ufw

Download project files

How do I verify a download?


110 of 18 releases

0.36 release from the 0.36 series released 2018-12-14

Release information
Release notes:

ufw 0.36 adds snap packaging, concurrent updates, many bug fixes and a new 'prepend' command to better support IPS and dynamic firewalls.

Changelog:

ufw (0.36) RELEASED; urgency=medium

  * doc/ufw-framework.8:
    - fix path for user[6].rules
    - reference nf_conntrack_sane
    - fix syntax error in example rule (LP: #1782384)
  * snap packaging:
    - adjust snappy packaging for series 16 and to use snapcraft
    - add bash completer to snap packaging
    - add ipset and conntrack
  * doc/ufw-on-snappy.8: update for series 16
  * src/backend_iptables.py: properly calculate the path to state_dir when
    specifying --rootdir and --datadir (ie, fix regression in 0.35 final)
  * conf/before6.rules:
    - adjust ufw6-before-output rules for echo-reply and echo-request
      (LP: #1633698)
    - move echo-reply for ufw6-before-input before INVALID (LP: #1664133,
      LP: #1509725)
  * conf/ufw.defaults: mention nf_conntrack_sane
  * adjust runtime tests to use daytime/port 13 instead of ssh/port 22
    everywhere and adjust to use daytime/port 13 instead of http/port 80 and
    https/port 443 in good/logging and ipv6/bad_args6 (Closes: 849628)
  * don't disable syncookies and instead use the system's value by default
  * Bittorrent can also use UDP (LP: #1695718)
  * doc/ufw.8: remove spurious apostrophes from man page. Thanks to Tom
    Spurling
  * common.py:
    - adjust regex to be more liberal with non-meta characters in interface
      names (LP: #1719211)
    - don't allow interfaces longer than 15 characters
  * shell-completion/bash: use _have() instead of have(). Thanks to Andrew
    Nowak and Paulo Marcel Coelho Aragao (LP: #1775043)
  * support concurrent updates (LP: #1204579, LP: #1652163, LP: #1377600,
    Closes: 686248)
  * add 'prepend' command to better support IPS (fail2ban, etc. LP: #1368411,
    LP: #1586258, Closes: 909163)
  * backend.py: only warn if initcaps() fails is disabled (Closes: 884932)
  * conf/before.rules: remove extraneous source quench rule (LP: #1558068)

File Description Downloads
download icon ufw-0.36.tar.gz (md5, sig) 0.36 release 398
last downloaded today
Total downloads: 398

0.35 release from the 0.35 series released 2016-02-18

Release information
Release notes:

ufw 0.35 adds support for comments, moves the ufw managed user rules to /etc, improved setup options and several bug fixes.

File Description Downloads
download icon ufw-0.35.tar.gz (md5, sig) 0.35 release 7,753
last downloaded today
Total downloads: 7,753

0.34 release from the 0.34 series released 2015-08-20

Release information
Release notes:

ufw 0.34 features before and after hooks, route rules (ie, manage FORWARD chain (NAT not supported yet)), systemd service example, igmp and gre protocol support, updated translations, improved documentation and many bug fixes.

File Description Downloads
download icon ufw-0.34.tar.gz (md5, sig) 0.34 release 1,387
last downloaded 3 weeks ago
Total downloads: 1,387

0.33 release from the 0.33 series released 2012-08-17

Release information
Release notes:

ufw 0.33 features IPv6 limit support, a new 'show added' report, updated translations and bug fixes.

Changelog:

 * conf/after6.rules: also use correct ports for DHCPv6. Thanks to Marco
   Davids (LP: #1007326)
 * src/util.py: add get_netfilter_capabilities() for getting the capabilities
   set for things we want to support but may not be in all kernels/iptables
   versions
 * add IPv6 limit support (LP: #951462)
 * import new and updated Launchpad translations:
   - po/ast.po, po/bs.po, po/cs.po, po/de.po, po/el.po, po/en_AU.po,
     po/en_GB.po, po/es.po, po/fi.po, po/fr.po, po/he.po, po/hu.po, po/it.po,
     po/nb.po, po/nl.po, po/pt_BR.po, po/pt.po, po/sk.po, po/sl.po, po/sv.po,
     po/zh_CN.po, po/zh_TW.po (new, LP: #868195)
   - thanks to all contributors: https://translations.launchpad.net/ufw
 * README.translations: updated for paths and testing
 * add 'show added' report (LP: #987784)
 * remove ACCEPT_NO_TRACK option since it never worked (LP: #787955)
 * src/backend_iptables.py: display output of ufw-init if it fails
 * don't traceback if can't determine iptables version

File Description Downloads
download icon ufw-0.33.tar.gz (md5, sig) 0.33 release 14,700
last downloaded today
Total downloads: 14,700

0.32 release from the 0.32 series released 2012-07-06

Release information
Release notes:

ufw 0.32 features a port to Python3 and should work with Python 2.6+ and Python 3.2+.

