------------------------------------------------------------------------
r981 | mbr | 2008-01-26 14:46:30 -0500 (Sat, 26 Jan 2008) | 1 line
Changed paths:
   M /fwknop/branches/fwknop-1.9.1/packaging/fwknop.spec

minor date change
------------------------------------------------------------------------
r980 | mbr | 2008-01-26 14:45:11 -0500 (Sat, 26 Jan 2008) | 1 line
Changed paths:
   A /fwknop/branches/fwknop-1.9.1 (from /fwknop/trunk:979)

created fwknop-1.9.1 branch
------------------------------------------------------------------------
r979 | mbr | 2008-01-26 14:43:56 -0500 (Sat, 26 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

version 1.9.1
------------------------------------------------------------------------
r978 | mbr | 2008-01-26 14:43:48 -0500 (Sat, 26 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/packaging/fwknop.spec

updated fwknop.spec to simplify install calls since this seems to make things work on Ubuntu x86_64 (to build the RPM anyway)
------------------------------------------------------------------------
r977 | mbr | 2008-01-26 14:31:13 -0500 (Sat, 26 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

minor update for reopen counter threshold condition for filesystem capture file
------------------------------------------------------------------------
r976 | mbr | 2008-01-24 19:21:59 -0500 (Thu, 24 Jan 2008) | 3 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/install.pl

- Updated install.pl to be more strict in stopping any running fwknopd
processes.

------------------------------------------------------------------------
r975 | mbr | 2008-01-24 19:14:37 -0500 (Thu, 24 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop

minor update to minimize md5_base64() calls in one function
------------------------------------------------------------------------
r974 | mbr | 2008-01-21 22:27:53 -0500 (Mon, 21 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

Added localtime() calls for --debug output
------------------------------------------------------------------------
r973 | mbr | 2008-01-21 22:21:36 -0500 (Mon, 21 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

minor update to be sure to remove all 62201 iptables ACCEPT rules even if a previous test suite instance was killed
------------------------------------------------------------------------
r972 | mbr | 2008-01-21 22:19:02 -0500 (Mon, 21 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/IPTables-ChainMgr/lib/IPTables/ChainMgr.pm

Added localtime() calls in debug mode
------------------------------------------------------------------------
r970 | mbr | 2008-01-19 21:03:23 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

version 1.9.1-pre8
------------------------------------------------------------------------
r969 | mbr | 2008-01-19 21:02:15 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

implemented --fw-del-ip code for iptables firewalls
------------------------------------------------------------------------
r968 | mbr | 2008-01-19 21:01:49 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm

minor update to account for two args returned by find_ip_rule()
------------------------------------------------------------------------
r967 | mbr | 2008-01-19 18:09:22 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

bugfix for ipfw firewalls running in --fw-del-ip mode
------------------------------------------------------------------------
r965 | mbr | 2008-01-19 17:52:02 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped vesion to 1.9.1-pre7
------------------------------------------------------------------------
r964 | mbr | 2008-01-19 17:51:23 -0500 (Sat, 19 Jan 2008) | 9 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/fwknop_test.pl

- Added --fw-del-ip <IP> argument to fwknopd so that a specific IP address
can be removed from the local firewall policy (this is used by the test
suite to ensure that if a test for removed firewall rules fails then
subsequent tests will not also fail because they are no longer tracked
by a running knoptm instance).
- Added a test to the test suite to collect fwknopd syslog output.  This
is useful to see if a mechanism such as SELinux is deployed in a manner
that prevents normal fwknop communications.

------------------------------------------------------------------------
r962 | mbr | 2008-01-19 14:46:09 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.1-pre6
------------------------------------------------------------------------
r961 | mbr | 2008-01-19 14:45:26 -0500 (Sat, 19 Jan 2008) | 8 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/install.pl

- Better installation support for various Linux distributions including
Fedora 8 and Ubuntu.  The current runlevel is now acquired via the
"runlevel" command instead of attempting to read /etc/inittab (which
does not even exist on Ubuntu 7.10), and there are new command line
arguments --init-dir, --init-name, and --runlevel to allow the init
directory, init script name, and the runlevel to be manually specified
on the install.pl command line.

