IBR' protocol added.
- '/PING' protocol added on HxListener.
- Remove 'Top User', 'Top Client IP' charts from user report.
- V4.2.4 of 'domain-pattern.txt' applied.
- Jahaslist has been updated to 2107631.
- NxClassifier ruleset updated to 420.1.
- VxLogon protocol bug with '.' in username fixed.
New in NxFilter 4.2.3 (Mar 8, 2018)
- Search keyword on UserDao to be applied on token column.
- v4.2.3 of 'domain-pattern.txt' applied.
- Not to add 'ns', 'mail' subdomains into NxClassifier queue.
- HX protocol sends domains instead of resolving them.
- Persistent cache reset for serialization ID change.
- Config.rqDropSize added for DDOS prevention.
- Add domain into NxClassifier queue even if it's classified by domain
- pattern analyzer.
- NxRelay support added.
- Message for free Jahaslist license on dashboard added.
- Adding 'continue' after 'allowedIpDic.isBypassAll'.
- Jahaslist has been updated to 2060034.
New in NxFilter 4.2.2 (Jan 30, 2018)
- Description field added on whitelist properties
- HxListener added
- DomainPatternDic enabled on Globlist
- 'Proxy Filtering' -> 'Remote Filtering' on GUI
- Windows installer to keep '/nxfilter/bin/startupbat'
- Deb package to keep '/nxfilter/bin/startupsh'
- '/nxfilter/bin/417-*bat' scripts removed
- v422 of 'domain-patterntxt' applied
- Jahaslist has been updated to 2005709
- NxClassifier ruleset updated to 420
- 'category_jahas' not populated bug fixed
New in NxFilter 4.2.1-p1 (Jan 10, 2018)
- NxClassifier.getDbJahaslist bug fixed
New in NxFilter 4.2.1 (Jan 4, 2018)
- Run JahasUpdate.remoteRecat on slave node.
- JahasUpdate.loadBigList removed.
- JahaslistDao uses local DB when it's on slave node.
- Config.useLocalJahsalist flag added.
- 'Invalid License' on slave node with 20 user free license bug fixed.
New in NxFilter 4.2.0-p1 (Dec 24, 2017)
- Enable custom category blocking on policy level.
New in NxFilter 4.2.0 (Dec 20, 2017)
- Globlist added.
- LoginListener.dealHostLogout added.
- 'Web Hosting' category separation enabled.
- NxClassifier ruleset updated to v4.2.0.
- Don't send license expiration email in trial period.
- Biglist update disabled.
- Duplicated 'classifier_ruleset' loading message removed.
- Don't add an invalid request into request queue.
New in NxFilter 4.1.9 (Dec 4, 2017)
- v4.1.9 of 'domain-pattern.txt' applied.
- Remove 'www.' when custom categorized domains merged into Jahaslist.
- Typo corrected on categories.txt, 'Iilegal' -> 'Illegal'.
- Maximum slave node number changed to 4.
- Separated system/custom category exportation added.
- Block domain removed from Config.isLoginDomain.
- Jahaslist has been updated to 1816518.
- v4.1.9 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to v4.1.9.
- 'nx' -> 'vx' on vxlogon table when new installation.
New in NxFilter 4.1.8-p2 (Nov 7, 2017)
- p2, v4.1.8 of 'domain-pattern.txt' applied.
- p2, Jahaslist has been updated to 1771263.
New in NxFilter 4.1.8-p1 (Oct 18, 2017)
- Config.resetAcl table name bug fixed.
- lib.css updated to 418.1.
New in NxFilter 4.1.8 (Oct 11, 2017)
- DomainDic.isBotnetDomainByConsonantCount added.
- Creating domain_unclass table only if it doesn't exist.
- NxClassifier ruleset updated to v4.1.8.
- Default memory allocation increased to 768 MB.
- New Windows service wrapper applied.
- VxLogon support added.
- Don't increase domain test count on dealAskDomainCatid.
- Jahaslist has been updated to 1722042.
New in NxFilter 4.1.7 (Sep 12, 2017)
- Reset NxStats.domainTestCnt on midnight.
- Exception handling for AllowedIpDao.selectOne added.
- New top menu bar applied.
- V4.1.7 of 'domain-pattern.txt' applied.
- AdminLoginDao.updateLoginCnt removed.
- Jahaslist has been updated to 1670081.
New in NxFilter 4.1.6-p1 (Aug 28, 2017)
- Possible null pointer exception from LibFile removed.
- CSS alert popup applied on GUI.
- infoList, warnList added on lib.jsp.
- Bypass Request.parseRfSignal for 'ZX' custom protocol.
- Restore 'Block by Windows Title' for application control.
- Jahaslist has been updated to 1636933.
- p1, 'Block by Windows Title' has been disabled.
New in NxFilter 4.1.6 (Aug 24, 2017)
- Possible null pointer exception from LibFile removed.
- CSS alert popup applied on GUI.
- infoList, warnList added on lib.jsp.
- Bypass Request.parseRfSignal for 'ZX' custom protocol.
- Restore 'Block by Windows Title' for application control.
- Jahaslist has been updated to 1636933.
New in NxFilter 4.1.5 (Jul 31, 2017)
- Threshold for unclassifed report decreased to 10.
- Local NxClassifier.mcIdx hiding global one removed.
- Recategorization request started on 105 points.
- - 'Web Hosting' category readded on Jahaslist.
- NxClassifier ruleset updated to 416.
- V4.1.5 of 'domain-pattern.txt' applied.
- User-agent string updated for NxClassifier.
- Typo corrected on categories.txt, 'IIlegal' -> 'Iilegal'.
- Only show search result on 'NxClassifier > Jahaslist'.
- Jahaslist has been updated to 1588849.
New in NxFilter 4.1.4-p1 (Jul 10, 2017)
- p1, Bug with 'Bypassing by client IP' fixed.
- p1, ZoneLookup bug fixed.
New in NxFilter 4.1.4 (Jul 8, 2017)
- News -> News/Magazine on Jahaslist category.
- Don't report unclassified domains when JahasDic bypassing.
- Redundancy validity check for DomainDic.doesDomainExist removed.
- Bypass all by client IP on 'Config > Allowed IP' added.
- Jahaslist has been updated to 1550327.
- CategoryDic unsynchronized.
- Custom classified domain export/import added on 'Category > System'.
New in NxFilter 4.1.3-p1 (Jun 26, 2017)
- Default value of proxy filter cache TTL set to 300 seconds.
- Possible DB connection leaking on JahaslistDao removed.
- DynUpdate -> AdapResolver.
- ZoneLookup works without a zone file for dynamic DNS domain.
- Jahaslist has been updated to 1531417.
New in NxFilter 4.1.3 (Jun 8, 2017)
- DNS load balance option removed on GUI.
- Dynamic DNS setup menu separated.
- 'use_negative_cache' option added on 'DNS > Setup'.
- Negative cache TTL changed to 15 minutes.
- 'hide_ssl_warning' option on cfg.properties file added.
- Rebuild Jahaslist when it's smaller than 1,200,000.
- Max custom classified size adjusted to 300,000.
- v4.1.3 of 'domain-pattern.txt' applied.
- 'Jahaslist Repository' on 'NxClassifier > Setup' removed.
- DomainDic.unclassCntMap added.
