------------------------------------------------------------------------
r308 | mbr | 2007-02-17 09:18:05 -0500 (Sat, 17 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/branches/fwsnort-0.8.2/ChangeLog

added 0.8.2 changes
------------------------------------------------------------------------
r307 | mbr | 2007-02-17 09:17:44 -0500 (Sat, 17 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/branches/fwsnort-0.8.2/packaging/fwsnort.spec

fixed release date
------------------------------------------------------------------------
r306 | mbr | 2007-02-17 09:16:49 -0500 (Sat, 17 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/branches/fwsnort-0.8.2/fwsnort

added Revision tag expansion
------------------------------------------------------------------------
r305 | mbr | 2007-02-17 09:01:46 -0500 (Sat, 17 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/branches/fwsnort-0.8.2/packaging/fwsnort.spec

fixed to work on 64-bit systems
------------------------------------------------------------------------
r304 | mbr | 2007-02-16 23:09:25 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/branches/fwsnort-0.8.2/packaging/fwsnort.spec

bugfix for current working directory and Net::IPv4Addr compilation
------------------------------------------------------------------------
r303 | mbr | 2007-02-16 18:47:10 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   A /fwsnort/branches/fwsnort-0.8.2 (from /fwsnort/trunk:302)

created 0.8.2 branch
------------------------------------------------------------------------
r302 | mbr | 2007-02-16 03:06:02 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/ChangeLog

0.8.2 release date
------------------------------------------------------------------------
r301 | mbr | 2007-02-16 03:05:36 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/packaging/fwsnort.spec

0.8.2 release
------------------------------------------------------------------------
r300 | mbr | 2007-02-16 03:02:53 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/ChangeLog

more 0.8.2 stuff
------------------------------------------------------------------------
r299 | mbr | 2007-02-16 03:00:53 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/ChangeLog
   A /fwsnort/trunk/Net-IPv4Addr/VERSION

more 0.8.2 stuff
------------------------------------------------------------------------
r298 | mbr | 2007-02-16 02:58:36 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   A /fwsnort/trunk/snort_rules/bleeding-all.rules

added bleeding-all.rules
------------------------------------------------------------------------
r297 | mbr | 2007-02-16 02:58:03 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/ChangeLog
   M /fwsnort/trunk/fwsnort

bugfix to not print duplicate rules in --Dump-ipt and --Dump-snort modes
------------------------------------------------------------------------
r296 | mbr | 2007-02-16 02:49:26 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/ChangeLog
   M /fwsnort/trunk/fwsnort.8

minor doc updates
------------------------------------------------------------------------
r295 | mbr | 2007-02-16 02:48:40 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/IPTables-Parse/lib/IPTables/Parse.pm

updated to latest version from psad project
------------------------------------------------------------------------
r294 | mbr | 2007-02-16 02:48:09 -0500 (Fri, 16 Feb 2007) | 6 lines
Changed paths:
   M /fwsnort/trunk/fwsnort

- Added ipt-file argument to allow an iptables policy to be read from a file.
- Added --Dump-ipt and --Dump-snort to allow iptables and snort rules to be
  dumped to STDOUT.
- Additional code cleanups to better handle chain names.
- Added file revision

------------------------------------------------------------------------
r293 | mbr | 2007-02-16 02:41:44 -0500 (Fri, 16 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/fwsnort.conf

updated TCP header length
------------------------------------------------------------------------
r292 | mbr | 2007-02-15 22:25:26 -0500 (Thu, 15 Feb 2007) | 1 line
Changed paths:
   A /fwsnort/trunk/README.RPM

Added README.RPM file for automated cd_rpmbuilder
------------------------------------------------------------------------
r291 | mbr | 2007-02-14 23:30:48 -0500 (Wed, 14 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/INSTALL

linux-2.6 and string matching note
------------------------------------------------------------------------
r290 | mbr | 2007-02-14 23:18:19 -0500 (Wed, 14 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/snort_opts.pl

minor opendir shift fix
------------------------------------------------------------------------
r289 | mbr | 2007-02-14 23:17:50 -0500 (Wed, 14 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/snort_rules/backdoor.rules

backdoor update for Matrix 2.0 sig
------------------------------------------------------------------------
r288 | mbr | 2007-02-14 23:17:02 -0500 (Wed, 14 Feb 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/install.pl

minor opendir shift fix
------------------------------------------------------------------------
r287 | mbr | 2007-02-14 23:15:54 -0500 (Wed, 14 Feb 2007) | 1 line
Changed paths:
   A /fwsnort/trunk/cd_rpmbuilder

