Subject: Improvements in "Find" function: administrator can now drag an object into a well in the find dialog panel to make it search for this particular object.

From: "Robertson R. Saul" <[email-masked]>
Date: Thu, 7 Dec 2006 18:34:58 +0200

In addition to the "Find" function, the "Find and replace"          operation has been implemented. Keeping track of dependencies between objects.
support for modules connlimit    and hashlimit.
My thanks to Jeffrey for the help. When submitting the patch please state that you agree with this license.
A bug that prevented user from creating a rule set branch inside another branch has been fixed.
Doing this only if original    rule did not have negation and we do not add any virtual    addresses for NAT. If this is not the case,    built-in installer can be instructed to ask for the    authentication information before it touches each firewall.
A note to translators: please do this only if you have experience with gettext and related tools and procedures. Virtual addresses added for NAT are considered to be a      side effect and connections should not be implicitly permitted      to them by a rule with fw object in destination.
We plan to run public beta for a few months and release final version in October.
If the name resolves to several IP addresses, all addresses    are used in the generated firewall configuration. For PF it          is translated into queue; compiler for ipfw can          use pipe, queue or divert depending          on how the action is configured by the administrator in          the GUI.
This is          useful when many firewalls in the tree use the same set of          objects.
If this is not the case,    built-in installer can be instructed to ask for the    authentication information before it touches each firewall. Firewall object now has an attribute "inactive". Compilers for PF and ipfilter          support fastroute, route-to,          reply-to and dup-to options. If this is not the case,          built-in installer can be instructed to ask for the          authentication information before it touches each firewall. Search by object's name or          a value of its attribute is also possible. Keeping track of dependencies between objects. This service object is only supported by compilers for        iptables and PF. This allows fwbedit to quickly    create objects and still ensure their IDs are unique    fwbedit  Fwbedit can now create objects and repair broken object  database.
Bulk install operation is    only possible if all firewalls use the same user name and    password for authentication. For PF          this action is translated into an anchor with the name the          same as the name of the branch defined by the          administrator. This service object is only supported by compilers for        iptables and PF. Bulk install operation is          only possible if all firewalls use the same user name and          password for authentication.
Here also the name of the table is the same as the      name of the AddressTable object it was created for.
For PF this action is translated into tag.
The object can be        configured to read the file at compile time or at run time.
Compiler for iptables          generates shell code to read the contents of the file when          firewall configuration is activated.
This action is only supported by compilers for          iptables and ipfw.
If this is not the case,    built-in installer can be instructed to ask for the    authentication information before it touches each firewall.
Tag can later be inspected using          service object TagService.
I can not help you or verify your work.
This version comes with many new features in the GUI and policy compilers. For      example, new action that created branch in rule set is      called Chain for iptables firewalls and Anchor      for PF fierwalls. By popular request, built-in installer can now save a copy of    . Compiler failed to convert DNSName objects set to resolve  at compile time into IP addresses.
System    resolver should take care of recursion and CNAME records, if    any.