- JahasDic cache enabled.
- user trial license for Cloudlist included.
- Config.hostanme added for alert email.
New in NxFilter 4.1.2-p1 (May 29, 2017)
- Recat request disabled for custom categories.
- Negative cache has been disabled temporarily.
New in NxFilter 4.1.2 (May 21, 2017)
- DomainDic.doesDomainExist only checks NX domain.
- Default value for classifier_setup.keep_html_text set to be 'TRUE'.
- Bypass NxClassifier.recat when Jahaslist update disabled.
- Custom category selection possible on recategorization from 'Logging > Request'.
- Tutorial link in 'tutorial.bat' fixed.
- .4 million domains added into 'baselist.txt'.
- Import new domain only when it does biglist update.
New in NxFilter 4.1.1 (May 10, 2017)
- Clustering access control applied on DB connection.
- Modified h2db-1.3.176.jar having '-tcpAllowedIP' option applied.
- Block-page column size increased to 1,000,000.
- 'Block DNS Rebinding' on policy removed.
- NxClassifier works only against 'A' type query.
- StringBuilder used for Request.toLogLine and LogWriter.sendSysLog.
- 'Use Persistent Cache' option added on 'DNS > Setup'.
- 'Minimal Responses' option added on 'DNS > Setup'.
- Maximum response cache size increased to 10,000,000.
- Bypass Jahaslist update when there's no version file fetched.
- LookupHandler has been removed.
- Reset requestOverflowFlag when the request count resets.
- NxClassifier ruleset updated to 391.
- Null pointer exception from LdapUpdater.getLdapAgent fixed.
- Negative response cache up to 1 hour added.
- Showing cache size information on 'DNS > Setup'.
- Free Jahaslist license user number increased to 30.
- Custom categorized domain table size increased to store 1,000,000 domains.
- Count only 'A' type request for license validation.
New in NxFilter 4.0.8 (Apr 17, 2017)
- Don't set blacklist type from master-node when it can't connect master-node.
- JahasDic.isIncompleteUpdate -> JahasDic.isCompleteUpdate.
- DomainDic.isLocalDomain -> !DomainDic.isInvalidDomainToCheck.
- NxClassifier ruleset updated to 388.
- 'DNS Setup > Misc > Drop Hostname Without Domain' added.
- 'DNS Setup > Misc > Drop PTR For Private IP' added.
- Domain pattern analyzer works only for cached domain to reduce CPU load.
- Domain pattern dictionary updated to v4.0.8.
- 'Without Youtube' option for safe-search added on a policy.
- LogData.zoneDomainFlag removed.
New in NxFilter 4.0.7 (Apr 5, 2017)
- JahasDic.find bypasses when it is doing the initial update for Jahaslist DB.
- Don't send an email alert for license expiration when it's not using any blacklist.
- DEFAULT_LOG_FLUSH_LIMIT set to 3000.
- WhiteoneDic.getWhiteone returns an empty one instead of null.
New in NxFilter 4.0.6-p2 (Mar 30, 2017)
- Bug with bypass authentication from 'whiteone == null' fixed
- Bug on 'block,proxy.jsp' for calling old API fixed
New in NxFilter 4.0.6 (Mar 26, 2017)
- Faster Youtube domain checking applied.
- Faster whitelist checking applied.
- WhiteoneDic, Whiteone classes added.
- Drop packet option added on whitelist.
- Auto-switch to a free license from trial license for Jahaslist.
- Synchronize license request count to traffic DB count.
New in NxFilter 4.0.5 (Mar 12, 2017)
- Delimeter for 'Allowed IP' changed to comma.
- '/GBI' protocol added for NxForward.
- On 'NxClassifer > Ruleset', 'REPLACE' button changed to 'IMPORT' button.
- Using comma for NxClassifer rule allowed.
- NxError.timestamp not set bug fixed.
- '/IBR' protocol returns always 'true' bug fixed.
- Set 'RA' flag on DNS response header.
- Unset 'AD' flag on response header when it is not set from an upstream server.
- Unset 'AD' flag on block redirection message header.
- Bypass OPT record from RespCache.find.
- Use IPv4 over IPv6 for IPv6 block redirection at default.
New in NxFilter 4.0.4 (Feb 22, 2017)
- 'NxClassifier > Setup > Mass Import' has been removed.
- 'REPLACE' button added on 'NxClassifer > Ruleset'.
- 'IMPORT' button added on 'NxClassifer > Jahaslist'.
- eDirectory support added.
- Reclassify immediately when it is from NxClassifier.
- Syslog prefix not converted to upppercase bug fixed.
- Bypass RecatMan.recat for invalid domains.
- Log retention days can be set to 0.
- Possible NullPointerException in JahasUpdate.addBigList removed.
New in NxFilter 4.0.3-p1 (Feb 9, 2017)
- Category 'None' excluded from license validation.
New in NxFilter 4.0.3 (Feb 6, 2017)
- ClassifiedData.getCtime format restored to 'MM/dd HH:mm'.
- login.css has been removed.
- v1.1 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to 385.
- ClassifierRulsetDao.updateRulesetOld removed.
- classifier_ruleset.update_count column removed on a new installation.
- 'score' added on 'recat' table.
New in NxFilter 4.0.2 (Feb 1, 2017)
- Camel case notation applied.
- 'report_pw' on admin.jsp changed to 'rpw'.
- SLF4J introduced for enhancing logging performance.
- NxParam has been removed.
- Shallalist support has been removed.
- Cache DB connection not released bug on Main.deleteOld fixed.
- Sanitize HTML before NxClassifier.findCategory.
- Reclassifying on NxClassifer data updates ctime of its statistics.
- Only the group name being associated to the applied policy will be logged.
- Sending group name on Syslog exportation.
- Default values for DNS, HTTP connection, read timeout on NxClassifier increased
- to 6 seconds.
- NxClassifier finds a category by redirected domain when it gets redirected.
- Use placeholder for SQL with LogCache.
- Bypass Main.remoteUpdate on a slave node.
- New admin login page applied.
- Logging queue with LogFacade class added.
- Keep response cache when the connection to upstream server lost.
- Login-page, block-page, welcome-page template updated.
- LoginListener bypasses login when it gets a hostname not convertible to an IP
New in NxFilter 3.4.9-p1 (Jan 24, 2017)
- Cache DB connection not released bug on Main.delete_old fixed.
- Lazy loading for LogCache.domain restored to pre-loading.
- LogCache.find has been unsynchronized
New in NxFilter 3.4.9 (Jan 18, 2017)
- Cache DB connection not relased bug on Main.delete_old fixed.
- Charset extraction regex pattern on NxClassifier updated.
- New domain pattern dictionary from v4 added.
- Auto-update for biglist for Jahaslist added.
- New ruleset for NxClassifier having 375 rules.
- Main.LdapUpdaterRestarter class added.
New in NxFilter 3.4.8-p1 (Dec 24, 2016)
- Whitelist not reloading after zone file deleted bug fixed.
- UserDao.select_one_by_name has been added.
- PolicyDao.select_one_by_name has been added.
- GroupDao.select_one_by_name has been added.
- Missing column for policy creation bug fixed.
- safe_search' on PolicyProxyDao has been removed.
