File dansguardian.changes of Package dansguardian

Overview Repositories Revisions Requests Users Attributes Meta

File dansguardian.changes of Package dansguardian

-------------------------------------------------------------------
Wed Feb 15 19:30:23 UTC 2012 - lars@linux-schulserver.de

- update to 2.12.0.0 (alpha):
  + Search term filtering
  + POST data scanning
  + ClamAV scanner removed (direct library usage, not ClamD)
  + "KavAV" scanner removed (direct library usage, not KavD)
  + Fix crash on logging very long URLs
  + Per-group PICS settings
  + Option to use a specific blocked response for Flash
    (".swf" URLs; "application/x-shockwave-flash" MIME type)
  + HTTPHeader bug fixes re. persistent connection detection,
    crash in some (unknown) circumstances when trying to tunnel 
    POST data
  + Added per-room-blocking.
  + Fixed a very old problem with gentle restarts where DG would fail 
    to release the RAM for the first set of config loaded.  
    This was very noticeable on systems with many groups.
  + Added the ability to have DG listen on more than one port and 
    to use a different authentication plugin on each port.  
    However, some combinations are just not physically possible - 
    for example basic auth (proxy auth) won't mix with other 
    authentication methods.
  + Added transparent NTLM authentication, however to be useful 
    needs an authentication daemon and daemon-aware, NTLM-enabled 
    web server. (read source code for how to use it)
  + Added experimental SSL MITM. (read source code for how to use it)
  + Added experimental SSL certificate checking. (read source code 
    for how to use it)
  + Added patch by Massimiliano Hofer to add Avast! support.
  + Tidied up licensing notices and removed some email addresses.
  + Support individual log items up to 32KB in length, which may 
    require multiple calls to getLine to read in.
- refreshed patches - now only the following exist:
  + dansguardian-clamdsocket.patch (fix path to clamd socket on 
    openSUSE)
  + dansguardian-commandlinescan.patch (add missing include)
  + dansguardian-ntlm.patch (add mssing include)
- create and use 'dansguardian' as proxy user and group to improve
  security
- added rpmlintrc (for user/group)
- enabled ICAP AV server content scanner
- enabled support for command-line content scanners
- enabled logging a backtrace when a segmentation fault occurs
- built with -fno-strict-aliasing
- use try-restart in logrotate script to avoid a running dansguardian
  if the user disabled the daemon
- requiring clamav during build is not needed any more: removed

-------------------------------------------------------------------
Thu Apr  8 12:05:24 UTC 2010 - john@redux.org.uk

- Disable libclamav linkage for all but SUSE >= 11.1 and Fedora.
- Disable %preun and %postun for all but SUSE.

-------------------------------------------------------------------
Sat Mar 27 20:21:28 UTC 2010 - john@redux.org.uk

- Updated spec file to build for Fedora and RHEL/CentOS.
- Added --enable-clamd option, as an alternative to libclamav
 usage.
- Added a patch to enable ClamAV support for ClamAV versions
 0.95 or later.
- Added a patch to add a required #include to fix the build on
 Fedora.
- Added separate init scripts for Fedora/Red Hat and a generic
 SysV init script (from the upstream package) for all others.

-------------------------------------------------------------------
Tue Oct 13 11:06:44 UTC 2009 - chris@computersalat.de

- cp over from Education
- update to 2.10.1.1
  o Add "originalip" option to dansguardian.conf, for determining
    the original destination IP in transparent proxy set-ups, and
    ensuring that the destination domain of the request resolves to
    that IP.  This can help to address a particular transparent
    proxy security vulnerability (US-CERT VU#435052), but because of
    certain limitations - only implemented on Linux/Netfilter;
    potential breakage of websites using round-robin DNS - the code
    is not enabled by default.  Enable by passing "--enable-orig-ip"
    to the configure script.
  o Fix a crash which could occur when dealing with simultaneous
    incoming connections in configurations using more than one
    listening socket.
  o Fix a crash when checking time limits on item lists.
  o Fix potential usage of uninitialised memory during phrase
    filtering.
- DansGuardian 2.10.0.3 - stable
  o uClibc++ compilation patch from Natanael Copa.
  o Fix crash on exit when running out of memory during phrase tree
    preparation, from Victor Stinner.
  o Clean up destructors for various objects, removing code duplication
    with reset() methods.
  o Compilation fixes from Jeffrey A. Young.
  o Better handling of whitespace (tab characters) in configuration files.
  o Fix HTTPS access for unauthenticated users when using basic or NTLM
    authentication plugins.
  o Reload list files on soft restart if cached (".processed") files have
    been updated directly, from Harry Mason.
  o Chop carriage return off useragent strings when "loguseragent" is
    enabled.
  o Don't force contents of dansguardianf*.conf files to lower-case on
    loading, so as not to destroy the case of group names.
  o Make temporary bypass cookies valid for subdomains of the original
    bypassed domain, including stripping "www.".
- DansGuardian 2.10.0.2 - stable
  o Fix persistent connection detection to resolve issues with HTTP 1.1
    browsers (Firefox), NTLM authentication and HTTPS websites.
  o Change supported syntax for blocking HTTPS site access by IP to match
    that documented in the default bannedsitelist (use "*ips", as
    documented, NOT "**ips").
- DansGuardian 2.10.0.1 - stable
  o Improve malformed URL detection (dc2008.de no longer incorrectly
    classed as malformed).
  o Improve persistent connection detection, correcting some situations in
    which DG would return a blank page to browsers.
  o Updated "proxies" weighted phrase list.
  o Updated Chinese Big-5 messages file from Vicente Chua.
- spec mods
  o change Requires from squid to http_proxy
  o change Requires logrotate to Recommends logrotate
  o always build with clamav for opensuse
  o cleanup
    * TAGS
    * configure
  o fix fdupes for suse_version > 1100
  o Replaced ChangeLog with history.txt to doc
  o use of name macro

