File dansguardian.changes of Package dansguardian
-------------------------------------------------------------------
Wed Feb 15 19:30:23 UTC 2012 - lars@linux-schulserver.de
- update to 2.12.0.0 (alpha):
+ Search term filtering
+ POST data scanning
+ ClamAV scanner removed (direct library usage, not ClamD)
+ "KavAV" scanner removed (direct library usage, not KavD)
+ Fix crash on logging very long URLs
+ Per-group PICS settings
+ Option to use a specific blocked response for Flash
(".swf" URLs; "application/x-shockwave-flash" MIME type)
+ HTTPHeader bug fixes re. persistent connection detection,
crash in some (unknown) circumstances when trying to tunnel
POST data
+ Added per-room-blocking.
+ Fixed a very old problem with gentle restarts where DG would fail
to release the RAM for the first set of config loaded.
This was very noticeable on systems with many groups.
+ Added the ability to have DG listen on more than one port and
to use a different authentication plugin on each port.
However, some combinations are just not physically possible -
for example basic auth (proxy auth) won't mix with other
authentication methods.
+ Added transparent NTLM authentication, however to be useful
needs an authentication daemon and daemon-aware, NTLM-enabled
web server. (read source code for how to use it)
+ Added experimental SSL MITM. (read source code for how to use it)
+ Added experimental SSL certificate checking. (read source code
for how to use it)
+ Added patch by Massimiliano Hofer to add Avast! support.
+ Tidied up licensing notices and removed some email addresses.
+ Support individual log items up to 32KB in length, which may
require multiple calls to getLine to read in.
- refreshed patches - now only the following exist:
+ dansguardian-clamdsocket.patch (fix path to clamd socket on
openSUSE)
+ dansguardian-commandlinescan.patch (add missing include)
+ dansguardian-ntlm.patch (add mssing include)
- create and use 'dansguardian' as proxy user and group to improve
security
- added rpmlintrc (for user/group)
- enabled ICAP AV server content scanner
- enabled support for command-line content scanners
- enabled logging a backtrace when a segmentation fault occurs
- built with -fno-strict-aliasing
- use try-restart in logrotate script to avoid a running dansguardian
if the user disabled the daemon
- requiring clamav during build is not needed any more: removed
-------------------------------------------------------------------
Thu Apr 8 12:05:24 UTC 2010 - john@redux.org.uk
- Disable libclamav linkage for all but SUSE >= 11.1 and Fedora.
- Disable %preun and %postun for all but SUSE.
-------------------------------------------------------------------
Sat Mar 27 20:21:28 UTC 2010 - john@redux.org.uk
- Updated spec file to build for Fedora and RHEL/CentOS.
- Added --enable-clamd option, as an alternative to libclamav
usage.
- Added a patch to enable ClamAV support for ClamAV versions
0.95 or later.
- Added a patch to add a required #include to fix the build on
Fedora.
- Added separate init scripts for Fedora/Red Hat and a generic
SysV init script (from the upstream package) for all others.
-------------------------------------------------------------------
Tue Oct 13 11:06:44 UTC 2009 - chris@computersalat.de
- cp over from Education
- update to 2.10.1.1
o Add "originalip" option to dansguardian.conf, for determining
the original destination IP in transparent proxy set-ups, and
ensuring that the destination domain of the request resolves to
that IP. This can help to address a particular transparent
proxy security vulnerability (US-CERT VU#435052), but because of
certain limitations - only implemented on Linux/Netfilter;
potential breakage of websites using round-robin DNS - the code
is not enabled by default. Enable by passing "--enable-orig-ip"
to the configure script.
o Fix a crash which could occur when dealing with simultaneous
incoming connections in configurations using more than one
listening socket.
o Fix a crash when checking time limits on item lists.
o Fix potential usage of uninitialised memory during phrase
filtering.
- DansGuardian 2.10.0.3 - stable
o uClibc++ compilation patch from Natanael Copa.
o Fix crash on exit when running out of memory during phrase tree
preparation, from Victor Stinner.
o Clean up destructors for various objects, removing code duplication
with reset() methods.
o Compilation fixes from Jeffrey A. Young.
o Better handling of whitespace (tab characters) in configuration files.
o Fix HTTPS access for unauthenticated users when using basic or NTLM
authentication plugins.
o Reload list files on soft restart if cached (".processed") files have
been updated directly, from Harry Mason.
o Chop carriage return off useragent strings when "loguseragent" is
enabled.
o Don't force contents of dansguardianf*.conf files to lower-case on
loading, so as not to destroy the case of group names.
o Make temporary bypass cookies valid for subdomains of the original
bypassed domain, including stripping "www.".
- DansGuardian 2.10.0.2 - stable
o Fix persistent connection detection to resolve issues with HTTP 1.1
browsers (Firefox), NTLM authentication and HTTPS websites.
o Change supported syntax for blocking HTTPS site access by IP to match
that documented in the default bannedsitelist (use "*ips", as
documented, NOT "**ips").
- DansGuardian 2.10.0.1 - stable
o Improve malformed URL detection (dc2008.de no longer incorrectly
classed as malformed).
o Improve persistent connection detection, correcting some situations in
which DG would return a blank page to browsers.
o Updated "proxies" weighted phrase list.
o Updated Chinese Big-5 messages file from Vicente Chua.
