Ufw Changelog

What's new in Ufw 0.36

Dec 17, 2018
  • This release adds snap packaging, concurrent updates, many bug fixes and a new 'prepend' command to better support IPS and dynamic firewalls.

New in Ufw 0.35 (Feb 22, 2016)

  • ufw 0.35 adds support for comments, moves the ufw managed user rules to /etc, improved setup options and several bug fixes.

New in Ufw 0.34 (Aug 20, 2015)

  • ufw 0.34 features before and after hooks, route rules (ie, manage FORWARD chain (NAT not supported yet)), systemd service example, igmp and gre protocol support, updated translations, improved documentation and many bug fixes.

New in Ufw 0.33 (Aug 18, 2012)

  • ufw 0.33 features IPv6 limit support, a new 'show added' report, updated translations and bug fixes.

New in Ufw 0.32 (Jul 7, 2012)

  • a port to Python3 and should work with Python 2.6+ and Python 3.2+.

New in Ufw 0.30.1 (Mar 23, 2011)

  • ufw 0.30.1 is a bugfix release which adds python 2.7 support, man page updates and various refinements to the default IPv6 policy.

New in Ufw 0.30 (Aug 28, 2010)

  • add example Upstart script
  • error out when filesystem is read-only (LP: #430053)
  • catch exception if can't find parent pid when refreshing application profiles (LP: #424528)
  • update manpage to clarify 'show' command (LP: #453083)
  • update setup.py to use sys.executable and cleanup required binaries
  • update test suite
  • better handle iptables < 1.4 (tested with 1.3.8)
  • allow alternate interpreter
  • write loglevel rules to user rules (LP: #459925)
  • properly log INVALID packets for medium and higher (LP: #480789)
  • Makefile: clean up POTFILES target
  • generate binary translations in setup.py rather than shipping them in source (LP: #490366)
  • src/ufw-init-functions: don't run 'already started' check unless ENABLED. This should improve boot speed such that iptables is not needlessly called which results in an unneeded modprobe.
  • manpage fixes thanks to Loic Minier
  • set "default" sysctl values before "all" values. Thanks to Loic Minier
  • clean up parser to make it easier to add new functionality
  • don't log LIMIT rules if logging is off (LP: #512131)
  • fix for noisy services getting logged. Added new 'skip-to-policy' chains that are now used in after*.rules (LP: #488032)
  • add rsyslog example configuration and update README
  • add reset command (LP: #436608)
  • add --force option to enable (LP: #496267)
  • decode("utf-8") some strings in 'status' to correct formatting errors with with multibyte characters
  • add more reports
  • add delete by rule number (LP: #367571)
  • add support for IPv6 tunnels and 6to4 (LP: #502655)
  • fix occasional ufw errors during boot with upstart (/tmp not available) (LP: #521359)
  • normalize IPv6 addresses to standard python shortened notation
  • follow iptables and don't require that an interface ends with a number (LP: #568877)
  • really allow IPv6 neighbor discovery (LP: #611982)
  • add support for IPSec via the esp and ah protocols (LP: #606997)
  • update check-requirements to not check ip6tables modules needed for the 'limit' command
  • import updated Launchpad translations:
  • po/ar.po, po/bg.po, po/ca.po, po/cs.po, po/da.po, po/de.po, po/el.po,
  • po/en_AU.po, po/en_GB.po, po/es.po, po/fi.po, po/fr.po, po/he.po,
  • po/hu.po, po/id.po, po/it.po, po/nb.po, po/nl.po, po/pl.po, po/pt_BR.po,
  • po/pt.po, po/ru.po, po/sk.po, po/sl.po, po/sr.po, po/sv.po, po/tl.po,
  • po/zh_CN.po
  • thanks to all contributors: https://translations.launchpad.net/ufw

New in Ufw 0.29.3 (Jan 29, 2010)

  • This is another minor bug fix release. 0.29.2 attempted to fix LP: #488032 (noisy services being logged), but did not fully address the issue.

New in Ufw 0.29.2 (Jan 29, 2010)

  • This is a minor release to fix some bugs with logging.

New in Ufw 0.29.1 (Nov 12, 2009)

  • Minor bug fix release.

New in Ufw 0.29 (Aug 27, 2009)

  • Ufw now has full egress filtering support in the command line interface so you can manage your outgoing connections in the same manner as your incoming connections. Documentation has been improved and now includes a manual page for how to utilize the ufw framework and take advantage of netfilter's functionality outside of the ufw command. This is also the first release to include all the great translation work done by the Rosetta translators in Launchpad. See the ChangeLog file for detailed information on this release.

New in Ufw 0.28 (Jul 25, 2009)

  • UFW now has filtering by interface support when using the extended syntax. This release also includes bash completion support as well as various bug fixes. See the ChangeLog file for detailed information on this release.

New in Ufw 0.27.1 (May 9, 2009)

  • UFW 0.27.1 is a minor release that includes some small translation support bugfixes only and introduces no new functionality over 0.27.

New in Ufw 0.27 (Mar 19, 2009)

  • UFW now has improved logging capabilities with loglevels and per rule logging.
  • This release also includes rule insertion support.

New in Ufw 0.26 (Jan 17, 2009)

  • UFW now has support for REJECT rules and default policies.
  • It also by default will only operate on its own chains, making UFW more compatible with other systems.

New in Ufw 0.25 (Dec 29, 2008)

  • UFW is now more downstream friendly. Starting with 0.25, UFW is more portable and will have tarball releases in addition to bazaar branches.