New in NxFilter 3.4.8 (Dec 16, 2016)
- LDAP over SSL support added
- LogWriter.flush before making report cache and delete old data
- Apply 'Alert Category' option on domains blocked as 'Adware'
- Add host IP on queue full alert email
- Safe-search has been applied on 'youtube.googleapis.com'
- LookupHandler not refreshing safe-search domain cache bug fixed
- Safe-search to be working only for 'A' type DNS query
- Google safe-search redirection will only be applied on its 'www'
- and 'encrypted' subdomain
- Global.Nx_DOWNLOAD link has been updated
- Safe-search mode on policy has been introduced
- Default value for 'max_slave_num' has been increased to 8
New in NxFilter 3.4.7 (Nov 23, 2016)
- LogWriter waits for flusing until traffic DB unlocked.
- Not able to set 'classifier_num' to 0 bug has been fixed.
- Jahaslist updated to 378336.
- NxClassifier ruleset updated to 381.
- Duplicated domain in 'domain_classified' table bug fixed.
New in NxFilter 3.4.6 (Nov 10, 2016)
- Return on invalid protocol for WebSocketHandler.onTextMessage.
- User, Group classes moved into 'nxd.policy' package.
- NxError, LastError, BlockedReason classes moved into 'nxd.filtering' package.
- AD integration for NxBlock readded.
- Syslog port' option added on 'Config > Setup'.
- From Each Node' option for Syslog exportation added.
- Disable Login Redirection' option added on 'Config > Setup'.
- Sending alert email for queue full error.
- Lazy loading has been applied for LogCache.domain.
- LogCache.find has been synchronized.
- Highlight for blocked domains on 'Logging > Request'.
New in NxFilter 3.4.5 (Oct 24, 2016)
- Minimum TTL for safe-search domain and domain to domain response introduced.
- To read alert email template as a regular text file on AlertMan.
- CC recipients added for alert email.
- Bypass nightly report generating on a slave node.
- Return on invalid message for WebSocketHandler.onTextMessage.
- NxForward support added.
- 'Disable Default Repository' option added on 'NxClassifier > Setup'.
New in NxFilter 3.4.4 (Oct 4, 2016)
- 'queue_full_exit' option on cfg.properties added.
- Connection error count from DB not being reset bug fixed.
- Connection timeout and socket timeout for sending an email have been increased to 6 seconds.
- 'nxd.policy' package added.
- 'nxd.dns' package added.
- 'nxd.phome' package added.
- 'nxd.filter' package added.
- Adjustable query cache TTL introduced for proxy clients.
New in NxFilter 3.4.3 (Sep 19, 2016)
- Not refreshing expired CNAME cache on LookupHandler bug fixed.
- CSV log exportation limit incresed to 100,000.
- 'common_edge.css' has been removed.
- PrefixDic is not a Thread anymore.
- 'alert' package added.
- Path not allowed in IE proxy bypass.
New in NxFilter 3.4.2 (Aug 22, 2016)
- 'drop_empty_response' option added on cfg.properties.
- NodeTalkie doesn't try to connect when master node down.
- BlockPage gets a default NxError when master node down.
- Login to slave GUI when master node down allowed.
- Interval for finding the last error on BlockDao adjusted to 50.
- LogWriter flush interval to master node adjusted to 5 seconds.
New in NxFilter 3.4.1 (Aug 12, 2016)
- Redundant bootstrap directory has been removed.
- We don't load data on DynUpdate when we find a blank domain.
- License file sharing between cluster nodes bug fixed.
New in NxFilter 3.4.0 (Aug 8, 2016)
- Improved DataBase, RowSet classes applied
- BlockDomainResolver returns '127.0.0.1' when there is no block redirection IP loaded on a slave node
- Filtering still works on a slave node having master node down
- Blacklist license update on GUI added
- License policy changed
- New authoritative DNS server module applied
- URLBlacklist support has been removed
New in NxFilter 3.3.4 (Jul 6, 2016)
- LDAP importation bug in 'LdapUpdater.delete_user' fixed.
New in NxFilter 3.3.2 (Jul 5, 2016)
- Client password for remote filtering agent added.
- Block by window title has been removed from application control.
- MS DNS IP validation removed for adding secondary DNS IP on Active Directory importation setup.
- Remove protocol from reclassification request.
- Bug for '172.16.x.x' with LibNet.is_private_ip method fixed.
- Authoritative flag unset from block redirection.
New in NxFilter 3.3.1 (Jun 14, 2016)
- New domain validation function applied for allowing the domains not having dot.
- Support for NxUpdate v1.x, NxClient v1.x stopped.
- Using standard DNS protocol for NxUpdate and NxClient signals and queries.
- Send error message to NxClient when authentication disabled.
- Remove duplicated username on the dropdown list on 'Report > Daily'.
- Keep LDAP DN for an LDAP imported user for LDAP login.
- 'nxd.ldap' package added.
- Add auth_drop_cnt instead of auth_redi_cnt when authentication not enabled.
- Set 'false' for 'follow_referral' on LDAP login.
- Version query signal added.
- Cache DNS response only when it has at least one A record.
- Removed redundancy checking for empty message from response cache.
- UTF-8 support for Jahaslist remote repository text file.
- Not sending DNS response after caching bug from v3.3.0 fixed.
- LDAP import excluded keyword size increased to 2,000 bytes.
New in NxFilter 3.3.0 (Jun 9, 2016)
- New domain validation function applied for allowing the domains not having dot.
- Support for NxUpdate v1.x, NxClient v1.x stopped.
- Using standard DNS protocol for NxUpdate and NxClient signals and queries.
- Send error message to NxClient when authentication disabled.
- Remove duplicated username on the dropdown list on 'Report > Daily'.
- Keep LDAP DN for an LDAP imported user for LDAP login.
- 'nxd.ldap' package added.
- Add auth_drop_cnt instead of auth_redi_cnt when authentication not enabled.
- Set 'false' for 'follow_referral' on LDAP login.
- Version query signal added.
- Cache DNS response only when it has at least one A record.
- Removed redundancy checking for empty message from response cache.
- UTF-8 support for Jahaslist remote repository text file.
New in NxFilter 3.2.0 (May 22, 2016)
- NxClassifier ruleset type for HTML text added.
- 'Keep HTML Text' option added on 'NxClassifier > Setup'.
- Domain validation for whitelist has been removed.
- Drop packet when there is a response message having no record from an upstream server.
New in NxFilter 3.1.9 (May 6, 2016)
- Remove respawn option from Systemd script.
- 'enable_auto_update' flag removed from NxClassifier.
- Not to share login session when master node down.
- 'is_queue_full' flag removed from MasterCheck.
- 'IE Proxy Bypass' added on 'Policy > Proxy Filtering'.
- Typo on 'Config > Redirection' fixed.
- NxClassifier DNS checking bug fixed.
New in NxFilter 3.1.8 (Apr 28, 2016)
- Error message for upstream DNS query timeout added.
- DnsStats class added.
- Updating Jahaslist through remote repository added.
- Importing Jahaslist uses lesser memory.
New in NxFilter 3.1.7 (Apr 20, 2016)
- 'HTTP_RECAT_MAX_LINE' has been increased to 100000.
- Don't merge custom classified domains when it's not on Jahaslist.
- Remote update for NxClassifier ruleset disabled.
