pve-firewall (1.0-24) unstable; urgency=low

  * ipv6: fix ipv6 address normalization
  
  * ndp: use PVEFW-SET-ACCEPT-MARK and move rules further down
  
  * Add radv option to VM options
  
  * only allow icmp names in the destination port field
  
  * fix 901: encode unicode characters in sha digest

 -- Proxmox Support Team <support@proxmox.com>  Wed, 09 Mar 2016 12:13:13 +0100

pve-firewall (1.0-23) unstable; urgency=low

  * Add ndp option to host and VM firewall options (enabled by default)
  
  * Add router-solicitation to NeighborDiscovery macro

 -- Proxmox Support Team <support@proxmox.com>  Fri, 19 Feb 2016 10:18:22 +0100

pve-firewall (1.0-22) unstable; urgency=low

  * allow numeric icmp types
  
  * add DHCPv6 macro
  
  * ipv6 neighbor discovery and solicitation macros
  
  * Add ipv6 macros to the macro list

 -- Proxmox Support Team <support@proxmox.com>  Tue, 16 Feb 2016 11:28:40 +0100

pve-firewall (1.0-21) unstable; urgency=low

  * allow admins to delete security groups

 -- Proxmox Support Team <support@proxmox.com>  Wed, 18 Mar 2015 06:11:24 +0100

pve-firewall (1.0-20) unstable; urgency=low

  * correctly emit ipv6 rules for host firewall

 -- Proxmox Support Team <support@proxmox.com>  Sun, 15 Mar 2015 10:21:20 +0100

pve-firewall (1.0-19) unstable; urgency=low

  * iplement user permissions for Alias class

 -- Proxmox Support Team <support@proxmox.com>  Mon, 02 Mar 2015 06:28:55 +0100

pve-firewall (1.0-18) unstable; urgency=low

  * fix alias lookup

 -- Proxmox Support Team <support@proxmox.com>  Mon, 09 Feb 2015 09:32:03 +0100

pve-firewall (1.0-17) unstable; urgency=low

  * fix restart behavior 

 -- Proxmox Support Team <support@proxmox.com>  Thu, 15 Jan 2015 06:45:58 +0100

pve-firewall (1.0-16) unstable; urgency=low

  * use new Daemon class from pve-common

 -- Proxmox Support Team <support@proxmox.com>  Thu, 18 Dec 2014 09:45:07 +0100

pve-firewall (1.0-15) unstable; urgency=low

  * bug fix: load cluster conf for host rules

 -- Proxmox Support Team <support@proxmox.com>  Fri, 12 Dec 2014 06:33:28 +0100

pve-firewall (1.0-14) unstable; urgency=low

  *  do not use ipset list chains
  
  *  remove preinst script (not needed anymore) 

 -- Proxmox Support Team <support@proxmox.com>  Fri, 05 Dec 2014 13:42:00 +0100

pve-firewall (1.0-13) unstable; urgency=low

  * fix ipset remove order

 -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Nov 2014 12:45:48 +0100

pve-firewall (1.0-12) unstable; urgency=low

  * add preinst script to clear ipset from older installation (because 
    sets cannot be swapped if there type does not match.
  
 -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Nov 2014 08:59:38 +0100

pve-firewall (1.0-11) unstable; urgency=low

  * bug fix: correctly set ipversion for aliases in verify_rule
  
  * save restore commands into files to make debugging 
    easier (/var/lib/pve-firewall/)

 -- Proxmox Support Team <support@proxmox.com>  Fri, 28 Nov 2014 08:04:05 +0100

pve-firewall (1.0-10) unstable; urgency=low

  * add IPv6 support for VMs (hostfw is IPv4 only)

 -- Proxmox Support Team <support@proxmox.com>  Wed, 26 Nov 2014 07:00:29 +0100

pve-firewall (1.0-9) unstable; urgency=low

  * fix max ipset name name length

 -- Proxmox Support Team <support@proxmox.com>  Tue, 14 Oct 2014 16:29:34 +0200

pve-firewall (1.0-8) unstable; urgency=low

  * implement permission

 -- Proxmox Support Team <support@proxmox.com>  Mon, 08 Sep 2014 12:15:21 +0200

pve-firewall (1.0-7) unstable; urgency=low

  * proxy host rule API calls to correct node
  
  * always generate MAC and IP filter rules if firewall is enabled on NIC

 -- Proxmox Support Team <support@proxmox.com>  Thu, 26 Jun 2014 07:12:57 +0200

pve-firewall (1.0-6) unstable; urgency=low

  * ipmlement ipfilter ipsets

 -- Proxmox Support Team <support@proxmox.com>  Thu, 12 Jun 2014 08:37:08 +0200

pve-firewall (1.0-5) unstable; urgency=low

  * remove ipsets when firewall disabled

 -- Proxmox Support Team <support@proxmox.com>  Wed, 04 Jun 2014 08:50:18 +0200

pve-firewall (1.0-4) unstable; urgency=low

  * depend on iptables and ipset

 -- Proxmox Support Team <support@proxmox.com>  Wed, 04 Jun 2014 06:45:33 +0200

pve-firewall (1.0-3) unstable; urgency=low

  * change dh_installinit order (register pvefw-logger before pve-firewall)

 -- Proxmox Support Team <support@proxmox.com>  Wed, 04 Jun 2014 06:24:21 +0200

pve-firewall (1.0-2) unstable; urgency=low

  * add experimental nflog logging daemon

 -- Proxmox Support Team <support@proxmox.com>  Thu, 13 Mar 2014 08:27:01 +0100

pve-firewall (1.0-1) unstable; urgency=low

  * initial package

 -- Proxmox Support Team <support@proxmox.com>  Mon, 03 Mar 2014 08:37:06 +0100