sanewall (0.9.8) unstable; urgency=low

  * Handle parse errors in generated script more gracefully
    - See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703341

  * Do not try to add DROP rules to NAT chains
    - See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=536675

 -- Phil Whineray <phil@sanewall.org>  Sat, 23 Mar 2013 16:23:00 +0000

sanewall (0.9.7) unstable; urgency=low

  * Use "ss" in place of "netstat"
    - As suggested here https://bugzilla.redhat.com/show_bug.cgi?id=784520

  * Improve docbook validation

  * Remove init.d directory
    - These files belong in downstream packages
    - Added a link to their location on website

  * Update email address in copyright, contact info
    - Please use phil@sanewall.org for all project-related contact

  * Update README and INSTALL documents
    - Move getting started documents from INSTALL to README
    - Rearrange README

 -- Phil Whineray <phil@sanewall.org>  Fri, 22 Mar 2013 21:33:00 +0000

sanewall (0.9.6) unstable; urgency=low

  * Remove RESERVED_IPS file
    - Default values are very unlikely to need changing
    - Removed from INSTALL documentation

  * Replaced ant build mechanism with GNU Make
    - New dependencies listed in INSTALL file

 -- Phil Whineray <phil@sanewall.org>  Fri, 15 Mar 2013 21:55:00 +0000

sanewall (0.9.5) unstable; urgency=low

  * Rename service webcache to httpalt
    - http_alt is preferred name for port 8080, since many things use it
    - Added alias webcache for httpalt
    - Added alias tomcat for httpalt

  * Improve service documentation
    - More links to wikipedia and home pages
    - More complete titles
    - Add a link to wikipedia at top of service list
    - Fix filename reporting when script detects errors

 -- Phil Whineray <phil@sanewall.org>  Sun, 10 Mar 2013 21:31:00 +0000

sanewall (0.9.4) unstable; urgency=low

  * Improve documentation
    - Build PDF and manpages from docbook

 -- Phil Whineray <phil@sanewall.org>  Sat, 23 Feb 2013 12:36:00 +0000

sanewall (0.9.3) unstable; urgency=low

  * Import firehol changes up to version 1.296
    - Removed get-iana.sh and check-iana.sh altogether
    - Updated blackist command so that it does not lead to timeouts when
      an internal host is trying to reach a blacklisted host.
    - Stop checking RESERVED_IPS date

 -- Phil Whineray <phil@sanewall.org>  Sat, 16 Feb 2013 11:50:00 +0000

sanewall (0.9.2) unstable; urgency=low

  * Improve installation
    - Fix location of admin scripts
    - Move the packaging scripts to a separate repo

 -- Phil Whineray <phil@sanewall.org>  Mon,  7 May 2012 17:47:00 +0100

sanewall (0.9.1) unstable; urgency=low

  * Improve installation
    - Verify on Ubuntu 12.04, FC16
    - Fix errors in README
    - Improve instructions in INSTALL
    - Tidy up some comments in sanewall script

 -- Phil Whineray <phil@sanewall.org>  Mon,  7 May 2012 17:47:00 +0100

sanewall (0.9.0) unstable; urgency=low

  * Based on firehol-cvs
    - Update to latest reserved IP address space
    - Parsing of 3.0 kernel
    - Debian patches (except read of /etc/default/firehol)
    - RedHat patches (don't start be default)

 -- Phil Whineray <phil.whineray@gmail.com>  Sat, 31 Mar 2012 23:42:00 +0100