- spec mods
o change Requires from squid to http_proxy
o change Requires logrotate to Recommends logrotate
o always build with clamav for opensuse
o cleanup
* TAGS
* configure
o fix fdupes for suse_version > 1100
o Replaced ChangeLog with history.txt to doc
o use of name macro
-------------------------------------------------------------------
Sun Oct 19 00:23:30 CEST 2008 - lrupp@suse.de
- improve the init-script to provide more LSB options
- add fix_header.patch from e.kunig@home.nl (see bnc#436726)
- separate changelog
- use insserv macros in %%post and %%postun
- enable pcre, enable fancydm, enable trickledm, enable email
- use fdupes to link some identical language files
- remove unneeded scripts
-------------------------------------------------------------------
Thu Oct 16 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org> - 2.10
- Updated to upstream declared stable version 2.10
-------------------------------------------------------------------
Sat Sep 20 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org> - 2.9.9.8
- Updated to version 2.9.9.8
-------------------------------------------------------------------
Tue Aug 19 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org> - 2.9.9.7
- Updated to version 2.9.9.7
-------------------------------------------------------------------
Wed Jun 11 00:00:00 CEST 2008 Wade Berrier <wberrier@gmail.com> - 2.9.9.5
- patch to be able to build with gcc 4.3 (on opensuse 11.0)
-------------------------------------------------------------------
Tue Jun 10 00:00:00 CEST 2008 Wade Berrier <wberrier@gmail.com> - 2.9.9.5
- Remove $time from Required-Start in .init script
(allows /etc/init.d/dansguardian to be started automatically
on suse 11.0)
-------------------------------------------------------------------
Mon Jun 09 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org> - 2.9.9.5
- Update to version 2.9.9.5
-------------------------------------------------------------------
Fri May 30 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org> - 2.9.9.4
- Update to 2.9.9.4
-------------------------------------------------------------------
Sat Mar 22 00:00:00 CEST 2008 Wade Berrier <wberrier@gmail.com> - 2.9.9.3
- Fix up and simplify dansguardian.init script
- Remove additional squid_DG script and only use
dansguardian.init script for start/stop
-------------------------------------------------------------------
Tue Mar 04 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org> - 2.9.9.3
- Update to 2.9.9.3
- Added additional documentation files
-------------------------------------------------------------------
Tue Jan 09 00:00:00 CEST 2008 Wade Berrier <wberrier@gmail.com> - 2.9.9.2
- Disable clamav on 10.3 since an updated clamav in updates
requires a in .so version.
-------------------------------------------------------------------
Tue Jan 08 00:00:00 CEST 2008 Wade Berrier <wberrier@gmail.com> - 2.9.9.2
- enable clamd support for all distros. Build with clamav on
10.3 (it's the only distro that has a new enough clamav version)
- spec file whitespace cleanup
- don't generate exceptionfileurllist anymore, since it is
included in 2.9.9.2
-------------------------------------------------------------------
Mon Dec 31 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.9.2
- Update to latest 2.9.9.2
-------------------------------------------------------------------
Wed Oct 10 00:00:00 CEST 2007 Wade Berrier <wberrier@gmail.com>
- add empty exceptionfileurllist so dansguardian will run
-------------------------------------------------------------------
Thu Oct 04 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.9.1
- Updated to latest 2.9.9.1 code
-------------------------------------------------------------------
Thu Jun 07 00:00:00 CEST 2007 Wade Berrier <wberrier@gmail.com> - 2.9.8.5
- convert dansguardian.logrotate to unix format using dos2unix.
logrotate apparently cares.
-------------------------------------------------------------------
Wed May 30 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.5
- Added requirements for coreutils (for chown) and squid
-------------------------------------------------------------------
Thu May 24 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.5
- Added ntlm support
-------------------------------------------------------------------
Thu Apr 12 00:00:00 CEST 2007 Wade Berrier <wberrier@gmail.com> - 2.9.8.5
- Add logrotate script. Make sure /etc/ files are not listed
twice.
-------------------------------------------------------------------
Sat Apr 07 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.5
- Added config file designation to avoid overwriting configs
-------------------------------------------------------------------
Fri Apr 06 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.5
- Updated to 2.9.8.5
-------------------------------------------------------------------
Sat Jan 27 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.2
- Updated to 2.9.8.2
- Fixed pid file and log dir issues
-------------------------------------------------------------------
Mon Dec 18 00:00:00 CEST 2006 Don Vosburg <don@vosburgs.org> - 2.9.8.1
- Updated to release 2.9.8.1, added to openSUSE build service
-------------------------------------------------------------------
Sat Oct 23 00:00:00 CEST 2004 Don Vosburg <don@vosburgs.org> - 2.8.0.3-1
- Updated to release 2.8.0.3
-------------------------------------------------------------------
Fri Jul 30 00:00:00 CEST 2004 Dag Wieers <dag@wieers.com> - 2.8.0.2-1
- Updated to release 2.8.0.2.
-------------------------------------------------------------------
Wed Jul 21 00:00:00 CEST 2004 Dag Wieers <dag@wieers.com> - 2.8.0-1
- Updated to release 2.8.0-0.
-------------------------------------------------------------------
Thu Apr 15 00:00:00 CEST 2004 Dag Wieers <dag@wieers.com> - 2.6.1.13-1
- Updated to release 2.6.1-13.
-------------------------------------------------------------------
Fri Mar 26 00:00:00 CEST 2004 Dag Wieers <dag@wieers.com> - 2.6.1.12-1
- Initial package. (using DAR)
