dandelion rains

[thesis <etftt at zone dot nnov dot ru>]

SREA Gets In On $75 Million Project. Investors Respond!

Score One Inc.
SREA
$0.20 UP 33%

Investors are hyped about this new project. It will not only bring
increased revenues to Score but increased exposure on an international
project like this. Read the news and get on SREA firs thing Monday!

Test mode means that installer does not save configuration in the
permanent memory, as before.
A bug that prevented user from creating a rule set branch inside another
branch has been fixed.

Now you can make installer schedule reboot in a few minutes, then upload
new policy or ACLs and then cancel reboot if upload was successful. This
operation also helps identify changes made to objects in two copies of
the same data file.

Confirmation dialog that is shown when user tries to delete an object
also shows all groups and rules that use it.

Compile-time AddressTable object that uses file with no addresses should
be treated as an empty group according to the "Ignore empty groups"
option.

Neither the GUI nor compiler noticed this, which resulted in the
incorrect firewall configuration.
Compiler failed to convert DNSName objects set to resolve at compile
time into IP addresses.

targets LOG and ULOG are converted to the "logging" option in fwbuilder
rules with action "Continue". For example, Windows can convert more
limited set of service names compared to Linux or BSD. The tab widget
used to show policy, nat, routing and policy branch rulesets does not
switch to a "folded" mode on Mac OS X when it needs to show more tabs
that fit in the window.

Rules that had chain INPUT in the imported script will have firewall
object in "destination" in the corresponding fwbuilder rules.
PREROUTING chain in mangle table is executed before PREROUTING chain in
the nat table, so placing tagging rules in the PREROUTING chain would
make them fire before DNAT. Note the bug triggered only on Mac OS X. Two
data files can not be merged, or one imported into another, if they
contain such objects. This utility will be incorporated into policy
installer in the future to make policy updates simpler and faster,
especially when small changes are made to the large set of access lists
and nat rules. Improvements in "Find" function: administrator can now
drag an object into a well in the find dialog panel to make it search
for this particular object.

DNSName:  This object resolves a host name to the IP address using DNS.

This service object is only supported by compilers for iptables and PF.

It is now possible to generate rules to mark packets in the OUTPUT chain
of the mangle table.