Changelog:

* Obsolete python2.5 in preparation for python3 support
* Adjust gettext initialization so that _() always returns unicode. Patch
   thanks to Barry Warsaw
* Add python3 support (LP: #1001657)
* profiles/ufw-directoryserver: use LDAPS key for LDAPS

File Description Downloads
download icon ufw-0.32.tar.gz (md5, sig) 0.32 release 361
last downloaded 8 weeks ago
Total downloads: 361

0.31.2 release from the 0.31 series released 2012-08-11

Release information
Release notes:

ufw 0.31.2 is a bugfix release and adds IPv6 limit support when the kernel supports it. While the 0.31 series is in maintenance mode, this feature was considered important enough to backport and was long overdue.

Changelog:

 * conf/after6.rules: also use correct ports for DHCPv6. Thanks to Marco
   Davids (LP: #1007326)
 * src/util.py: add get_netfilter_capabilities() for getting the capabilities
   set for things we want to support but may not be in all kernels/iptables
   versions
 * add IPv6 limit support (LP: #951462)

File Description Downloads
download icon ufw-0.31.2.tar.gz (md5, sig) 0.31.2 release 77
last downloaded 8 weeks ago
Total downloads: 77

0.31.1 release from the 0.31 series released 2012-03-13

Release information
Release notes:

ufw 0.31.1 is a bugfix release to fix a translations regression.

Changelog:

* src/util.py: revert revert r752 which introduced problems with other
   locales (LP: #953372)
* add tests/check-locales. This is Debian/Ubuntu specific, but will help
   avoid commits like r752.

File Description Downloads
download icon ufw-0.31.1.tar.gz (md5, sig) 0.31.1 release 648
last downloaded 8 weeks ago
Total downloads: 648

0.31 release from the 0.31 series released 2012-03-09

Release information
Release notes:

ufw 0.31 is primarily a bug fix release and incorporates all the fixes from 0.30.1. It has better support for IPv6, multicast service discovery, netbios connection tracking, updated translations, testsuite improvements and other bug fixes.

Changelog:

* allow UPnP multicast for service discovery (LP: #764933)
* conf/ufw.defaults:
  - remove IRC connection tracking, which is only required for DCC
  - allow nf_conntrack_netbios_ns (Samba) (LP: #360975)
* enable IPv6 by default
* fix 'allow to any ipv6' when IPv6 is enabled
* update manpage references to ufw and ufw-framework to include the section
* update check-requirements to prompt to continue with tests that may
  autoload modules. Add '-f' option to check-requirements and update test
  suite accordingly (LP: #782816)
* don't fail when running 'show listening' under fakeroot (LP: #812516)
* add syntax-check to Makefile
* add man-check to Makefile
* src/util.py: use codes.open(..., 'UTF-8') to better support non-english
  locales in third-party frontends. Analysis and patch suggestion thanks to
  S. Nizio. (LP: #921758)
* conf/ufw.defaults and doc/ufw-framework.8: add info on tftp connection
  tracking modules
* fix traceback when specifying '--dry-run' with no arguments (LP: #946332)
* tests/testlib.sh: add 'http-or-www' argument to do_cmd() to try to
  account for /etc/services files with http/udp instead of www/udp. Adjust
  bad/apps and root/normalization for this (LP: #947224)
* conf/before6.rules: use correct ports for DHCPv6 and limit source and
  destination addresses to autoconfiguration addresses (fe80::/10). Thanks
  to Mathieu Trudel-Lapierre (LP: #947416)
* import new and updated Launchpad translations:
  - po/ar.po, po/ast.po (new), po/bg.po, po/bs.po (new), po/ca.po, po/cs.po,
    po/da.po, po/de.po, po/el.po, po/en_AU.po, po/en_GB.po, po/es.po,
    po/fi.po, po/fr.po, po/he.po, po/hu.po, po/id.po, po/it.po,
    po/ja.po (new), po/nb.po, po/nl.po, po/pl.po, po/pt_BR.po, po/pt.po,
    po/ru.po, po/sk.po, po/sl.po, po/sr.po, po/sv.po, po/tl.po,
    po/ur.po (new), po/zh_CN.po
  - thanks to all contributors: https://translations.launchpad.net/ufw
* allow multiple interface matching via '+'. Thanks to Oliver Hookins.
  (LP: #611838)
* allow application profiles to start with a digit (LP: #663632)
* don't traceback in show listening when a rule references a non-existent
  interface (LP: #840500)

File Description Downloads
download icon ufw-0.31.tar.gz (md5, sig) 0.31 release 89
last downloaded 8 weeks ago
Total downloads: 89

0.30.1 release from the 0.30 series released 2011-03-22

Release information
Release notes:

ufw 0.30.1 is a bugfix release which adds python 2.7 support, man page updates and various refinements to the default IPv6 policy.

