fiaif (1.6.2-2) stable; urgency=high
  * Fixed probem when specifying a single port for protocol tcp or udp.

 -- Anders P. Fugmann <anders@fugmann.name>  Fri, 17 Jan 2003 18:29:34 -0100

fiaif (1.6.1-2) stable; urgency=low
  * Changes to debian package creation.

 -- Anders P. Fugmann <anders@fugmann.name>  Fri, 17 Jan 2003 18:03:57 -0100

fiaif (1.6.1-1) testing; urgency=medium
  * Fix a bug when cleaning up rules.
  * Fix a bug in POST_NAT_CHAIN.
  * Make REDIRECT rules match zones more closely.
  * Make SNAT rules match zones more closly.

 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 15 Jan 2003 11:17:26 -0100

fiaif (1.6.0-2) unstable; urgency=low
  * Update examples in manpages to reflect new syntax.
  * Update the zone.dmz example.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Tue, 14 Jan 2003 01:04:03 -0100

fiaif (1.6.0-1) unstable; urgency=medium
  * Stop processing of rules, if user is not root.
  * Make owner of all state-files root:root
  * Delete temporary file when cleaning up rules
  * Reenable ip solving in fiaif-scan
  * Make traffic shaping work again
  * If protocol is ALL, then accept no port argument in FORWARD, INPUT and
    OUTPUT, MARK and LIMIT rules
  * Cleanup functions
  * Update manpage for zone.conf
  * autoupdate VERSION and fiaif.spec from version contained in
    debian/changelog
	
 -- Anders P. Fugmann <anders@fugmann.name>  Mon, 12 Jan 2003 13:18:22 -0100

fiaif (1.5.2-2) testing; urgency=medium
  * Fix WATCH_IP rules.
  * Fix some debian package problems.
  * Fix rpm errors on RH 8.0
  * Fix install-initd target in tar.gz distribution
  * Build and distribute srpms.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Sat, 4 Jan 2003 21:20:43 -0100

fiaif (1.5.1-3) testing; urgency=medium
  * Fix rpm package.
  * Fix how to declare parameters in read_zone.
  * Do not return status in RETURN from read_zone.
  * Fix tests in read_zone.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Thr, 2 Jan 2003 12:19:15 -0100
	
fiaif (1.5.1-1) testing; urgency=medium
  * Declare variables, if possible.
  * Fix restart, and let force-reload ignore previous state files.
  * Update DHCP.txt to new configuration options.
  * Added upgrade.txt to documentation section.

 -- Anders P. Fugmann <anders@fugmann.name>  Tue, 31 Dec 2002 12:27:50 -0100

fiaif (1.5.0-1) unstable; urgency=high
  * Watch IP's in (PRE|POST)ROUTING mangle chains.
  * Fix IP_DROP to match incomming packets.
  * Allow empty lines and lines starting with \# in 
    private/reserved_networks file
  * Test for only one GLOBAL/DYNAMIC zone per interface	
  * Actually fix proc settings when running FIAIF.
  * Refer to Oskar Andreasson's Ipsysctl tutorial, in case of proc problems.
  * Add prefix to all logged lines
  * Fix MAC_DROP rules
  * Make cleanup chains delete untill nothing more can be deleted.
  * Save previous state of netfilter and /proc, and restore on stop.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Sun, 29 Dec 2002 11:57:41 -0100

fiaif (1.4.5-1) unstable; urgency=high
  * Fix creation of mangle chains for MARK rules.
  * Fix REDIRECT problem.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Fri, 13 Dec 2002 16:56:45 -0100

fiaif (1.4.4-3) unstable; urgency=medium
  * Specify template for mktemp.
  * Add shell option to fiaif-scan
	
 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 11 Dec 2002 23:16:57 -0100

fiaif (1.4.4-1) unstable; urgency=medium
  * Changed proc tests to use integer tests.
  * Added tcp_timeout test. 
  * Added GPL license.
  * Support for mixed port specification in REPLY rules.
  * Added REPLY rule for traceroute for zone.ext.
  * Delete empty chains, by deleting all references.
  * Fix when to call user chains.
  * 'fiaif status' now prints packet counters. 