- 'IMPORT RULESET' on 'NxClassifier > Setup' changed to 'REPLACE RULESET'.
- Jahaslist can be updated without any existing data.
- 'recatlist.txt' in '/nxfilter/jahaslist'has been removed.
- Use 'img/pix.png' to express a horizontal line on GUI.
- Reading file line by line when it imports Jahaslist.
- 'Web Hosting' category added on Komodia mapping.
- Systemd auto-start script added on 'deb' package.
- 'Disable Auto Update' on 'NxClassifier > Setup' removed.
- 'Enable Auto Update' on 'NxClassifier > Setup' added.
New in NxFilter 3.1.6 (Apr 11, 2016)
- Set host IP only once for Syslog setup with system startup.
- Checking for empty DNS answer from cache added.
- 'Log Retention Days' length limit on GUI increased to 3.
- Separator for 'Slave IP' on 'config,cluster.jsp' changed to a comma.
New in NxFilter 3.1.5 (Mar 22, 2016)
- Local DNS setup menu added on GUI.
- MS DNS setup menu added on GUI.
- Upstream DNS server load balancing option introduced.
- 'local_dns' and 'local_domain' disabled on cfg.properties.
- DNS level safe-search enforcing for Bing added.
New in NxFilter 3.1.4-p2 (Mar 9, 2016)
- New TTL calculation with the elapsed time bug in response cache fixed.
- Google safe-search domain not updated on response cache bug fixed.
New in NxFilter 3.1.4 (Feb 29, 2016)
- Use get_real_uname, instead of accessing real_uname directly.
- 'Log retention days' increased to 400.
- System domains bypassed for proxy filtering.
- Waiting for the block reason populated for 100 milliseconds.
- Lib.system_output gets string array as its parameter.
New in NxFilter 3.1.3 (Feb 17, 2016)
- Bypassing Active Directory domain to MS DNS server for unauthenticated users
- Follow Referral' option added for Active Directory importation
- \#{nx_name}' not populated on 'block,chrome.jsp' bug fixed
- Active Directory DNS bypassing comes before zone file search
- Zone trasfer search comes after zone file search
- Zone Transfer option on Active Directory importation removed
- New algorithm for caculating the remaining TTL of a cached record to setup the TTL for each record separately
- bypass_cache_domain_list' param removed from cfg.propertis
New in NxFilter 3.1.2 (Feb 8, 2016)
- Dynamic domain loaded with zero mtime bug fixed.
- Shallalist not including 'education/schools' bug fixed.
- Report on domain, user, client IP number missing bug fixed.
New in NxFilter 3.1.1-p1 (Feb 5, 2016)
- Reclassified domain being deleted bug fixed.
New in NxFilter 3.1.1 (Feb 2, 2016)
- Dynamic DNS support added.
- Whitelist applied on safe-search.
- Delete temporary zone files nightly.
- Warning message for not enabling authentication on IP association to user.
New in NxFilter 3.1.0p2 (Jan 25, 2016)
- - 'clt_cache_ttl' column moved into 'dns_setup' table.
New in NxFilter 3.1.0 (Jan 23, 2016)
- gob.xx' classified into government category.
- Authority DNS server feature added.
- DNS setup menu on GUI separated.
- Different CSS applied on MS browser.
- Wildcard lookup allowed on zone transfer.
- ypass DNS query against '*.ip6.arpa '.
- 'block-time' on policy not reset bug fixed.
- 'clt_cache_ttl' column moved into 'dns_setup' table.
New in NxFilter 3.0.9 (Jan 6, 2016)
- Minimum idle connection for DB pool changed to 10.
- Maximum idle connection for DB pool changed to 30.
- Auto-update for NxClassifier ruleset added.
- Update count for NxClassifier ruleset introduced for auto-update.
- Sorting whitelist domains for NxClient.
- Remote update for Jahaslist when NxFilter starts.
- Bypass remote update when there's no data in Jahaslist.
- Possible connection leak from RecatMan fixed.
- - Delete recategorization data before submitting.
- 'reset_pw.bat' resets admin name to 'admin'.
- Recategorization requires to keep it for 3 days.
- Redirection works on total bypass and master node down.
- 'recatlist.ver' -> 'recatlist_ver.txt'.
- 'CDN' added for domain pattern dictionary.
- 'gob.xx' classified into goverment category.
New in NxFilter 3.0.8 (Dec 18, 2015)
- Minimum idle connection for DB pool changed to 10.
- Maximum idle connection for DB pool changed to 30.
- Sorting whitelist domains for NxClient.
- Remote update for Jahaslist when NxFilter starts.
- Bypass remote update when there's no data in Jahaslist.
- Possible connection leak from RecatMan fixed.
- Delete recategorization data before submitting.
New in NxFilter 3.0.7 (Dec 5, 2015)
- Safe-search redirection applied to 'youtubei.googleapis.com' and 'www.youtube-nocookie.com'.
- Auto-update for NxClassifer ruleset added.
- Update count for NxClassifer ruleset introduced for auto-update.
- Policy based block-time added.
New in NxFilter 3.0.6 (Nov 20, 2015)
- Safe-search redirection applied to 'm.youtube.com'.
- Jahaslist auto-update disabled when domain pattern dictionary disabled.
- Case sensitivity problem with username for bandwidth control fixed.
- Bandwidth control, 2000MB for a user limit removed.
New in NxFilter 3.0.5 (Nov 4, 2015)
- HTML code input on 'GET/POST' requests blocked for preventing 'CSRF' attack.
- Javascript error for deleting custom categories fixed.
- Alert categories added on 'Config > Alert'.
New in NxFilter 3.0.4 (Oct 22, 2015)
- Remote Jahaslist recategorization list update added.
- DomainPatternDic updated.
- 1,000 user limit for user selectbox on report removed.
- RESTORE-DEFAULT' button added on 'NxClassifier > Ruleset' and 'NxClassifier > Jahaslist'
- Unclassified domain cache removed.
- Remove admin session data when admin logout.
- admin.jsp?action=logout -> admin.jsp?action_flag=logout.
- On log-view, hovering on category will show all the categories if there are multiple categories.
New in NxFilter 3.0.3 (Oct 5, 2015)
- Domain process queue size for NxClassifier adjusted to 10000
- Internal lookup_map size for domain process queue of NxClassifier adjusted
- to 1000
- SQL error for 'is_already_classified()' fixed
New in NxFilter 3.0.2 (Oct 5, 2015)
- InvaludContentTypeException class readded.
- Missing Lib.chop_subdomain() restored.
- Excluded list added for NxClassifier.
- Max redirection count for NxClassifier increased to 5.
- Unclassified cache bypassed for Jahaslist and Shallalist.
New in NxFilter 3.0.1-p1 (Oct 5, 2015)
- ShallaUpdate, BlacklistUpdate classes moved into 'nxd.util' package.
- Remove 'www.' from reclassification reqest.
- Jahaslist added.
- Auto-classification by NxClassifier added.
- Multi-bytes character support for block-page added.
- TEST' button added for alert email setup.
- Use ParamTest instead of ParamValidator.
- Ciphers defined for Tomcat to solve 'ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY'
- error on Chrome.
- Not being able to select Shallalist on 'Category > System' bug fixed.