------------------------------------------------------------------------
r959 | mbr | 2008-01-19 13:01:33 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.1-pre5
------------------------------------------------------------------------
r958 | mbr | 2008-01-19 13:01:02 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

Added udp/62201 ACCEPT rule over the loopback interface for test suite communications
------------------------------------------------------------------------
r957 | mbr | 2008-01-19 11:46:36 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

Added firewall policy collection to system specs test
------------------------------------------------------------------------
r956 | mbr | 2008-01-19 11:46:24 -0500 (Sat, 19 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

state tracking blurb addition
------------------------------------------------------------------------
r955 | mbr | 2008-01-18 20:38:17 -0500 (Fri, 18 Jan 2008) | 3 lines
Changed paths:
   M /fwknop/trunk/fwknopd

Updated to search state tracking rule in any iptables chain (many iptables
policies have user-defined chains that can be a bit complicated to parse).

------------------------------------------------------------------------
r954 | mbr | 2008-01-18 20:21:02 -0500 (Fri, 18 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

added better key validation tests, added better test text descriptions
------------------------------------------------------------------------
r953 | mbr | 2008-01-17 22:20:45 -0500 (Thu, 17 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/IPTables-Parse/lib/IPTables/Parse.pm

(Grant) updated to set sport and dport to 0:0 if protocol == all
------------------------------------------------------------------------
r952 | mbr | 2008-01-16 01:06:58 -0500 (Wed, 16 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/test/fwknop_test.pl

added MD5 digest tracking file format check to the test suite
------------------------------------------------------------------------
r951 | mbr | 2008-01-16 01:06:07 -0500 (Wed, 16 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

bugfix to properly track SPA MD5 digests for command-mode SPA packets
------------------------------------------------------------------------
r950 | mbr | 2008-01-12 17:21:51 -0500 (Sat, 12 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/conf/no_promisc_fwknop.conf

updated fwknop directory
------------------------------------------------------------------------
r949 | mbr | 2008-01-12 17:21:23 -0500 (Sat, 12 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/conf/default_fwknop.conf
   M /fwknop/trunk/test/conf/forward_chain_fwknop.conf
   A /fwknop/trunk/test/conf/no_promisc_fwknop.conf
   M /fwknop/trunk/test/conf/output_chain_fwknop.conf
   M /fwknop/trunk/test/conf/pcap_file_fwknop.conf
   M /fwknop/trunk/test/conf/spa_aging_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

added non-promisc test to test suite, and updated to collect warn and die messages in test/output/ directory
------------------------------------------------------------------------
r948 | mbr | 2008-01-10 22:34:10 -0500 (Thu, 10 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

added 'cat /proc/cpuinfo'
------------------------------------------------------------------------
r946 | mbr | 2008-01-10 22:11:04 -0500 (Thu, 10 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

1.9.1-pre4
------------------------------------------------------------------------
r945 | mbr | 2008-01-10 22:10:45 -0500 (Thu, 10 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

minor IP regex update to include preceeding \b
------------------------------------------------------------------------
r944 | mbr | 2008-01-10 21:56:56 -0500 (Thu, 10 Jan 2008) | 1 line
Changed paths:
   D /fwknop/trunk/test/conf/client-gpg/random_seed

removed random_seed file
------------------------------------------------------------------------
r943 | mbr | 2008-01-10 20:32:14 -0500 (Thu, 10 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/fwknop_test.pl

updated to not anonymize loopback addresses, added --verbose flag to fwknopd test suite usage
------------------------------------------------------------------------
r941 | mbr | 2008-01-08 00:20:57 -0500 (Tue, 08 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

1.9.1-pre3
------------------------------------------------------------------------
r940 | mbr | 2008-01-08 00:01:08 -0500 (Tue, 08 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/install.pl

added existance check for --Home-dir
------------------------------------------------------------------------
r938 | mbr | 2008-01-07 23:45:42 -0500 (Mon, 07 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/install.pl

added --Home-dir to specify the home directory for client mode installs
------------------------------------------------------------------------
r937 | mbr | 2008-01-07 23:37:16 -0500 (Mon, 07 Jan 2008) | 5 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/test/conf/client-gpg/random_seed
   A /fwknop/trunk/test/conf/spa_aging_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

- Added SPA packet aging test to the test suite to ensure that packet
expirations work properly (this feature protects against MITM attacks
where a valid SPA packet is stopped by an inline attacker and
retransmitted at a later time to acquire access).