 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 5 Dec 2002 18:34:21 -0100

fiaif (1.4.3-1) unstable; urgency=medium
  * Fix for MARK rules in dynamic zones.
  * Added chains for user specified rules.
  * Fixed zone manpage.
  * Allow redirect to localhost, by using REDIRECT target.
  * Allow redirect to an ip in the zone itself (only for non-dynamic, non-global zones).
  * Removed some superflorous zone checks.	
  
 -- Anders P. Fugmann <anders@fugmann.name>  Sun, 1 Dec 2002 22:36:14 -0100

fiaif (1.4.2-1) unstable; urgency=medium
  * Allow mixed port specification in INPUT, OUTPUT, FORWARD and MARK rules
  * Allow used IP aliases by using IPSET_XXX.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Thr, 28 Nov 2002 12:55:20 -0100

fiaif (1.4.1-2) unstable; urgency=high
  * Sync private_networks with IANA.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Mon, 25 Nov 2002 16:32:29 -0100

fiaif (1.4.1-1) unstable; urgency=high
  * Fixed problem with DYNAMIC=1 and SNAT rules.
  * Deleted some unused chains.
  * Tighter security for non-dynamic zones.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Sun, 24 Nov 2002 19:25:55 -0000

fiaif (1.4.0-2) unstable; urgency=high
  * Fixed wrong comment in configuration files.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 20 Nov 2002 14:10:46 -0000

fiaif (1.4.0-1) unstable; urgency=high
  * Removed AUTOCONF
  * Changed STATIC to DYNAMIC.
  * Added extra tests for nat and mangle to reduce number of rules.	
	
 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 20 Nov 2002 01:32:09 -0000

fiaif (1.3.2-1) unstable; urgency=low
  * Fix HTB traffic shaper.
  * Fix error when state file is not present.
  * Added DHCP.txt
  * Added reporting_bugs.txt
  * Fix DHCP servers not allowing renewal of leases.
  * Changed test operators to "[[ ]] and (( ))".
	
 -- Anders P. Fugmann <anders@fugmann.name>  Thu, 29 Oct 2002 19:37:51 -0100
	
fiaif (1.3.1-1) unstable; urgency=low
  * Fix DHCP server and client.
  * Updated to makefiles from Steve Orr.
  * Changed shebang in fiaif-scan to /bin/bash.
  * Manpage updates from Steve Orr.
  * Added HTB shaper by Sergiusz Pawlowicz.
  * Moved the state file to /var/lib/fiaif
  * Updated chkconfig in init.d script.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Thu, 24 Oct 2002 18:20:31 -0200

fiaif (1.3.0-2) unstable; urgency=low
  * Move VERSION file to /usr/share/fiaif.
  * Include VERSION file in state validation check.
  
 -- Anders P. Fugmann <anders@fugmann.name>  Sun, 20 Oct 2002 21:07:34 -0200

fiaif (1.3.0-1) unstable; urgency=low
  * Packet from the firewall itself can now be marked.
  * Fix dublicate limit chains
  
 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 17 Oct 2002 12:12:47 -0200

fiaif (1.2.1-1pre2) unstable; urgency=low
  * Update Makefile to work with Redhat, Debian, Suse and FHS (Douglas J Hunley)
  * Drop the use of an array to hold zone information (Rmi Denis-Courmont)
  * Escape pings and minor spelling mistakes in manpages (steveo(at)syslang.net)
  * Added possibility to mark packets, to be used with routing.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 16 Oct 2002 13:29:16 -0200

fiaif (1.2.1-1pre1) unstable; urgency=low
  * Remove all filtering from mangle or nat tables 
  * Better chain routes, which allows faster processing.
  * Allow nonstatic zones when interface is not up yet.

