emir (0.3.1-1) unstable; urgency=low

  * Fixed forward state_filtering breaking portmapping.

 -- Marc Dequènes (Duck) <Duck@DuckCorp.org>  Wed,  1 Sep 2004 22:21:29 +0200

emir (0.3.0-1) unstable; urgency=low

  * CLient and advanced filtering have now precedence over open access.
  * Added forward state filtering.
  * Corrected small mistakes in DTD and examples.
  * Added bad final target selection (REJECT / DROP, with optionnal
    logging).
  * Improved start/stop/restart error handling (and reapplying old
    config in case of failure).
  * Not started on boot by default (once properly configured, the
    sysadmin can modify this in '/etc/default/emir').
  * Fixed deactivating 'access' part that was deactivating 'security'
    part as well.
  * Added partial documentation (Docbook -> XHTML/PDF/PS/TXT).

 -- Marc Dequènes (Duck) <Duck@DuckCorp.org>  Sun,  1 Aug 2004 23:42:59 +0200

emir (0.2.4-1) unstable; urgency=low

  * Modified DTD to get a more flexible configuration file (unused
    sections can be removed + cleanups).
  * Added example configuration in documentation directory.
  * Fixed state filtering for local services (allow NEW).
  * Added basic IP stack settings to improve security.
  * Fixed a mistake in 'services_restrictions' section of the example
    configuration.
  * Rearranged dtd and example files in directories.
  * Improved removal of GNU Arch files in pkg.
  * Added a simple configuration example and made it the default.
  * Each external command PATH can now be configured (btw,  shell used
    in scripts can now be chosen) (path_list section and each PATH now
    optionals) (fallback to debian defaults).

 -- Marc Dequènes (Duck) <Duck@DuckCorp.org>  Wed, 14 Jul 2004 14:50:36 +0200

emir (0.2.3-1) unstable; urgency=low

  * Now is a non-native debian pkg, as it should be.
  * Cleaning IPv6 rules only if IPv6 is enabled.
  * Fixed enabling/disabling security features.
  * Fixed bad connexion state filtering.
  * Added new parameter 'allow_related' for local services filtering,
    used to allow access on non-service ports if a related connexion
    exists.
  * No start/stop/restart action on install/upgrade/removal by now, as
    it could lead to nasty netfilter configuration (the administrator
    should take care of it when necessary).
  * Improved and cleaned init script (now using '/etc/default/emir' to
    set if start at boot is wanted or not).
  * Switched to CDBS.

 -- Marc Dequènes (Duck) <Duck@DuckCorp.org>  Tue, 13 Jul 2004 02:25:56 +0200

emir (0.2.2) unstable; urgency=low

  * Another (last) missing dependency (php4-domxml).

 -- Marc Dequènes (Duck) <Duck@DuckCorp.org>  Mon, 21 Jun 2004 16:31:31 +0200

emir (0.2.1) unstable; urgency=high

  * Security fix (bad SYN test).
  * Added missing dependency on 'dftk'.

 -- Marc Dequènes (Duck) <Duck@DuckCorp.org>  Mon, 21 Jun 2004 10:22:59 +0200

emir (0.2.0) unstable; urgency=low

  * Added services access filtering.
  * Added clients filtering.
  * Added custom forward filtering.
  * Added basic IPv6 support (host & user members).

 -- Marc Dequènes (Duck) <Duck@DuckCorp.org>  Wed, 24 Mar 2004 23:40:18 +0100

emir (0.1.0) unstable; urgency=low

  * Initial Release.

 -- Marc Dequènes (Duck) <Duck@DuckCorp.org>  Tue, 24 Feb 2004 16:05:42 +0100