New in NxFilter 2.8.7 (Sep 11, 2015)
- New responsive login form template added.
- webapps/lib/jquery-1.11.3.min.js' added.
- webapps/lib/jquery.cookie.js' added.
- webapps/lib/bootstrap.min.css' added.
- CSS and Javascript file inclusion moved into 'top.jsp'.
- Preview script on 'Config > Block Page' changed to use 'document.write()'.
New in NxFilter 2.8.6 (Aug 23, 2015)
- Keep logging for request IP address for admin login.
- New parsing algorithm for DomainPatternDic added.
- Tracker domain separated from Ads domain for DomainPatternDic.
- Missing data sanitization on WhitelistDao.update() added.
- Only one category for a custom categorized domain allowed.
- Domain reclassification popup on log-view added.
- Bypass LDAP synch when there's read timeout error.
- AutoCloseable DataBase and RowSet classes added.
New in NxFilter 2.8.5 (Aug 8, 2015)
- Recategorization request criteria activated.
- Log data not showing bug when you update from pre-v2.6.6 fixed.
- Block page size limit increased to 100 KB on validation.
- 'oem.properties' introduced.
- Update notification via alert email added.
- 'alert_email.ftl' template added.
- CNAME caching bug for safe-search fixed.
New in NxFilter 2.8.4 (Aug 1, 2015)
- Block page size limit increased to 10 KB.
- Bypassing 'Client Cache TTL' not working bug fixed.
- Response cache applied on DNS response having additional section.
- Use is_cached_once() instead of find() on DomainDic.
- 'moment.js' library removed from loggin,*.jsp pages.
New in NxFilter 2.8.3 (Jul 24, 2015)
- 'EDIT' on 'Category > System' changed to 'ADD-DOMAIN'.
- Tomcat compilerSourceVM and compilerTargetVM set to 1.7.
- UserTestDao.find_user() method restored.
New in NxFilter 2.8.2 (Jul 16, 2015)
- PhishDao removed.
- DaoUtil introduced for simplifying GUI customization.
- 'use_phishtank' field from ConfigData removed.
- Domain validation blocking for IDN bug fixed.
- Single category preference applied for 'Download'.
- Use 'ParamValidator.ERR_USERNAME_CHAR' for username checking.
- Ambiguous action target bug for 'category,system.jsp' fixed.
- has_new_message() and get_popup() methods have been removed from AdminLoginDao.
- Javascript date calculation bug on report fixed.
New in NxFilter 2.8.1 (Jul 14, 2015)
- Local domain excluded from Komodia query.
- Komodia query cache retention period increased to 7 days.
- Table name 'cache' changed to 'komodia'.
- Goverment category comes first when there are multi-categories for
- Komodia mapping.
- Special domain detection function added for Komodia.
- Single category preference applied for Home/Gardening.
- Remove 'www' for Komodia query.
- Adding domain into system category became possible.
- Duplicated map data for traffic DB on cluster bug fixed.
- '/nxfilter/conf/prefix.txt' added for dynamic classification.
- '/nxfilter/conf/suffix.txt' added for dynamic classification.
- Datetime picker not selecting the days of last month bug fixed.
- Database connection hang on 'Policy > policy' problem fixed.
- CategoryData.get_domain_list() method for lazy loading added.
- 'moment.js' library removed.
New in NxFilter 2.8.0 (Jul 1, 2015)
- Adding domain into system category became possible.
- Dynamic classification based on domain pattern applied for Shallalist.
- Duplicated map data for traffic DB on cluster bug fixed.
New in NxFilter 2.7.9 (Jun 20, 2015)
- Special domain detection function added for Komodia.
- Single category preference applied for 'Home/Gardening'.
- Remove 'www' for Komodia query.
- User IP listing format applied.
New in NxFilter 2.7.8 (Jun 16, 2015)
- DynUpdate host checking obsoleted.
- Local domain excluded from Komodia query.
- Komodia query cache retention period increased to 7 days.
- Table name 'cache' changed to 'komodia'.
- Goverment category comes first when there are multi-categories for Komodia mapping.
New in NxFilter 2.7.6 (Jun 12, 2015)
- IPv6 redirection IP setup added.
- prunsrv.exe updated to v1.0.15.
- Zone transfer checkbox removed from new Active Directory importation setup.
- First login check for login through NodeListener.
- Bypass filtering for queue full error on slave node.
- Bypass domain existence checking for queue full error.
New in NxFilter 2.7.5 (May 9, 2015)
- 'no_share_session' option for cfg.properties added.
- 'Max domain length check' on policy bypassed at default.
- 'Block covert channel' on policy is off at default.
- 'Block mailer worm' on policy is off at default.
- 'Block DNS rebinding' on policy is off at default.
New in NxFilter 2.7.4 (Apr 27, 2015)
- Pre-cache bug with CNAME record fixed.
New in NxFilter 2.7.3 (Apr 20, 2015)
- Dropdown menu added.
- config,config.jsp -> config,setup.jsp.
- main,dashboard.jsp -> dashboard.jsp.
- CSS validated.
- /conf/komodia.map updated to fix some type.
New in NxFilter 2.7.2 (Apr 9, 2015)
- 'show_netflow' option for cfg.properties added.
- Daily trend chart interval corrected to 3600.
- User traffic trend duplicated in report_cache bug fixed.
- User traffic trend only 23 hours display bug fixed.
- Domain, user, client-ip count on weekly report to show MAX value.
- 'chart3div' tag removed from report GUI.
- Minimum response cache size increased to 100,000.
- Maximum response cache size increased to 2000,000.
- Reset whitelist when it lose the last parent policy.
- chk_new_message() not to add blank line.
- Well known site list size increased to 100,000.
New in NxFilter 2.7.1 (Mar 30, 2015)
- Null data return for daily report bug fixed.
- Single category only for Komodia categories applied.
New in NxFilter 2.7.0 (Mar 27, 2015)
- Custom category domain limit increased to 100,000.
- daily_stats table added.
- request_traffic_5m, request_traffic_1h, real_user_count removed.
- 'syslog_only' flag added into cfg.properties.
- Authentication error with LDAP username having space allowed.
- Default data for empty trend chart added.
- LibDate.strftime_arr bug fixed.
- log_view, signal_view, netflow_view, hh24, category_count_5m removed.
- Daily report and weekly report being generated based on start date.
- Datetime picker added for log-view and report.
- Report caching structure redesigned.
- Delete old data on 02:00.
- Generating report cache for daily, weekly report on 03:00.
- 'stop_auto_report' option for cfg.properties added.
- 'ldap_conn_timeout' option for cfg.properties added.
- 'ldap_read_timeout' option for cfg.properties added.
- Swimsuit/Underwear category on Komodia map merged into Fashion/Beauty.
- h2-1.3.176.jar added.
New in NxFilter 2.6.5 (Mar 10, 2015)
- 'log_flush_limit' option for cfg.properties added.
- Komodia query only for existing domain.
- 'most_permissive' option for cfg.properties for multi-category permit.
- MIN_TTL set to 5 seconds for a response cache.
New in NxFilter 2.6.4 (Mar 3, 2015)
- DB_CLOSE_ON_EXIT=FALSE added in JDBC URL.
- cluster_monitor missing colummn bug fixed.
- Phishing related option for cfg.properties removed.