 -- Anders P. Fugmann <anders@fugmann.name>  Thr, 12 Sep 2002 00:34:41 -0200

fiaif (1.2.1-1) stable; urgency=high
  * Fix bugs in fiaif scan spotted by Douglas J Hunley.
  * Print interface configuration to fiaif.out
  * Change contents of tarball.
  * Remove local redirection to the firewall
  * Update syslog messages and logging.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 11 Sep 2002 21:34:58 -0200

fiaif (1.2.0-1) stable; urgency=high
  * Use iptables-save and iptables-restore to speed up loading.
  * Move global constants to seperate file.
  * Change mode to 700 on /etc/fiaif.
  * Add LOG_LEVEL to fiaif.conf.
  * Make force-reload ignore state file.
  * Remove statefile upon upgrade.
  * Add pre-stop and post-stop scripts.
  * Fixed a bug when applying post scripts twice.
  * Log start and stop commands to system log.
  * Update manpages.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Sun, 8 Sep 2002 00:10:03 -0200

fiaif (1.1.7-2) testing; urgency=low
  * Allow for ports to be any in TOS settings.
  * add support for icmp in TOS settings.
  * Updated type_of_services file based on RFC 1060/1349.
  * TOS now has a seperate chain, to minimize rules.

 -- Anders P. Fugmann <anders@fugmann.name>  Fri, 6 Sep 2002 15:33:49 -0200

fiaif (1.1.7-1) testing; urgency=medium
  * Change rp_filter in procsheck to warning, and case on number of global zones.
  * Silently drop new packets without the SYN bit set.
  * Fix handling of forward rules when receiving packets from a non-global zone.
  * Add gracefull handling of autoconfigured zones that are not up yet.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Fri, 30 Aug 2002 21:42:00 -0200

fiaif (1.1.6-1) testing; urgency=medium
  * Use /proc/sys/net/ipv4/ip_local_port_range in SNAT rules.
  * Fix minor bug in debugging output.
  * Check that IP, MASK, NET and BCAST variables are set in every zone.
  * Use --dports when using multiport.
  * More fixes to DHCP_SERVER thing.
  * Dont use LIMIT in logging rules if LOG_LIMIT or LOG_BURST is empty.
  * Allow TOS_FILE value to be the empty string.
  * Added possibility to specify ICMP type in Reply_with 
  * Fix SNAT when using source address to NAT.
	
 -- Anders P. Fugmann <anders@fugmann.name>  Thr, 22 Aug 2002 11:45:00 -0200

fiaif (1.1.5-1) testing; urgency=low
  * Apply TOS setting to locally generated packets.
  * In case of undefined zone, prefix with the configuration file name
  * When using static static SNAT, SNAT on all ip's.
  * Added tc-status to see traffic counters.
  * Changed tc-start and tc-stop to ignore ENABLE_TC in the global
    configuration file
  * Updated manpages to include info on tc-start, tc-stop and tc-status.

 -- Anders P. Fugmann <anders@fugmann.name>  Sat, 17 Aug 2002 12:24:31 -0200

fiaif (1.1.4-1) unstable; urgency=low
  * Fix AUTOCONF when using IPv6.
  * Fix NAT when using port specification.
  * Remove the PROTOCOLS parameter.
  * Updates to manpages files by Glenn English.
  * Correct sections and titles of manpages.
		
 -- Anders P. Fugmann <anders@fugmann.name>  Mon, 12 Aug 2002 12:40:51 -0200

fiaif (1.1.3-2) unstable; urgency=low
  * Change to 'all' debian package instead of i386.
  * Better DHCP support.
  * Fix module loading
  * Updates to manpages and default configuration files by Glenn English.
  * Add a check for unresolved zones.
  * Check for exsistance of modprobe.
		
 -- Anders P. Fugmann <anders@fugmann.name>  Fri, 2 Aug 2002 09:31:18 -0200

fiaif (1.1.2-1) unstable; urgency=low
  * Rename PUBLIC to GLOBAL in zone configuration files.
  * Let GLOBAL zones accept packets from NET and NET_EXTRA.
  * Set default values on integer variables in zone configuration files.
  * Updates to manpages and default configuration files from glenn english.
		
 -- Anders P. Fugmann <anders@fugmann.name>  Mon, 21 Jul 2002 23:19:36 -0200

fiaif (1.1.1-2) unstable; urgency=high
  * Fix bug in declare, causing some version of bash to complain.
  * Change test of EXTENDED_MANGLE
  * Declare arrays using \".
	