------------------------------------------------------------------------
r936 | mbr | 2008-01-05 10:02:27 -0500 (Sat, 05 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.1-pre2
------------------------------------------------------------------------
r935 | mbr | 2008-01-05 09:48:48 -0500 (Sat, 05 Jan 2008) | 4 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/test/conf/README
   A /fwknop/trunk/test/conf/client-gpg
   A /fwknop/trunk/test/conf/client-gpg/pubring.gpg
   A /fwknop/trunk/test/conf/client-gpg/random_seed
   A /fwknop/trunk/test/conf/client-gpg/secring.gpg
   A /fwknop/trunk/test/conf/client-gpg/trustdb.gpg
   A /fwknop/trunk/test/conf/gpg_access.conf
   A /fwknop/trunk/test/conf/server-gpg
   A /fwknop/trunk/test/conf/server-gpg/pubring.gpg
   A /fwknop/trunk/test/conf/server-gpg/random_seed
   A /fwknop/trunk/test/conf/server-gpg/secring.gpg
   A /fwknop/trunk/test/conf/server-gpg/trustdb.gpg
   M /fwknop/trunk/test/fwknop_test.pl
   M /fwknop/trunk/test/output/README

- Added GnuPG tests to the test suite with dedicated keys (for use only
with the test suite) in the test/conf/client-gpg and
test/conf/server-gpg directories.

------------------------------------------------------------------------
r934 | mbr | 2008-01-04 21:27:39 -0500 (Fri, 04 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd
   A /fwknop/trunk/test/conf/multi_source_access.conf
   A /fwknop/trunk/test/conf/no_loopback_ip_match_access.conf
   M /fwknop/trunk/test/fwknop_test.pl

added multi-SOURCE and non-matching SOURCE tests, minor bugfix to generate non-matching SOURCE warning in fwknopd
------------------------------------------------------------------------
r932 | mbr | 2008-01-01 21:32:43 -0500 (Tue, 01 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

reverted tar --exclude statement for cross-platform compatibility in --Prepare-results mode
------------------------------------------------------------------------
r931 | mbr | 2008-01-01 20:42:55 -0500 (Tue, 01 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/README

updated to the latest test suite output format
------------------------------------------------------------------------
r930 | mbr | 2008-01-01 20:32:33 -0500 (Tue, 01 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

--Prepare-results argument addition
------------------------------------------------------------------------
r929 | mbr | 2008-01-01 20:30:20 -0500 (Tue, 01 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

added --exclude for any .svn directory in --Prepare-results mode
------------------------------------------------------------------------
r928 | mbr | 2008-01-01 20:25:02 -0500 (Tue, 01 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

added --Prepare-results argument to anonymize test suite output results
------------------------------------------------------------------------
r927 | mbr | 2008-01-01 17:10:49 -0500 (Tue, 01 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

PERMIT_CLIENT_PORTS bugfix
------------------------------------------------------------------------
r926 | mbr | 2008-01-01 17:09:10 -0500 (Tue, 01 Jan 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/fwknop_test.pl

bugfix for SOURCE stanzas that do not contain PERMIT_CLIENT_PORTS to not create firewall accept rules for ports that are listed in OPEN_PORTS when the SPA request is for a port not listed in OPEN_PORTS
------------------------------------------------------------------------
r925 | mbr | 2007-12-31 18:00:28 -0500 (Mon, 31 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm

added --fw-type <firewall> argument to knoptm (this is mostly useful for the test suite)
------------------------------------------------------------------------
r924 | mbr | 2007-12-31 17:12:15 -0500 (Mon, 31 Dec 2007) | 10 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/test/fwknop_test.pl

- Added a test to the test suite for sniffing packets over the loopback
interface.
- Added a file (test.log) to collect test suite console output.
- Added full firewall policy dumps and the collection of system specifics
to the test suite. This makes it easy to send the output directory and
the test.log file to developers to assist in debugging (no information
is sent anywhere except as part of a manual process of course, and IP
addresses can be anonymized with the perl command mentioned in the
test/output/README file).

