All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog.
- Attribute 'radius_attributes' is no longer valid. Use 'vpn_attributes' instead.
- Fixed inversed inheritance at unnamed aggregate:
- Contained unnamed aggregate is ignored.
- Unnamed aggregate no longer inherits from enclosing unnamed aggregate.
- Attribute 'radius_attributes' in Netspoc syntax has been renamed to 'vpn_attributes'. This version supports both attributes. But support for 'radius_attributes' will be removed in next version.
- Support for vpn_attribute 'client-bypass-protocol' has been added. Example: "vpn_attributes = { client-bypass-protocol = enable; }" is added to group-policy as "client-bypass-protocol enable"
- No longer show warning on redundant owner at dual stack object if owner is inherited from pure IPv4 or pure IPv6 object.
- Attribute 'subnet_of' is ignored at IPv6 part of dual stack object.
- If attribute 'bind_nat' is given at pure IPv6 interface, this attribute is ignored and a warning is shown.
- It is no longer allowed to use only IPv4 part or only IPv6 part of dual stack objects in rules. When displaying such a partial rule in Netspoc-Web, it can't be distinguished from a complete rule.
- Attribute .cluster of a zone now has a dual stack zone as first element if this zone cluster has at least one dual stack zone.
- It is no longer valid to connect IPv4 zone to multiple IPv6 zones or vice versa if a non matching aggregate is defined at this zone which would match both, IPv4 and IPv6 addresses.
- Attributes 'ipv4_only' and 'ipv6_only' are no longer valid at areas. This is needed to prevent creating partial rules.
- If owner is given at dual stack zone this owner is now correctly applied to IPv6 part of this zone.
- Processing error message for thousands of duplicate rules needed too much time, resulting in a seemingly stalled run of program 'netspoc'. This has been fixed.
- Applied multiple fixes for named, non matching dual stack aggregates,
e.g. any:a = { link = network:n; }
- Fixed non determinism in export-netspoc. IPv4 and IPv6 adddresses are now always shown, if avalaible.
- Dual stack property is no longer lost for copied aggregates in zone cluster.
- Applied multiple fixes for unnamed, non matching aggregates,
e.g. any:[network:n]
- If any:[ip=0.0.0.0/0 & network:n] is used in dual stack zone, this no longer implicitly adds an any:[ip6=::/0 & network:n].
- Only if any:[network:n] is used in dual stack zone, this adds IPv4 and IPv6 aggregates.
- any:[network:n] in dual stack zone must not be used in pure IPv4 or IPv6 rule. Use any:[ip=0.0.0.0/0 & network:n] or any:[ip6=::/0 & network:n] instead.
- 'CHANGELOG.md' Newest entries are used to maintain github releases page.
- 'nfpm.yaml' configures program 'nfpm' to build 'rpm' + 'deb' packages.
- Current date and time is used as version number.