 -- Anders P. Fugmann <anders@fugmann.name>  Mon, 22 Jul 2002 09:44:07 -0200

fiaif (1.1.0-3) unstable; urgency=high
  * Make NAT work again
	
 -- AnFugmann <anders@fugmann.name>  Thr, 18 Jul 2002 20:41:10 -0200

fiaif (1.1.0-2) unstable; urgency=medium
  * Moved MULTICAST net to NET_EXTRA in zone.int.
  * Corrected missing '"' in zone.ext, causing strange errors.
  * Minor corrections to default chanins for zones.
  * Fix FORWARD rules
	
 -- Anders P. Fugmann <anders@fugmann.name>  Thr, 18 Jul 2002 20:24:56 -0200

fiaif (1.1.0-0pre3) unstable; urgency=low
  * Made fiaif-scan handle multible zones per interface

 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 17 Jul 2002 23:50:16 -0200

fiaif (1.1.0-0pre2) unstable; urgency=low
  * Corrected code for FORWARD rules, to allow multible zones per interface
  * Corrected multicast net in zone.ext
  * Updated default configuration files to not include any xxx.xxx ip numbers
  * Updated manpages

 -- Anders P. Fugmann <anders@fugmann.name>  Mon, 15 Jul 2002 22:25:51 -0200

fiaif (1.1.0-0pre1) unstable; urgency=low
  * Add support for multible zones per interface is public==0
  * Only traverse RESERVED_NETS and PRIVATE_NETS if public==1
  * Let multicast either be a NET_EXTRA or, a seperate zone on a private network.
  * Code cleanup.
  * Removed the MULTICAST_NET variable from main configuration file.
  
 -- Anders P. Fugmann <anders@fugmann.name>  Mon, 15 Jul 2002 00:34:32 -0200

fiaif (1.0.3-2) unstable; urgency=low
  * Add support for multiple nets on a zone via NET_EXTRA variable.
  * SNAT now accepts specific ip/mask parameter to specify which packets to masquerade

 -- Anders P. Fugmann <anders@fugmann.name>  Thr, 11 Jul 2002 19:24:11 -0200

fiaif (1.0.3-1) unstable; urgency=medium
  * Hosts on a network are allowed to contact any IP of the firewall, but the zone file still applies.
  * Loop-back handling greatly simplified.
  * RESERVED_NETWORKS are now globally used.  
  * Sanity checking is now a separate chain.
  * MAC_DROP parameter is working.
  * DYNAMIC_IP interfaces was not allowed to send to loop-back.

 -- Anders P. Fugmann <anders@fugmann.name>  Thr, 11 Jul 2002 15:45:28 -0200

fiaif (1.0.2-1) unstable; urgency=low
  * RESERVED_NETWORKS can now specify a file. 
  * PRIVATE_NETWORKS added - See RFC1918.
  * Internal networks may not send to reserved networks.
  * BIN_PATH parameter added instead of specifying location of iptables and tc explicit.
  * TOS settings moved to a separate file.
  * Updated TOS values.
  * Added TCP packet checks (port scans)
  
 -- Anders P. Fugmann <anders@fugmann.name>  Wed, 10 Jul 2002 23:13:37 -0200

fiaif (1.0.1-1) unstable; urgency=medium
  * Added /proc/net to be changed via configuration directives.
  * 'fiaif stop' now sets all chains to ACCEPT.
  * Removed Quake3 ports from zone.ext
  * Updated RESERVED_NETWORKS with list from IANA. (More complete now)
  * Added possibility of inserting and removing modules upon fiaif start/stop.
  * Minor code cleanup.
  
 -- Anders P. Fugmann <anders@fugmann.name>  Sun, 7 Jul 2002 00:13:14 -0200

fiaif (1.0.0-2) unstable; urgency=low
  * Fix pre and post scripts.