-------------------------------------------------------------------
Sun Oct 19 00:23:30 CEST 2008 - lrupp@suse.de

- improve the init-script to provide more LSB options
- add fix_header.patch from e.kunig@home.nl (see bnc#436726)
- separate changelog
- use insserv macros in %%post and %%postun
- enable pcre, enable fancydm, enable trickledm, enable email 
- use fdupes to link some identical language files
- remove unneeded scripts

-------------------------------------------------------------------
Thu Oct 16 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org>  - 2.10

- Updated to upstream declared stable version 2.10

-------------------------------------------------------------------
Sat Sep 20 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org>  - 2.9.9.8

- Updated to version 2.9.9.8

-------------------------------------------------------------------
Tue Aug 19 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org>  - 2.9.9.7

- Updated to version 2.9.9.7

-------------------------------------------------------------------
Wed Jun 11 00:00:00 CEST 2008 Wade Berrier  <wberrier@gmail.com>  - 2.9.9.5

- patch to be able to build with gcc 4.3 (on opensuse 11.0)

-------------------------------------------------------------------
Tue Jun 10 00:00:00 CEST 2008 Wade Berrier  <wberrier@gmail.com>  - 2.9.9.5

- Remove $time from Required-Start in .init script
  (allows /etc/init.d/dansguardian to be started automatically
   on suse 11.0)

-------------------------------------------------------------------
Mon Jun 09 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org>  - 2.9.9.5

- Update to version 2.9.9.5

-------------------------------------------------------------------
Fri May 30 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org> - 2.9.9.4

- Update to 2.9.9.4

-------------------------------------------------------------------
Sat Mar 22 00:00:00 CEST 2008 Wade Berrier <wberrier@gmail.com> - 2.9.9.3

- Fix up and simplify dansguardian.init script
- Remove additional squid_DG script and only use
  dansguardian.init script for start/stop

-------------------------------------------------------------------
Tue Mar 04 00:00:00 CEST 2008 Don Vosburg <don@vosburgs.org> - 2.9.9.3

- Update to 2.9.9.3
- Added additional documentation files

-------------------------------------------------------------------
Tue Jan 09 00:00:00 CEST 2008 Wade Berrier <wberrier@gmail.com> - 2.9.9.2

- Disable clamav on 10.3 since an updated clamav in updates
  requires a in .so version.

-------------------------------------------------------------------
Tue Jan 08 00:00:00 CEST 2008 Wade Berrier <wberrier@gmail.com> - 2.9.9.2

- enable clamd support for all distros.  Build with clamav on
  10.3 (it's the only distro that has a new enough clamav version)
- spec file whitespace cleanup
- don't generate exceptionfileurllist anymore, since it is
  included in 2.9.9.2

-------------------------------------------------------------------
Mon Dec 31 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.9.2

- Update to latest 2.9.9.2

-------------------------------------------------------------------
Wed Oct 10 00:00:00 CEST 2007 Wade Berrier <wberrier@gmail.com>

- add empty exceptionfileurllist so dansguardian will run

-------------------------------------------------------------------
Thu Oct 04 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.9.1

- Updated to latest 2.9.9.1 code

-------------------------------------------------------------------
Thu Jun 07 00:00:00 CEST 2007 Wade Berrier <wberrier@gmail.com> - 2.9.8.5

- convert dansguardian.logrotate to unix format using dos2unix.
  logrotate apparently cares.

-------------------------------------------------------------------
Wed May 30 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.5

- Added requirements for coreutils (for chown) and squid

-------------------------------------------------------------------
Thu May 24 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.5

- Added ntlm support

-------------------------------------------------------------------
Thu Apr 12 00:00:00 CEST 2007 Wade Berrier <wberrier@gmail.com> - 2.9.8.5

- Add logrotate script.  Make sure /etc/ files are not listed
  twice.

-------------------------------------------------------------------
Sat Apr 07 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.5

- Added config file designation to avoid overwriting configs

-------------------------------------------------------------------
Fri Apr 06 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.5

- Updated to 2.9.8.5

-------------------------------------------------------------------
Sat Jan 27 00:00:00 CEST 2007 Don Vosburg <don@vosburgs.org> - 2.9.8.2

- Updated to 2.9.8.2
- Fixed pid file and log dir issues

-------------------------------------------------------------------
Mon Dec 18 00:00:00 CEST 2006 Don Vosburg <don@vosburgs.org> - 2.9.8.1

- Updated to release 2.9.8.1, added to openSUSE build service

-------------------------------------------------------------------
Sat Oct 23 00:00:00 CEST 2004 Don Vosburg <don@vosburgs.org> - 2.8.0.3-1

- Updated to release 2.8.0.3

-------------------------------------------------------------------
Fri Jul 30 00:00:00 CEST 2004 Dag Wieers <dag@wieers.com> - 2.8.0.2-1

- Updated to release 2.8.0.2.

-------------------------------------------------------------------
Wed Jul 21 00:00:00 CEST 2004 Dag Wieers <dag@wieers.com> - 2.8.0-1

- Updated to release 2.8.0-0.

-------------------------------------------------------------------
Thu Apr 15 00:00:00 CEST 2004 Dag Wieers <dag@wieers.com> - 2.6.1.13-1

- Updated to release 2.6.1-13.

-------------------------------------------------------------------
Fri Mar 26 00:00:00 CEST 2004 Dag Wieers <dag@wieers.com> - 2.6.1.12-1

- Initial package. (using DAR)

Places

File dansguardian.changes of Package dansguardian

Places