- report_server_ip option for cfg.properties for separating reporting DB added.
- Komodia 'Misc' mapping bug fixed.
New in NxFilter 2.6.3 (Feb 27, 2015)
- Syslog format changed to have 'NXFILTER' prefix.
- ShallalistUpdate to be using system DNS.
- Downloading the backup file from 'Config > backup'.
New in NxFilter 2.6.2 (Feb 11, 2015)
- License share between cluster nodes added.
- keystore_file, keystore_pass option added on cfg.properties for custom SSL certification.
- Multi-level domain chopping with Shallalist bug fixed.
New in NxFilter 2.6.1 (Feb 10, 2015)
- alert_email.ftl removed.
- Komodia dynamic classification not added into cache.
- Most specific IP range comes first rule for user association added.
- '/conf/komodia.map' updated to having 69 categories.
New in NxFilter 2.6.0 (Feb 2, 2015)
- Domain test protocol changed.
- Komodia cloud blacklist option added.
- URLBlacklist option on GUI removed.
New in NxFilter 2.5.3 (Jan 12, 2015)
- Quota reset not synchronized over cluster bug fixed.
- localhost excluded from DNS ACL for WebSoket.
- Chrome block-page not showing on HTTPS bug fixed.
- Proxy level redirection added.
- Bypass authentication doesn't apply on authenticated user.
New in NxFilter 2.5.2 (Jan 12, 2015)
- install_time added into config table.
- New block-page and login-page set added.
- Chrome agent support added.
- Wildcard, '*' support for whitelist keyword added.
- DNS level Youtube safe-search enforcing added.
New in NxFilter 2.5.1 (Dec 9, 2014)
- Only allows IP address for AD/LDAP host.
- Embedded Tomcat updated to v7.0.57.
- Proxy level domain redirection added.
- Bypassing IP host from forwarding query.
- Custom query parsing bug fixed.
- Java mail API updated to v1.5.1.
New in NxFilter 2.5.0 (Dec 2, 2014)
- Group account concept introduced.
- NxClient v4.0 support added.
- Showing real username from NxClient.
- no-usr, no-grp -> anon-user, anon-grp.
- Proxy log not display correctly with IDN bug fixed.
- zvelo_timeout option added into cfg.properties.
- Proxy blocked reason not display bug fixed.
- 'local_resolver_port' option added into cfg.properties.
- real_user_cnt table added for counting distinct logged-in username.
- Version check for agent added.
New in NxFilter 2.4.5 (Nov 13, 2014)
- Time format on 'Report > usage' changed.
- Log filename changed to 'nxfilter.log'.
- PTR record bypassed from 'Block unclassified' option.
New in NxFilter 2.4.4 (Nov 7, 2014)
- DNS level safe-search enforcing implemented.
- Safe-search option became policy specific.
- bypass_empty_domain option added into cfg.properties.
New in NxFilter 2.4.3 (Oct 30, 2014)
- Alert email showing detailed reason for proxy block.
- Usage report for recent 30 days added.
New in NxFilter 2.4.2 (Oct 20, 2014)
- is_valid_domain, is_valid_email moved into lib.jsp.
- Group specific free-time not updated bug fixed.
- Redirection domain timeout error fixed.
- Zvelo license alert email bug fixed.
New in NxFilter 2.4.0 (Oct 14, 2014)
- Admin domain and DDNS domain bypassed from filtering.
- Reverse lookup domain added into DDNS domain lookup table.
- max_slave_num' variable added into cfg.properties.
- traffic_trend_5m -> request_trend_5m.
- Report cache file extension changed from 'xml' to 'txt'.
- Zvelo cloud option for blacklist added.
- Minimum length for name adjusted to 1.
- Phishing DB removed.
- www_dir' param introduced for easier customization of GUI.
- Default HTTPS port changed to 443.
- Temp direcotry under webapps moved into tmp/www.
- TCP port checking added into Windows setup.
- Checking blacklist_type disparity among cluster nodes.
New in NxFilter 2.3.0 (Sep 29, 2014)
- Faster startup time by reducing local port checking timeout.
- Performance increased by introducing thread safe map.
- Domain cache and unclassified cache introduced.
- Fusion chart compatibility removed.
- Locking algorithm redesigned for PhishiDic.
- ResponseCache redesigned using thread safe map.
- Default response cache size increased to 200,000.
- err_list removed from DAO.
- OpenLDAP import supports 'memberOf' attribute.
New in NxFilter 2.2.8 (Sep 10, 2014)
- STOP signal added for NxClient and NxUpdate.
- SWITCH signal removed.
- Default block page not showing bug with IE fixed.
New in NxFilter 2.2.7 (Aug 26, 2014)
- IP session synchronize for login_policy only.
- StatsMaker thread bypassed for a slave node.
- Bypass cache if there's an authority or additional record.
- Slave node request count added into 'Config > cluster'.
- Javascript added for hiding embedded block-page.
- upstream_dns option added into cfg.properties.
- Sending rf_block_ip to local user bug fixed.
- Duplicated custom category name check added.
- Custom query support added.
New in NxFilter 2.2.6 (Aug 18, 2014)
- Slash relaced to back-slash on NxPath
- Checking AD DNS server availability
- use_local_dns param not used bug fixed
- IPUPDATE signal ingnored if it comes from a static IP
- Proxy, application error count added into report
- tomcat.ks -> nxfilter.jks
- dump_domain option for cfg.properties added
- bypass_cache_domain option for cfg.properties added
New in NxFilter 2.2.5 (Jul 25, 2014)
- Local DB initial copy routine at startup added
- block_redi_ip, rf_block_redi_ip length adjusted to 100
- Logout signal added
New in NxFilter 2.2.4 (Jul 14, 2014)
- 'Request' -> 'User' on header of 'Logging > request' list.
- Array index overflow bug on logging across clustering nodes fixed.
- Load balancing for block reason added.
- Admin domain redirection rule added for clustering.
- top_nomenu.jsp, bottom_nocopy.jsp, action_info_nomenu.jsp removed.
- FusionCharts.js link removed from top.jsp.
- Program icon changed.
New in NxFilter 2.2.3 (Jul 1, 2014)
- Windows installer preserves previous config files with the introduction of default config files.
- Back-slash in NxPath replaced to slash.
- Regex removed from whitelist map.
- True bypass concept introduced.
- Login through NxLogon to slave node synchronized with master node.
- Adjust resolving order to prevent socket connection error on NxLogon.
- Bulk insert for custom category bug fixed.
- Load balancing for login, block redirection.
- Local cache DB added for load balancing.
- '/extra' directory and 'nxlogon.exe' removed for preventing false positives from some virus detection program.
New in NxFilter 2.2.2 (Jun 27, 2014)
- Forcing safesearch option through NxClient, NxLogon V2 added.
- URL keyword filtering through NxClient, NxLogon V2 added.
- Application control through NxClient, NxLogon V2 added.
- CharacterSet encoding removed from NxParam as a redundancy.
- Request object removed from AdminLoginDao.
- javax.naming.PartialResultException ignored by LdapAgent.
- '+' in application control rule changed to '*'.
- Minimum length(4) introduced for application control keyword.
- Empty record check for finding response cache added.
- application > policy_application.
- Domain to domain redirection added.
- block_domain introduced.