------------------------------------------------------------------------
r923 | mbr | 2007-12-31 17:11:39 -0500 (Mon, 31 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

added full policy dumps via --fw-list -v
------------------------------------------------------------------------
r922 | mbr | 2007-12-31 16:03:32 -0500 (Mon, 31 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/test/output/README

updated test suite README to include information about obscuring IP addresses
------------------------------------------------------------------------
r921 | mbr | 2007-12-30 11:19:14 -0500 (Sun, 30 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

1.9.1-pre1
------------------------------------------------------------------------
r920 | mbr | 2007-12-30 11:13:52 -0500 (Sun, 30 Dec 2007) | 4 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop

- Added srand() call to the fwknop client (this is useful for older
versions of perl which do not automatically call srand() at the first
rand() call if srand() was not already called).

------------------------------------------------------------------------
r919 | mbr | 2007-12-30 11:04:01 -0500 (Sun, 30 Dec 2007) | 3 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/test/fwknop_test.pl

Added SIGALRM wrapper to the test suite since some lippcap and system
combinations break the ability of fwknopd to sniff packets.

------------------------------------------------------------------------
r918 | mbr | 2007-12-30 09:34:38 -0500 (Sun, 30 Dec 2007) | 3 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/install.pl

Added --Exclude-mod-regex to install.pl so that the installation of
particular perl modules that match the supplied regex can be skipped.

------------------------------------------------------------------------
r917 | mbr | 2007-12-30 09:31:54 -0500 (Sun, 30 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/IPTables-ChainMgr/lib/IPTables/ChainMgr.pm

added iptables command output to stdout/stderr when running in verbose/debug modes
------------------------------------------------------------------------
r916 | mbr | 2007-12-24 00:18:57 -0500 (Mon, 24 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/TODO

minor wording update
------------------------------------------------------------------------
r915 | mbr | 2007-12-24 00:18:46 -0500 (Mon, 24 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

minor /remainder stats update
------------------------------------------------------------------------
r914 | mbr | 2007-12-19 20:01:51 -0500 (Wed, 19 Dec 2007) | 12 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/fwknop_test.pl

- Added ENABLE_OUTPUT_ACCESS keyword to access.conf file parsing. This
provides a similar configuration gate for the iptables OUTPUT chain to
the ENABLE_FORWARD_ACCESS keyword, and adds the abiliy to control which
access.conf SOURCE blocks interface to the OUTPUT chain.
- Added command line argument display to fwknop client --verbose mode.
- Updated the test suite to include OUTPUT chain tests, reference
access.conf files in the test/conf/ directory, and perform SPA packet
format validation tests by parsing fwknopd output.
- Updated fwknopd to use always use the -c argument on the knoptm command
line (this makes sure that the test suite usage of fwknopd causes knoptm
to reference the correct configuration).

------------------------------------------------------------------------
r913 | mbr | 2007-12-19 19:59:35 -0500 (Wed, 19 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop

added command line args display to --verbose mode
------------------------------------------------------------------------
r912 | mbr | 2007-12-19 19:56:52 -0500 (Wed, 19 Dec 2007) | 1 line
Changed paths:
   A /fwknop/trunk/test/conf/output_access.conf
   A /fwknop/trunk/test/conf/output_chain_fwknop.conf

added output_* files to test iptables OUTPUT chain
------------------------------------------------------------------------
r911 | mbr | 2007-12-19 19:55:05 -0500 (Wed, 19 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/test/conf/default_access.conf
   M /fwknop/trunk/test/conf/forward_access.conf

reduced firewall access timeout to 5 seconds
------------------------------------------------------------------------
r910 | mbr | 2007-12-15 09:40:49 -0500 (Sat, 15 Dec 2007) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop

merged 908:909 file:///home/mbr/svn/fwknop_repos/fwknop/tags/fwknop-1.9.0 to account for the perl.req bug
------------------------------------------------------------------------
