| Line 1... |
Line 1... |
| 1 |
# $Id: CHANGELOG 790 2012-01-12 23:23:59Z richard $
|
1 |
# $Id: CHANGELOG 791 2012-01-13 21:31:36Z richard $
|
| 2 |
|
2 |
|
| 3 |
************ CHANGELOG ***********
|
3 |
************ CHANGELOG ***********
|
| 4 |
---- svn ----
|
4 |
---- svn ----
|
| 5 |
---- 2.5 ----
|
5 |
---------------------- 2.5 --------------------
|
| 6 |
Bug
|
6 |
Bugs
|
| 7 |
- watchdog (and script alcasar-logout.sh) doesn't logout the macallowed addresses
|
7 |
- watchdog (and script alcasar-logout.sh) doesn't logout the macallowed addresses
|
| 8 |
- reading of alcasar.conf file parameters more securely
|
8 |
- reading of alcasar.conf file parameters more securely
|
| 9 |
- don't download RPMs twice
|
9 |
- don't download RPMs twice
|
| 10 |
- allow connexion to an LDAP server on WAN side
|
10 |
- allow connexion to an LDAP server on WAN side
|
| 11 |
- control that watchdog can't execute if already running
|
11 |
- control that watchdog can't execute if already running
|
| Line 15... |
Line 15... |
| 15 |
- update phpsysinfo page ("Internet access flag" nom show the right status)
|
15 |
- update phpsysinfo page ("Internet access flag" nom show the right status)
|
| 16 |
- Authenticate user on Mysql when LDAP server is down
|
16 |
- Authenticate user on Mysql when LDAP server is down
|
| 17 |
- import users via text file with or without password
|
17 |
- import users via text file with or without password
|
| 18 |
Improve security
|
18 |
Improve security
|
| 19 |
- The 8080 (TCP) and 53 (UDP) ports are now hidden on Lan side
|
19 |
- The 8080 (TCP) and 53 (UDP) ports are now hidden on Lan side
|
| 20 |
- ANSSI code review (sql escape string)
|
20 |
- ANSSI code review (sql escape string in PHP)
|
| 21 |
- remove the apache unused modules
|
21 |
- remove the apache unused modules
|
| - |
|
22 |
- the blacklist is no more update automaticly
|
| 22 |
Improve installation
|
23 |
Improve installation
|
| 23 |
- control eth0 config on startup (no dhcp)
|
24 |
- control eth0 config on startup (no dhcp)
|
| 24 |
- don't dowload the last BL version
|
25 |
- don't dowload the last BL version
|
| 25 |
- remove unused RPM before update the system
|
26 |
- remove unused RPM before update the system
|
| 26 |
Improve Alcasar Control Center (ACC)
|
- |
|
| 27 |
-
|
27 |
News
|
| 28 |
---- 2.4 ----
|
- |
|
| 29 |
- Bug : some minor bugs (log rotate, intercept page, squid, ...)
|
- |
|
| 30 |
- Bug : ACC - correction of the Internet connectivity test flag
|
- |
|
| 31 |
- Bug : ACC - correction of the network filtering flag
|
- |
|
| 32 |
- Bug : core : ip filtering exception changes doesn't active protocols exception filter
|
28 |
- allow/deny access to the LAN located between ALCASAR and the Internet gateway (box)
|
| 33 |
- Bug : core : remove dual log archive
|
- |
|
| 34 |
- Bug : correction of "bypass" mode
|
- |
|
| 35 |
- Bug : correction of squid cache
|
- |
|
| 36 |
- Core : The blacklist is automaticly updated once a month
|
- |
|
| 37 |
- Core : The distribution is automaticly updated every day
|
- |
|
| 38 |
|
29 |
|
| 39 |
---- 2.3 ----
|
30 |
---------------------- 2.4 --------------------
|
| - |
|
31 |
Bugs
|
| - |
|
32 |
- some minor bugs (log rotate, intercept page, squid, ...)