- Fashflux detection removed.
- IP based ACL for login redirection added.
- err_detail > reason_detail.
- System domain concept removed.
- Log only applied to proxy policy.
- Whitelist domain, keyword for bypass filtering applied to proxy policy.
- Block IP host added to proxy policy.
- Using DynUpdate for AD domain resolving.
- Block other browser option added for proxy policy.
- Default number of request handler became 4.
- Default value for 'Log retention days' changed to 30.
- Timeout applied to TCP port checking at startup.
- Application block execution interval introduced.
- Included NxLogon updated to v1.5 having application blocking removed.
- Agent policy update period added on 'Config > config'.
- SMTP port reset bug on GUI fixed.
- Google chart not displaying for IE bug fixed.
- 'overflow: hidden' on 'div.hr' added into blockpage template.
New in NxFilter 2.2.1 Beta 1 (Jun 11, 2014)
- System domain concept removed.
- Log only applied to proxy policy.
- Whitelist domain, keyword for bypass filtering applied to proxy policy.
- Block IP host added to proxy policy.
- Using DynUpdate for AD domain resolving.
- Block other browser option added for proxy policy.
New in NxFilter 2.2.0 Beta 1 (Jun 6, 2014)
- Forcing safe-search option through NxClient added.
- URL keyword filtering through NxClient added.
- Application control through NxClient added.
- NxLogon updated to v1.4 with several fixes.
- CharacterSet encoding removed from NxParam as a redundancy.
- Request object removed from AdminLoginDao.
- javax.naming.PartialResultException ignored by LdapAgent.
- '+' in application control rule changed to '*'.
- Minimum length(4) introduced for application control keyword.
- Empty record check for finding response cache added.
- application -> policy_application.
- Domain to domain redirection added.
- block_domain introduced.
- Fash-flux detection removed.
- IP based ACL for login redirection added.
- err_detail -> reason_detail.
New in NxFilter 2.1.0 (May 19, 2014)
- Application control added.
- New NxLogon for killing UltraSurf and Tor processes.
- NxMapper for AD single sign-on support added.
- Per-user basis sum view added for 'Log > bandwidth'.
- '#{user}' variable supported on welcome page.
- Bordering spaces allowed in exclude keyword for LDAP import.
- Make a temporary copy for the request parameter map.
- Empty password for LDAP import allowed.
- '0:0:0:0:0:0:0:1' check for GUI restriction restored.
- Block, login, welcome page removed from GUI IP restriction.
- FusionChart library removed.
New in NxFilter 2.0.6 (Apr 28, 2014)
- Login redirection bug fixed.
New in NxFilter 2.0.5 (Apr 28, 2014)
- Login API through HTTP added for custom login script.
- Top 5 chart by client-ip added into daily and weekly report.
- Group or user exclusion by keyword for LDAP import added.
- Request, Response, Wonfig for GUI removed.
- Group specific free-time added.
- Free-time policy added on user, group list GUI view.
- User, group, policy, category variables added into block-page.
- Phishing host converted to lower case.
- Not selecting 'Same as work-time policy' for user-edit bug fixed.
- Free-time flag added in user-test view.
- 24:00 added for free-time setup.
New in NxFilter 2.0.4 (Apr 14, 2014)
- Logout-domain not working bug fixed.
- Correct cluster node downtime added into alert email.
- Slave node monitor added on 'Config > cluster'.
- Connection check from slave node startup readded.
- Action info missing on user,ldap_edit.jsp fixed.
- 'overflow: hidden' added for IE compatibility.
- Blocked IP for DNS added on 'Config > allowed-ip'.
- Concurrency bug with NxParam fixed.
New in NxFilter 2.0.3 (Apr 8, 2014)
- Report statistics cache added for faster report generation.
- NxClient signals removed from DNS packet.
New in NxFilter 2.0.2 (Apr 4, 2014)
- Netflow size format changed to human readable format.
- OpenLDAP support restored by user request.
- Cluster mode warning message added.
- Custom category not showing on policy bug fixed.
- Custom category domain limit bug fixed.
- Quota time not reset on midnight bug fixed.
- 'Duplicate headers returned by the server' on Chrome bug fixed.
New in NxFilter 2.0.1 (Apr 1, 2014)
- Whitelist keyword not realoading bug fixed.
- Null pointer exception from version check fixed.
- Bandwith synch bug when a cluster node died fixed.
- Block redirection not working on SSL bug fixed.
New in NxFilter 2.0.0 (Mar 31, 2014)
- New GUI component layer for easy customization applied
- Google chart introduced for dashboard and report
- Weekly report added
- Block-page edit, preview on GUI supported
- Config > alert' menu separated
- Alert period introduced
- Detailed statstics with request-count, request-sum and ip-count
- no-user, no-grp introduced for default user and group name
- Login redirection using login domain
- Admin name introduced
- Config > admin-pw' -> 'Config > admin'
- user_ip index added
- history_retention_period -> log_retention_period
- history -> log
- OpenLDAP, eDirectory support removed
- Variable names in access_violation.ftl changed
- Use update button to change login-token
- LDAP period caculation algorithm changed
- div.hr class replacing hr tag for IE compatibility
- Row highlight for list introduced
New in NxFilter 1.7.6 (Mar 10, 2014)
- Alert interval changed to 5 minutes.
- Include SRV record for category lookup.
- RecordSet not closing bug from config, report fixed.
- Embedded Tomcat updated to v7.0.52.
- max_domain_len adjusted to between 0 and 1000.
New in NxFilter 1.7.5 (Feb 10, 2014)
- Alert email sender changed to admin email.
- Zone-transfer test button added.
- reset_acl util script added.
- table.view class added into common.css.
- log_blocked_only option added into cfg.properties.
- PTR record excluded from domain length checking.
- DB connection not closing bug after bandwidth data loading fixed.
New in NxFilter 1.7.4 (Jan 6, 2014)
- IE, Chrome compatibility enhanced for HR tag color.
- Stops on binding error for UDP 53 port.
- Zone-transfer interval adjusted to 5 seconds.
- Bypassing DDNS update message for Active Directory.
- File not close bug fixed on Logging > request.
- admin_pw removed from Config, Wonfig.
New in NxFilter 1.7.3-p1 (Dec 20, 2013)
- Active Directory connection timeout changed to 5 seconds.
- Active Directory read timeout changed to 20 seconds.
- delete_old applied to signal and netflow data.
- Traffic column not updating for reducing update time.
New in NxFilter 1.7.3 (Dec 16, 2013)
- 'RF token' changed to 'Login token'.
- 'RF block redirection IP' changed to 'External redirection IP'.
- preferIPv4Stack option enabled for Tomcat.
- Time difference between user report and global report fixed.
- Policy specific ad-remove option added.
- Top 5 category chart added into dashboard.
- User specific top 5 category chart added into 24 hour report.
New in NxFilter 1.7.2 (Nov 15, 2013)
- Changed several menu names, history -> logging or request.
- Fast-flux detection not disabled bug fixed.
- Domain lookup speed improved with new caching algorithm.
- Firewall rule added for TCP 80 port on Windows installer.
New in NxFilter 1.7.1 (Oct 28, 2013)
- Tutorial link added into the top menu.
- 'Response cache size' option moved into 'Config > config > DNS setup'.
