-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-c3ec07499c 2024-06-28 02:11:57.076398 -------------------------------------------------------------------------------- Name : foomuuri Product : Fedora 39 Version : 0.24 Release : 1.fc39 URL : https://github.com/FoobarOy/foomuuri Summary : Multizone bidirectional nftables firewall Description : Foomuuri is a firewall generator for nftables based on the concept of zones. It is suitable for all systems from personal machines to corporate firewalls, and supports advanced features such as a rich rule language, IPv4/IPv6 rule splitting, dynamic DNS lookups, a D-Bus API and FirewallD emulation for NetworkManager's zone support. -------------------------------------------------------------------------------- Update Information: Upstream update to 0.24: Remove start-or-good command line option. Add systemd foomuuri-boot.service to implement same functionality safer. Add block command line option to load "block all traffic" ruleset. Add continue statement. Rule saddr 192.168.1.1 counter log continue counts and logs traffic from 192.168.1.1 and continues to next rules. Add time matcher to check hour, date and weekday. Add mac_saddr and mac_daddr matchers to match MAC address. This works only for incoming traffic. Add ct_status matcher to match conntrack status, for example dnat or snat. Add cgroup matcher to match cgroup id or cgroupv2 name. Add -conntrack flag to rule. This rule will be outputted before conntrack. This can be used to count all specific traffic, or to accept some traffic without adding it to conntrack (for example high load DNS server). Add redis, redis-sentinel, vnc, domain-quic (DoQ) and domain-tls (DoT) macros to default services. Matcher szone -public in any-localhost (or dzone in localhost-any) section can be used to skip adding rule to public-localhost. Allow using any command (curl example included) instead of fping in network connectivity monitor. Allow foomuuri { nft_bin nft --optimize } to specify options. Fix: counter myname didn't work on prerouting section. Fix: Restart network connectivity monitor command if it fails to start or dies. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 19 2024 Kim B. Heino <b@xxxxxxxx> - 0.24-1 - Upgrade to 0.24 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c3ec07499c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-announce-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