Added cd_rpmbuilder script to make it easy to automatically build fwsnort RPM files
------------------------------------------------------------------------
r286 | mbr | 2007-01-19 21:36:51 -0500 (Fri, 19 Jan 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/snortspoof.pl

added Id tag expansion
------------------------------------------------------------------------
r285 | mbr | 2007-01-19 21:34:12 -0500 (Fri, 19 Jan 2007) | 1 line
Changed paths:
   M /fwsnort/trunk/snortspoof.pl

added GPL and standard header text
------------------------------------------------------------------------
r284 | mbr | 2006-12-15 22:23:14 -0500 (Fri, 15 Dec 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/snortspoof.pl

updated snort sig comment
------------------------------------------------------------------------
r283 | mbr | 2006-12-15 22:06:25 -0500 (Fri, 15 Dec 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/snortspoof.pl

switched to require Net::RawIP so a normal user can check proper compilation, removed unnecessary msg var
------------------------------------------------------------------------
r282 | mbr | 2006-12-14 21:33:56 -0500 (Thu, 14 Dec 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/snortspoof.pl

updated to use Net::RawIP
------------------------------------------------------------------------
r281 | mbr | 2006-09-09 20:00:46 -0400 (Sat, 09 Sep 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/CREDITS

updated to same format as the psad CREDITS file
------------------------------------------------------------------------
r280 | mbr | 2006-09-05 20:55:10 -0400 (Tue, 05 Sep 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/fwsnort

minor bugfix for Dumper() function call in print() statement
------------------------------------------------------------------------
r279 | mbr | 2006-09-05 19:36:25 -0400 (Tue, 05 Sep 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/VERSION
   M /fwsnort/trunk/fwsnort

bumped version to 0.8.2
------------------------------------------------------------------------
r278 | mbr | 2006-09-05 17:58:48 -0400 (Tue, 05 Sep 2006) | 13 lines
Changed paths:
   M /fwsnort/trunk/fwsnort

-Added --dumper mode to use Data::Dumper to print Snort rule hashes and
corresponding matching Netfilter rules.  This is useful to help diagnose
IPTables::Parse to see how fwsnort is doing w.r.t. matching Snort rules
to Netfilter rules.
-Added 'ack' Snort rule option to the unsupported options in fwsnort.  The
--log-tcp-sequence iptables argument does log acknowledgment numbers
however (psad can make use of them).
-Re-worked how fwsnort parses Netfilter policies to use the new
IPTables::Parse module (which returns an array of hash refs for each set
of rules in a Netfilter chain).
-Added code see if state rules apply to current Netfilter rule.
-Added support for OUTPUT chain.

------------------------------------------------------------------------
r277 | mbr | 2006-09-05 17:50:50 -0400 (Tue, 05 Sep 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/IPTables-Parse/lib/IPTables/Parse.pm

added code to detect whether a previously seen state rule applies to the current rule in the policy
------------------------------------------------------------------------
r276 | mbr | 2006-09-04 18:04:27 -0400 (Mon, 04 Sep 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/ChangeLog

started on 0.8.2 stuff
------------------------------------------------------------------------
r275 | mbr | 2006-09-04 18:00:38 -0400 (Mon, 04 Sep 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/packaging/fwsnort.spec

updates for 0.8.2 release
------------------------------------------------------------------------
r274 | mbr | 2006-09-04 00:57:48 -0400 (Mon, 04 Sep 2006) | 1 line
Changed paths:
   A /fwsnort/trunk/patches/bm_goodshift_fix.patch

added patch to fix a bug where repetitive strings could not be matched within payload data except at specific offests
------------------------------------------------------------------------
r273 | mbr | 2006-09-03 22:19:23 -0400 (Sun, 03 Sep 2006) | 4 lines
Changed paths:
   M /fwsnort/trunk/install.pl

-Updated to use perl module installation strategy from fwknop to only install
modules that don't already exist within the system perl module tree.
-Added --Force-mod-regex and --force-mod-install command line arguments.