Changelog:

  * allow for python 2.7 (verified to work with python 2.7.1)
  * fix improper display of error messages. Patch thanks to Serguey Basalaev (LP: #580032)
  * profiles/ufw-mailserver: remove Postfix reference
  * fix typo in warning (LP: #637876)
  * fix manpage reference to /etc/default/ufw (Closes: 601111)
  * mention quoting of application profile names with spaces (LP: #715676)
  * fix man-page hyphenation in ufw.8
  * run_tests.sh: adjust PATH if iptables can't be found
  * adjust /etc/ufw/sysctl.conf to have commented out entries for ipv6 privacy addressing
  * profiles/ufw-fileserver: add svnserve profile (LP: #501140)
  * use 'UFW AUDIT INVALID' for INVALID packets in medium and higher
  * DROP packets with RH0 headers (LP: #740249)
  * update README to discuss the default ruleset
  * only allow mDNS multicast (LP: #740256)
  * allow ping replies from multicast (LP: #720605)

File Description Downloads
download icon ufw-0.30.1.tar.gz (md5, sig) 0.30.1 release 1,811
last downloaded 7 days ago
Total downloads: 1,811

0.30 release from the 0.30 series released 2010-08-28

Release information
Release notes:

ufw 0.30 adds an example Upstart script, several new reports, many logging fixes, an example rsyslog configuration, delete by rule number, better IPv6 support, and many other bug fixes.

Changelog:

  * add example Upstart script
  * error out when filesystem is read-only (LP: #430053)
  * catch exception if can't find parent pid when refreshing application profiles (LP: #424528)
  * update manpage to clarify 'show' command (LP: #453083)
  * update setup.py to use sys.executable and cleanup required binaries
  * update test suite
    - better handle iptables < 1.4 (tested with 1.3.8)
    - allow alternate interpreter
  * write loglevel rules to user rules (LP: #459925)
  * properly log INVALID packets for medium and higher (LP: #480789)
  * Makefile: clean up POTFILES target
  * generate binary translations in setup.py rather than shipping them in source (LP: #490366)
  * src/ufw-init-functions: don't run 'already started' check unless ENABLED. This should improve boot speed such that iptables is not needlessly called which results in an unneeded modprobe.
  * manpage fixes thanks to Loic Minier
  * set "default" sysctl values before "all" values. Thanks to Loic Minier
  * clean up parser to make it easier to add new functionality
  * don't log LIMIT rules if logging is off (LP: #512131)
  * fix for noisy services getting logged. Added new 'skip-to-policy' chains that are now used in after*.rules (LP: #488032)
  * add rsyslog example configuration and update README
  * add reset command (LP: #436608)
  * add --force option to enable (LP: #496267)
  * decode("utf-8") some strings in 'status' to correct formatting errors with with multibyte characters
  * add more reports
  * add delete by rule number (LP: #367571)
  * add support for IPv6 tunnels and 6to4 (LP: #502655)
  * fix occasional ufw errors during boot with upstart (/tmp not available) (LP: #521359)
  * normalize IPv6 addresses to standard python shortened notation
  * follow iptables and don't require that an interface ends with a number (LP: #568877)
  * really allow IPv6 neighbor discovery (LP: #611982)
  * add support for IPSec via the esp and ah protocols (LP: #606997)
  * update check-requirements to not check ip6tables modules needed for the 'limit' command
  * import updated Launchpad translations:
    - po/ar.po, po/bg.po, po/ca.po, po/cs.po, po/da.po, po/de.po, po/el.po,
      po/en_AU.po, po/en_GB.po, po/es.po, po/fi.po, po/fr.po, po/he.po,
      po/hu.po, po/id.po, po/it.po, po/nb.po, po/nl.po, po/pl.po, po/pt_BR.po,
      po/pt.po, po/ru.po, po/sk.po, po/sl.po, po/sr.po, po/sv.po, po/tl.po,
      po/zh_CN.po
    - thanks to all contributors: https://translations.launchpad.net/ufw

File Description Downloads
download icon ufw-0.30.tar.gz (md5, sig) 0.30 release 1,091
last downloaded 8 weeks ago
Total downloads: 1,091

110 of 18 releases