 -- Anders P. Fugmann <anders@fugmann.name>  Mon, 1 Jul 2002 08:46:36 -0200

fiaif (1.0.0-1) unstable; urgency=medium

  * Minor spelling corrections
  * 'fiaif test' now accepts 2. argument.
  * Better support for multicast. 
  * Added some Sanity checks. 
  * Added DONT_START parameter to disable fiaif. 
  * Added parameter 'DHCP' to enable DHCP queries.
  * Default configuration files usable on any system.
  * Corrected bugs when DHCP=1
	
 -- Anders P. Fugmann <anders@fugmann.name>  Sat, 29 Jun 2002 12:17:33 -0200

fiaif (1.0.0-0rc2) unstable; urgency=medium

  * Set TOS values in prerouting, to enable routing based on TOS settings.
  * Only use INPUT, FORWARD and POSTROUTING mangle chains, if kernel >= 2.4.18
  * Allow packets from the NET even if public is set (Allow routing to
    internet through a local network.)
  * Fix problems in for loops missing a ';'. Bash 2.05 does not seem to
    complain about this.
  * Dont try Traffic shaping at all if it has been disabled in the global
    configuration.
  * Updates to redhat package. But it still seems buggy.	
 
 -- Anders P. Fugmann <anders@fugmann.name>  Mon, 24 Jun 2002 22:03:48 -0200

fiaif (1.0.0-0rc1) unstable; urgency=medium

  * Possible to specify source and destination for INPUT/OUTPUT/FORWARD
    and LIMIT (Suggestion and initial patch from Nikolay Fetisov).	
  * Better setup of loopback zone.
  * Minor code cleanup.
  * Default policy for mangle prerouting and postrouting is now martian.
  * Close the firewall before applying rules.
  * Add comment to output during test.
  * Add configuration parameter to specify destination of test output.

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Sat, 22 Jun 2002 12:22:21 -0200

fiaif (0.9.8-1) unstable; urgency=low

  * Make fiaif-scan faster
  * Print out ICMP type in fiaif-scan
  * Print out TCP flags in fiaif-scan
  * Log illegal destination address a martians.

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Thr, 13 Jun 2002 13:37:21 -0200

fiaif (0.9.7-8) unstable; urgency=low

  * Fix in zone.dmz in forward rules.
  * Corrected comment in zone.ext.
  * removed fiaif.dirs from debian directory.
  * Manpages for conf files are now in section 5.
  * Removed Last output line (debugging information) from fiaif-scan. 
  * Checked and corrected bug in the debian package. (found by lintian)
  * Allow packets from multicast net in all zones.
  * New TCP packet without syn are now logged through LOG_DROP, and ACK,FIN
  not displayed.
  * Cache result from hostname lookup's and service lookup's
  * Significantly speedup fiaif-scan
  * Strip '.' from host names in fiaif-scan
  * Added manpage for fiaif-scan
  * Scanning syslog is now done by fiaif-scan.

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Sat, 08 Jun 2002 11:37:34 -0200

fiaif (0.9.7-1) testing; urgency=low

  * Added preliminary supports for syslog scanning - use 'cat /var/log/syslog | /usr/share/fiaif/scan_log.sh'
  * Added ulogd support.
  * Fixed typo in LIMIT reporting.

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Fri, 07 Jun 2002 21:14:36 -0200

fiaif (0.9.6-4) testing; urgency=medium

  * Added functionality to specify a port range in INPUT/OUTPUT/FORWARD and LIMIT.
  * Fixed type in NAT_TYPE. Thanks to Daniel Poelzleithner.
  * Fixup removal of empty chains.
  * Spell check to proc-check. Reorganized src layout.
  * /proc/sys/net setting is now checked when issuing a test.
  	
 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Fri, 07 Jun 2002 00:35:43 -0200

fiaif (0.9.5-3) testing; urgency=low

  * Fix rpm package
  * Error in installation. (copyright not found)
  * OUTPUT now check the destination IP number. 
  * INPUT and OUTPUT and FORWARD now accept a ip/mask to specify the source of the
    packet. Use this to block out specific IP's or allow these.
  * Move sh files to /usr/share/fiaif, instead of lib. 
    These files are not arch Dependant.
	
 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Tue, 04 Jun 2002 12:55:42 -0200

fiaif (0.9.4-5) testing; urgency=medium

  * Less lines in startup
  * Fixed lang pause in startup.
  * Give more verbose output, instead of a long pause.
  * Limit worked in reversed way - corrected
  * Dont remove chains with 10 rules
  * prescript and postscript are not prefixed by "/sbin/iptables "
	
 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Mon, 03 Jun 2002 10:48:39 -0200
	
fiaif (0.9.3-2) testing; urgency=medium

  * Only disallow ! syn on input queue, and low specially when dropped.
  * IP_DROP, MAC_DROP et. al. now works.
  * Preliminary redhat package.
	
