firehol (2.0.0-rc.1) unstable; urgency=low

  * FireHOL fixes/enhancements
    - #15 Do not fix source ports for DHCPv6 (not required by RFC)

  * FireQOS fixes/enhancements
    - fixed mixed ipv4 and ipv6 matches that were generating match
      priorities above 0xffff
    - #29 added warning when rate is lower than minrate

  * Documentation
    - split manual in two
    - explain that ICMPv6 ND/RD packets are untracked by default, so not in all
    - #31 fixed magic line of services definition

 -- Phil Whineray <phil@sanewall.org>  Sat,  2 Aug 2014 08:16:00 +0100

firehol (2.0.0-pre9) unstable; urgency=low

  * FireHOL fixes/enhancements
    - recognise dst4/dst6 on interface/router as well as src4/src6

 -- Phil Whineray <phil@sanewall.org>  Sat,  8 Jun 2014 16:14:00 +0100

firehol (2.0.0-pre8) unstable; urgency=low

  * FireQOS fixes/enhancements
    - resolved an issue with pppd ip-up scripts
    - automatic numbering continues giving class priorities after
      a manual priority is given

  * Documentation
    - replaced docbook with pandoc (issue #24)

 -- Phil Whineray <phil@sanewall.org>  Sat, 10 May 2014 08:25:00 +0100

firehol (2.0.0-pre7) unstable; urgency=low

  * FireQOS fixes/enhancements
    - full bidirectional interface support, including firehol like services
    - running on OpenWRT (insmod instead of modprobe, low-res timers)
    - option to limit each match to a specific rate

  * FireHOL fixes/enhancements
    - firehol save now writes to the specified files again
    - firehol save, restore and fastactivation now work IPv4-only mode
    - improved fast activation error handling (issue #22)
    - improved mark/connmark handling (issue #23)
    - tproxy support added

  * Documentation
    - Link and spelling fixes
    - new config examples

 -- Phil Whineray <phil@sanewall.org>  Sun, 13 Apr 2014 17:04:00 +0100

firehol (2.0.0-pre6) unstable; urgency=low

  * Implement dual IPv4/IPv6 as standard
    - Update your config from version 5 to 6 to enable
    - See http://firehol.org/upgrade/#config-version-6

  * Include FireQOS manual pages

 -- Phil Whineray <phil@sanewall.org>  Sat, 15 Feb 2014 11:05:00 +0000

firehol (2.0.0-pre5) unstable; urgency=low

  * Fix error in new FIREHOL_DEBUGGING code which prevented errors
    reported by iptables from being detected.

 -- Phil Whineray <phil@sanewall.org>  Tue, 29 Oct 2013 21:29:00 +0000

firehol (2.0.0-pre4) unstable; urgency=low

  * Cleanups and minor improvements
    - Remove the blank line from wizard/helpme output
    - Remove the #! from wizard output - it cannot be executed directly
    - Cleaned up boilerplace information in script
    - "firehol condrestart" now follows official conventions by restarting
       only if already running

  * Fix kernel version detection so that it is more flexible and
    less error prone.

  * Allow switching on of debug output by setting environment variable
    FIREHOL_DEBUGGING to a non-empty value.

  * Fix "mac" helper command so that it works with iptables 1.4.12+
    - Previous behaviour was deprecated in 1.4.3 (Jul 2009)
    - Also prevent mac addresses being seen as IPv6 addresses

  * Allow some config variables to be set as environment variables
    - FIREHOL_ESTABLISHED_ACTIVATION_ACCEPT,
      FIREHOL_INPUT_ACTIVATION_POLICY, FIREHOL_FORWARD_ACTIVATION_POLICY,
      FIREHOL_OUTPUT_ACTIVATION_POLICY, FIREHOL_LOAD_KERNEL_MODULES,
      FIREHOL_NAT, FIREHOL_ROUTING, FIREHOL_AUTOSAVE

  * Do not try to add DROP rules to NAT chains
    - See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=536675

  * Use "ss" in place of "netstat"
    - As suggested here https://bugzilla.redhat.com/show_bug.cgi?id=784520

 -- Phil Whineray <phil@sanewall.org>  Tue, 29 Oct 2013 19:07:00 +0000

firehol (2.0.0-pre3) unstable; urgency=low

  * FireQOS updates
    - Fix for issue https://github.com/ktsaou/firehol/issues/6
    - Fix for issue https://github.com/ktsaou/firehol/issues/9

 -- Phil Whineray <phil@sanewall.org>  Mon, 28 Oct 2013 22:20:00 +0000

firehol (2.0.0-pre2) unstable; urgency=low

  * Inclusion of FireQOS
  * Standardisation of version information suitable for Git
  * Allow tcpmss usage in interfaces

 -- Phil Whineray <phil@sanewall.org>  Mon, 27 Oct 2013 18:00:00 +0000

firehol (2.0.0-pre1) unstable; urgency=low

  * Move to autotools
    - Can still be installed just by copying firehol/firehol.in
    - CVS versions will not work any longer, so now following
      http://semver.org/
    - Git commit hooks included to enforce version numbering
      across the various files, NEWS, ChangeLog, configure.ac and 
      sbin/firehol.in
    - Replace HTML website copy with DocBook manual

 -- Phil Whineray <phil@sanewall.org>  Mon, 19 Aug 2013 20:10:00 +0100