|
| 40 |
- Bug : group properties are now written on the voucher
|
33 |
- ACC : correction of the Internet connectivity test flag
|
| 41 |
- Bug : hold the state of network filter when update
|
34 |
- correction of the network filtering flag
|
| - |
|
35 |
- ip filtering exception changes doesn't active protocols exception filter
|
| 42 |
- ACC : group member is added in user list
|
36 |
- remove dual log archive
|
| 43 |
- Core : simplify official certificate import process
|
37 |
- correction in "bypass" mode
|
| 44 |
- Core : update with the last version of Coova (1.2.8)
|
38 |
- correction with squid cache
|
| 45 |
- Core : End of implementation of ANSSI rules for netfilter
|
39 |
- The blacklist is automaticly updated once a month
|
| 46 |
- Core : allow exception of IP addresses (or network addresses) in the authentication process
|
40 |
- The distribution is automaticly updated every day
|
| 47 |
|
41 |
|
| - |
|
42 |
---------------------- 2.3 --------------------
|
| - |
|
43 |
Bugs
|
| - |
|
44 |
- group properties are now written on the voucher
|
| - |
|
45 |
- hold the state of network filter when update
|
| 48 |
---- 2.2 ----
|
46 |
Improve core
|
| 49 |
- blacklist category "ip" is added for url that contains only an ip address (no FQDN)
|
47 |
- simplify official certificate import process
|
| 50 |
- IP parameters can be change in central conf file. Apply with the script "alcasar-conf.sh -apply"
|
48 |
- update with the last version of Coova (1.2.8)
|
| - |
|
49 |
Improve security
|
| 51 |
- 'alcasar-nf.sh' and 'alcasar-bl.sh' scripts now use the global parameters file (alcasar.conf)
|
50 |
- end of implementation of ANSSI rules for netfilter
|
| - |
|
51 |
News
|
| 52 |
- allow LDAP/AD connections both on WAN and LAN servers
|
52 |
- allow exception of IP addresses (or network addresses) in the authentication process
|
| 53 |
- Add a LDAP connectivity test
|
53 |
- ACC : group member is added in user list
|
| - |
|
54 |
|
| 54 |
- possibility to redirect users on a specific URL after login process
|
55 |
---------------------- 2.2 --------------------
|
| - |
|
56 |
Bugs
|
| 55 |
- A bug with "sudo" is bypassed
|
57 |
- A bug with "sudo" is bypassed
|
| 56 |
- close all accounting session when the system goes down or up
|
58 |
- improve the script which display and close users open sessions
|
| 57 |
- if activate, sshd listen both on LAN and on WAN
|
59 |
- some minor bugs
|
| - |
|
60 |
Improve core
|
| 58 |
- add a central conf file (/usr/local/etc/alcasar.conf)
|
61 |
- add a central conf file (/usr/local/etc/alcasar.conf)
|
| 59 |
- add the equipment name in the activity window when MAC authenticate
|
62 |
- IP parameters can be change in central conf file. Apply with the script "alcasar-conf.sh -apply"
|
| - |
|
63 |
- 'alcasar-nf.sh' and 'alcasar-bl.sh' scripts now use the global parameters file (alcasar.conf)
|
| 60 |
- improve the script which display and close users open sessions
|
64 |
- improve the script which managed the trusted sites and urls
|
| - |
|
65 |
Improve security
|
| - |
|
66 |
- close all accounting session when the system goes down or up
|
| - |
|
67 |
Improve install process
|
| 61 |
- allow change of alcasar IP private address during install stage
|
68 |
- allow change of alcasar IP private address during install stage
|
| 62 |
- improve the script which managed the trusted sites and urls
|
- |
|
| 63 |
- no more question, when upgrating
|
69 |
- no more question, when upgrating
|
| - |
|
70 |
News
|
| - |
|
71 |
- blacklist category "ip" is added for url that contains only an ip address (no FQDN)
|
| - |
|
72 |
- allow LDAP/AD connections both on WAN and LAN
|
| 64 |
- some minor bugs
|
73 |
- Add a LDAP connectivity test
|
| - |
|
74 |
- possibility to redirect users on a specific URL after login process
|
| - |
|
75 |
- if activate, sshd listen both on LAN and on WAN
|
| - |
|
76 |
- ACC : add the equipment name in the activity window when MAC authenticate
|
| 65 |
|
77 |
|
| 66 |
---- 2.1 ----
|
78 |
---------------------- 2.2 --------------------
|
| 67 |
- mise en conformité du parefeu avec les préco ANSSI (politiques à DROP + sysctrl)
|
79 |
- mise en conformité du parefeu avec les préco ANSSI (politiques à DROP + sysctrl)
|
| 68 |
- amélioration de la fonction bastion en limitant la charge sur l'interface externe (thanks to CPN)
|
80 |
- amélioration de la fonction bastion en limitant la charge sur l'interface externe (thanks to CPN)
|
| 69 |
- amélioration de la gestion des RPM 'wget' au lieu de 'curl' et changement de repository en 'live'
|
81 |
- amélioration de la gestion des RPM 'wget' au lieu de 'curl' et changement de repository en 'live'
|
| 70 |
- exception au filtrage réseau et DNS (double instance de dnsmasq)
|
82 |
- exception au filtrage réseau et DNS (double instance de dnsmasq)
|
| 71 |
- ajout d'un commentaire pour les exceptions à l'authentification
|
83 |
- ajout d'un commentaire pour les exceptions à l'authentification
|