 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Sun, 02 Jun 2002 15:44:15 -0200

fiaif (0.9.2-4) testing; urgency=medium

  * Html file removed from distribution. It contains too many relative
    links to actually be useful.
  * Added zone.dmz example configuration file.
  * Added Traffic shaping.
  * Minor code restructuring.
  * Renamed globals.sh to iptables.sh

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Sun, 02 Jun 2002 15:17:15 -0200
	
fiaif (0.9.1-7) unstable; urgency=high

  * Split up functions.sh
  * Add limit support
  * Drop extra SNAT line.
  * Fix list of reserved networks.
  * MULTIBLE_IP removed from example zone.int.
  * EXTRA_IP functionality added.
  * Unset _all_ zone variables when loading a new zone.
  * Manpage cleanup.
  * Remove unused chains.
  * Added LOG_LIMIT and LOG_BURST to fiaif.conf
  * Minor code cleanup and restructuring.

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Sun, 02 Jun 2002 02:11:43 -0200

fiaif (0.9.0-2) unstable; urgency=high

  * Manpages: fiaif.8, fiaif.conf.8 and zone.conf.8
  * INOUT/OUTPUT changed to work just as FORWARD using an array.
  * Changed order of forward rules

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Fri, 31 May 2002 13:06:36 -0200

fiaif (0.8.7-8) unstable; urgency=high

  * FORWARD now should work correctly	
  * FORWARD rules in zones are now arrays in order to 
    be able to specify a strict order

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Fri, 31 May 2002 13:06:36 -0200

fiaif (0.8.6-3) unstable; urgency=low 

  * Fixed Problem with checking for syn but set on output chain. The
  * Fixed symlink problem
  * Debian package

-- Anders P. Fugmann <anders@fugmann.dhs.org>  Thu, 30 May 2002 23:27:45 -0200

fiaif (0.8.5-1) unstable; urgency=low 
	
  * Remove "zones are not supported. They have been from version 0.7
  * FIAIF page now contains links to configuration files. 

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Thu, 30 May 2002 21:15:06 -0200

fiaif (0.8.4-1) unstable; urgency=medium 
	
  * Make installed files not executable by default.	
  * Add fiaif directory to tar-ball. Easier to use.

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Thu, 30 May 2002 15:13:20 -0200

fiaif (0.8.3-1) unstable; urgency=low 
	
  * Run levels are now 3,5 for redhat, and rcS.d for debian.
    Shutdown scripts removed, since there is no need for these.

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Thu, 30 May 2002 13:46:12 -0200

fiaif (0.8.2-1) unstable; urgency=high 
	
  * Changed makefile to have both install and install-config.	
  * CONF_PATH not used correctly.
  * Empty rules in INPUT/OUTPUT did not work.

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Thu, 30 May 2002 12:04:37 -0200

fiaif (0.8.1-1) unstable; urgency=low 
	
 * Removed ACK,FIN from logs. Its not a bug in FIAIF.
 * Minor changes to the page.
 * Freshmeat announcement.

 -- Anders P. Fugmann <anders@fugmann.dhs.org>  Wed, 29 May 2002 20:34:02 -0200

fiaif (0.8.0-1) unstable; urgency=high 

 * Made a html document, with a quick overview.
 * Changed MULTIBLE_IP to EXTRA_IP, which states
   any extra IP's of the interface(zone)
 * Added BCAST address for zones, and allow 
   packets send to this address.
 * Made makefile usable.
 * Made REPLY_XXX parameter work.
   It can be used for any or all protocols 
 * Removed the lo zone. The loopback device in Linux 
   is too special. The script now makes its own rules.
 * if Rules for TCP, UDP, and TCP is the same, then only 
   make one rule. This really clears things up.
 * Move RELATED,ESTABLISHED before NEW. 
   This makes the speed a little bit faster.
 * Tested, and applied.
 * Tweaked system to manage loopback interface.
 * Added MULTIBLE_IP's to zone's. This way we can manage 
   more than one IP per zone. It is very early. Dont depend on it.  
 * Added Changelog File. 