------------------------------------------------------------------------
r272 | mbr | 2006-09-03 18:28:49 -0400 (Sun, 03 Sep 2006) | 1 line
Changed paths:
   D /fwsnort/trunk/IPTables

deprecated old IPTables module for IPTables::Parse module
------------------------------------------------------------------------
r271 | mbr | 2006-09-03 18:26:48 -0400 (Sun, 03 Sep 2006) | 1 line
Changed paths:
   A /fwsnort/trunk/IPTables-Parse
   A /fwsnort/trunk/IPTables-Parse/Changes
   A /fwsnort/trunk/IPTables-Parse/MANIFEST
   A /fwsnort/trunk/IPTables-Parse/Makefile.PL
   A /fwsnort/trunk/IPTables-Parse/README
   A /fwsnort/trunk/IPTables-Parse/VERSION
   A /fwsnort/trunk/IPTables-Parse/lib
   A /fwsnort/trunk/IPTables-Parse/lib/IPTables
   A /fwsnort/trunk/IPTables-Parse/lib/IPTables/Parse.pm
   A /fwsnort/trunk/IPTables-Parse/t
   A /fwsnort/trunk/IPTables-Parse/t/IPTables-Parse.t

added IPTables::Parse module
------------------------------------------------------------------------
r270 | mbr | 2006-06-26 23:05:09 -0400 (Mon, 26 Jun 2006) | 1 line
Changed paths:
   M /fwsnort/trunk/snort_rules/VERSION
   M /fwsnort/trunk/snort_rules/attack-responses.rules
   M /fwsnort/trunk/snort_rules/backdoor.rules
   M /fwsnort/trunk/snort_rules/bad-traffic.rules
   M /fwsnort/trunk/snort_rules/chat.rules
   M /fwsnort/trunk/snort_rules/ddos.rules
   M /fwsnort/trunk/snort_rules/dns.rules
   M /fwsnort/trunk/snort_rules/dos.rules
   M /fwsnort/trunk/snort_rules/exploit.rules
   M /fwsnort/trunk/snort_rules/finger.rules
   M /fwsnort/trunk/snort_rules/ftp.rules
   M /fwsnort/trunk/snort_rules/imap.rules
   M /fwsnort/trunk/snort_rules/misc.rules
   M /fwsnort/trunk/snort_rules/mysql.rules
   M /fwsnort/trunk/snort_rules/netbios.rules
   M /fwsnort/trunk/snort_rules/nntp.rules
   M /fwsnort/trunk/snort_rules/scan.rules
   M /fwsnort/trunk/snort_rules/smtp.rules
   M /fwsnort/trunk/snort_rules/sql.rules
   M /fwsnort/trunk/snort_rules/telnet.rules
   M /fwsnort/trunk/snort_rules/web-cgi.rules
   M /fwsnort/trunk/snort_rules/web-client.rules
   M /fwsnort/trunk/snort_rules/web-iis.rules
   M /fwsnort/trunk/snort_rules/web-misc.rules

updated to Snort-2.3.3 rules
------------------------------------------------------------------------
r269 | mbr | 2006-05-02 23:31:46 -0400 (Tue, 02 May 2006) | 2 lines
Changed paths:
   M /fwsnort/trunk/TODO

.

------------------------------------------------------------------------
r268 | mbr | 2006-01-15 23:42:17 -0500 (Sun, 15 Jan 2006) | 2 lines
Changed paths:
   M /fwsnort/trunk/TODO
   M /fwsnort/trunk/fwsnort
   M /fwsnort/trunk/fwsnort.8

format fixes

------------------------------------------------------------------------
r267 | mbr | 2006-01-06 21:54:40 -0500 (Fri, 06 Jan 2006) | 2 lines
Changed paths:
   M /fwsnort/trunk/ChangeLog

.

------------------------------------------------------------------------