- Connection pool leak on 'Config > config' fixed.
- SRV query excluded from domain name length filtering.
- GUI design layout changed.
New in NxFilter 1.7.0 (Oct 14, 2013)
- GUI view layer changed to JSP.
- Changing GUI template directory made to be possible.
- 'ad-remove' category introduced for removing embedded adverts.
- Initial password information added to admin login-page.
- 'Config > config' not updating bug fixed.
New in NxFilter 1.6.2 (Oct 9, 2013)
- Uncaught exception handler added for worker threads.
- Pagination HTML tag but fixed.
- Admin domain added for accessing GUI using domain.
New in NxFilter 1.6.1 (Oct 7, 2013)
- local_dns, local_domain options added for bypassing NxFilter.
New in NxFilter 1.6.0 (Sep 23, 2013)
- Shallalist support added.
- Auto-backup retention period added.
- User select box error with IE, Chrome on report page fixed.
- Checking for URL insertion on whitelist by domain added.
- DB Query timeout applied for GUI.
- Script name changed, update-bl.bat to update_bl.bat.
New in NxFilter 1.5.4 (Sep 16, 2013)
- Bandwidth control added.
- Duplicated TTL manipulating routine removed.
- AD/LDAP login-page username changed to case-insensitive.
- Policy update error with empty category bug fixed.
- Username not found exception on per-user report fixed.
New in NxFilter 1.5.3 (Aug 29, 2013)
- User identification by ip-session comes before IP based user.
- Communication for history in clustering works asynchronous way.
- IP binding with local connection bug fixed.
New in NxFilter 1.5.2 (Aug 26, 2013)
- IP binding added.
- One to many relationship applied for whitelist and policy.
- Default list size of history, signal search changed to 200.
- CSV file export added for history.
- User, group relation not deleted on AD import bug fixed.
New in NxFilter 1.5.1 (Aug 19, 2013)
- OpenLDAP integration support added.
- Novell eDirectory integration support added.
- Client IP shown on user selection for per-user basis report.
- Clear button added in 'History > history' and 'History > signal'.
- Admin password reset util script added.
New in NxFilter 1.5.0 (Aug 12, 2013)
- Category top 5 chart added.
- Setting 'Max domain length' in policy not to 0 fixed.
- List order in GUI changed to ignore the case.
- Concurrency issue with block-page fixed.
New in NxFilter 1.4.9 (Jul 29, 2013)
- 'Block unclassified' option added into policy.
- DB connection not return bug on 'User > active-directory > import' fixed.
- Empty group allowed from AD import.
New in NxFilter 1.4.8 (Jul 22, 2013)
- User specific report added.
- User, Client IP linked in 'History > signal'.
- Exact matching keyword introduced into history search.
New in NxFilter 1.4.7 (Jul 15, 2013)
- Auto-backup for config DB added.
- Typo on 'Response cache size' removed.
- User, group, policy search option link on 'History > history'.
- Initial DB connection will be tried for 1 minute before it gets connected.
- http_port, https_port parameter added into cfg.properties.
- Group filter missing after navigation in history search fixed.
New in NxFilter 1.4.6 (Jul 8, 2013)
- IP based ACL for cluster node applied to database connection.
- Sending success message to NxUpdate.
- Bypassing AD update when it gets an empty data set.
New in NxFilter 1.4.5 (Jul 1, 2013)
- Dynamic IP update for client added.
- bypass_filter on per-policy whitelist enabled.
- Duplicated domain, keyword on whitelist allowed.
- Expiration-date display bug fixed.
- Quota reset bug fixed.
New in NxFilter 1.4.4 (Jun 25, 2013)
- Zone-transfer on AD import bug fixed.
New in NxFilter 1.4.3 (Jun 25, 2013)
- Per-policy whitelist/blacklist added.
- Response cache size option added.
- AD importation of computer account bug fixed.
- Default value for 'Max domain length' changed to 64.
New in NxFilter 1.4.2 (Jun 17, 2013)
- Zone transfer function added.
- Admin password reloading bug fixed.
New in NxFilter 1.4.1 (Jun 10, 2013)
- SPF record detection moved into 'covert channel'.
- Covert channel detection on CNAME, SRV response record added.
New in NxFilter 1.4.0 (Jun 4, 2013)
- Malware/Botnet detection added
- Inspection on response packet added
- DNS record type added in history, syslog exportation
- Domain property added to active directory data
- User move bug in group edit fixed
New in NxFilter 1.3.1 (May 17, 2013)
- Alert mailing system revised.
- Time format changed in access violation email.
- Clustering node down alert email added.
- Whitelist overrides phishing protection.
- Simpler management for phishing protection.
New in NxFilter 1.3.0 (May 7, 2013)
- Load-balancing and fail-safe with clustering added.
- Login to multiple server function for nxlogon added.
- Opening Windows firewall port from the installer.
- prunsrv.exe for AMD64, IA64 removed from the package.
- NxClient separated from the package.
New in NxFilter 1.2.0 (Apr 23, 2013)
- Remote filtering client added.
- Auto-detection for 'NX_HOME' added.
New in NxFilter 1.1.5 (Apr 8, 2013)
- Expiration date for user account added.
- Checking JRE version from the Windows installer.
- Installing service option from the Windows installer.
- Bug fixed, user password update bug fixed.
- Bug fixed, ignore the DNS resolvers not responding.
- Bug fixed, logout not closing socket connection fixed.
New in NxFilter 1.1.4 (Mar 19, 2013)
- SRV record excluded from local DNS cashing with v1.1.4.
- Logoff script added for Active Directory with v1.1.4.
- IP based ACL replaced to simpler one with v1.1.4.
- IP based ACL for admin GUI added with v1.1.4.
- Bug fixed, apply custom categories against IDN with v1.1.4.
New in NxFilter 1.1.3 (Mar 12, 2013)
- Phishing protection overrides 'log_only' option in policy with v1.1.3.
- 'admin_block' in whitelist overrides 'log_only' option in policy with v1.1.3.
- Using '*' for including subdomains in whitelist and custom category with v1.1.3.
- Summary statistics added in dashboard and report with v1.1.3.
New in NxFilter 1.1.2 (Mar 7, 2013)
- System category will not be appeared in policy-edit before populated since v1.1.2.
- Bug fixed, Multi-category bug fixed with v1.1.2.
- Bug fixed, default data for lunch-time bug fixed with v1.1.2.
New in NxFilter 1.1.1 (Mar 1, 2013)
- Phishing DB update method changed with v1.1.1.
New in NxFilter 1.1 (Feb 25, 2013)
- Phishing protection added.
- link to domain in history added.
- Bug fixed, free-time bug fixed.
- Bug fixed, group member assignment bug fixed.
New in NxFilter 1.0 (Feb 12, 2013)
- Single sign-on with Active Directory added.
- Dual policy setup, You can have work-time policy and free-time policy for user and group
- Template for new policy creation added.
- 'Quota all' option for applying quota to all domain added.
- Javascript confirm message added for deleting data.
- IE compatibility improved.
New in NxFilter 0.91 (Jan 30, 2013)
- Mass toggle for blocked categories
- Syslog exportation added.
- Quota time added.
- Bug fixed, history, report custom date bug fixed.
- Bug fixed, possible deadlock in internal socket fixed.