Download NuFW 2.2.9

The NuFW program is an extensive firewall that can filter every connection based on the user’s rights and the operating system used. It uses an ldap server to check permissions and Netfilter to apply the set filtering technique. For more information about NuFW, please refer to this page. The developers have released version 2.2.9 with the following announcement:

Version 2.2.9:

This new release is a maintenance release which contains some bug fixes and some slight improvements. The full changelog is as follows:

• nuauth: leave when a module fails to load
• nuauth: correctly fills headers of messages to nufw
• plaintext module: parse needed files at start
• nufw: ignore return or nfq_unbind_pf() due to change in linux 2.6.23.
• nuauth: introduce nuauth_proto_wait_delay to get around a nasty connection problem on laggy network.

Version 2.2.8:

This new release fixes a bug in protocol 2.2 on big endian machine. The full changelog is as follows:

• libnuclient, nuauth: fix protocol 2.2 on big endian.
• log_mysql: add documentation file and add a IPv4 and an IPv6 dump
• build system: improve autoconf compliance
• nufw: fix infinite loop when nufw has no support for conntrack but when nuauth try to kill connection

Version 2.2.7:

NuFW 2.2.7 fixes a potential Denial Of Service against NuFW due to a buffer overflow. A buffer used in the samp_send function was 3 bytes too small. The full changelog is as follows:

• nuaclgen: add support for userid based ACLs.
• nuauth: fix SASL rare crash on client authentication failure (sasl_dispose)
• nuauth: fix command line parser: -p and -l were limited to 3 characters
• nuauth: fix a buffer overflow (3 bytes) in base64 encoding function
• nuauth: improve certificate file error handling
• nuauth: leave if socket command file is unavailable
• pam_nufw: fix memset usage