11th Netfilter Workshop
Thomas Woerner has been at the 11th Netfilter Workshop (22th-26th June 2015. Budapest, Hungary) to discuss firewalld, the use of netfilter and also nftables integration.
The slides are available here: nfws2015-firewalld
firewalld 0.3.14.2 release
The new firewalld version 0.3.14.2 is available as a bug fix only release for version 0.3.14. It provides a small fix for the applet and firewall-config to only honour active connections from NetworkManager, an adapted firewall-applet man page and a QSettings fix.
The new firewalld version 0.3.14.2 is available here:
- Tarball: firewalld-0.3.14.2.tar.gz
- SHA256: c8e2c9be589d540f198c858c93b0f634777e0452d819ad09c252426c8c5b64c5
- Source repository on github: v0.3.14.2
- Complete changelog on github: 0.3.14.1 to 0.3.14.2
firewalld 0.3.14.1 release
The new firewalld version 0.3.14.1 is available as a bug fix only release for version 0.3.14. It provides a small fix for the new firewall-applet to make it work also if auto started by KDE5.
The new firewalld version 0.3.14.1 is available here:
- Tarball: firewalld-0.3.14.1.tar.gz
- SHA256: 092eef855b1cd32380c170cef82d06643a36312867ca4b65b24e9da1ee4cc235
- Source repository on github: v0.3.14.1
- Complete changelog on github: 0.3.14 to 0.3.14.1
firewalld 0.3.14 release
The new firewalld version 0.3.14 is available with several enhancements and bug fixes.
The main changes are
Enabled the use of firewalld without firewalld.conf
Firewalld can now be used without a firewalld.conf file in /etc/firewalld. The fall back settings are used in this case.
ebtables support
ebtables is now supported and can be used in direct chains and rules.
Rich Language
Masquerading with a destination address is now possible. Forwarding rules are now limited to new connections.
Reload with direct rules
The issue while reloading with permanent direct rules has been fixed.
firewall-applet
The applet has been ported over to Qt4 as the StatusIcon support in Gtk3 has been deprecated. The port to a Gnome only applet is not possible as it would only be usable in Gnome3. The gtk upstream proposed solution to port back to gtk2 is also not possible, as gtk2 is a dead end and will not be usable together with dbus and polkit in Python.
The Qt4 applet did not need work a rounds or tweaks as the former Gtk3 version to make it work in different desktop environments like Gnome, KDE4, KDE5, Mate, Xfce and others.
Python 3 support
Additional bindings sub package for Python3. There are now python-firewall and python3-firewall.
Migration to github
The source repository is now hosted at github.
There are also some optimizations and build environment fixes.
The new firewalld version 0.3.14 is available here:
- Tarball: firewalld-0.3.14.tar.gz
- SHA256: 72c4b60b3b7d2d30a30084cf239fd5782edeab877b44605a4c2611cd9c0e8cba
- Source repository on github: v0.3.14
- Complete changelog on github: 0.3.13 to 0.3.14
On the way to Qt
With the changes in newer Gtk versions, especially the deprecation of the StatusIcon for system tray icons, the firewalld GUI applications will be ported over to Qt.
The first application that has been ported over is firewall-applet. The applet is using Qt4 and tested on these desktop environments: KDE5, Xfce, LXDE and Gnome3 on Fedora 22.
This applet has been merged into the master tree and will be available in the next firewalld release 0.3.14.