Author: Jamie Strandboge
Revision Date: 2015-08-20 08:34:19 UTC

* New upstream release (LP: #1434525, LP: #1438647, LP: #1155292,
  Closes: 792753). Drop following patches included upstream:
  - 0002-lp1044361.patch
  - 0003-fix-typeerror-on-error.patch
  - 0004-lp1039729.patch
  - 0005-lp1191197.patch
* Merge in Ubuntu packaging:
  - debian/ufw.postinst:
    + drop old reload of policy for upgrades to 0.30.1-2
    + add new ufw[6]-track-forward primary chains on upgrade
  - Install the SysV init and upstart script for both Debian and Ubuntu.
    Debian has upstart too, and in Ubuntu we need the init script for LSB
    dependencies and for systemd. (LP: #1341083)
    + Rename debian/ufw.init.debian to debian/ufw.init
    + Rename debian/ufw.upstart.ubuntu to debian/ufw.upstart
    + Remove all the distro specific code from debian/rules and just call
      dh_installinit (thus removing lsb-release from Build-Depends-Indep).
  - Drop the distro specific logrotate configs, and use the ubuntu one with
    "rotate" instead of "reload" everywhere, as Debian's rsyslog init also
    supports "rotate".
  - Add a systemd unit:
    + Add debian/ufw.service
    + Add dh-systemd build dep.
    + debian/rulles: Call dh_systemd_{enable,start}.
  - Don't include Debian version in the python module version (LP: #1465549)
* debian/copyright: follow copyright-format/1.0
* debian/po/pt_BR.po: add Brazilian Portuguese of debconf templates. Thanks
  to Adriano Rafael Gomes (Closes: 770453)
* update debian/before[6].rules.md5sum
* debian/ufw.lintian-overrides:
  - usr/share/ufw/after.init and before.init are intentionally not
    executable
  - we intentionally do not stop the firewall with init.d script
* debian/control: Build-Depends-Indep on procps (needed by testsuite for
  sysctl)
* debian/ufw.dirs, debian/rules: copy bash completions to
  /usr/share/bash-completion/completions
* debian/rules: run 'make clean' after running the testsuite since the
  testsuite creates a build/ directory not that would be reused
* debian/ufw.postrm: remove after.init and before.init on purge

Author: Jamie Strandboge
Revision Date: 2015-08-20 08:34:19 UTC

* New upstream release (LP: #1434525, LP: #1438647, LP: #1155292,
  Closes: 792753). Drop following patches included upstream:
  - 0002-lp1044361.patch
  - 0003-fix-typeerror-on-error.patch
  - 0004-lp1039729.patch
  - 0005-lp1191197.patch
* Merge in Ubuntu packaging:
  - debian/ufw.postinst:
    + drop old reload of policy for upgrades to 0.30.1-2
    + add new ufw[6]-track-forward primary chains on upgrade
  - Install the SysV init and upstart script for both Debian and Ubuntu.
    Debian has upstart too, and in Ubuntu we need the init script for LSB
    dependencies and for systemd. (LP: #1341083)
    + Rename debian/ufw.init.debian to debian/ufw.init
    + Rename debian/ufw.upstart.ubuntu to debian/ufw.upstart
    + Remove all the distro specific code from debian/rules and just call
      dh_installinit (thus removing lsb-release from Build-Depends-Indep).
  - Drop the distro specific logrotate configs, and use the ubuntu one with
    "rotate" instead of "reload" everywhere, as Debian's rsyslog init also
    supports "rotate".
  - Add a systemd unit:
    + Add debian/ufw.service
    + Add dh-systemd build dep.
    + debian/rulles: Call dh_systemd_{enable,start}.
  - Don't include Debian version in the python module version (LP: #1465549)
* debian/copyright: follow copyright-format/1.0
* debian/po/pt_BR.po: add Brazilian Portuguese of debconf templates. Thanks
  to Adriano Rafael Gomes (Closes: 770453)
* update debian/before[6].rules.md5sum
* debian/ufw.lintian-overrides:
  - usr/share/ufw/after.init and before.init are intentionally not
    executable
  - we intentionally do not stop the firewall with init.d script
* debian/control: Build-Depends-Indep on procps (needed by testsuite for
  sysctl)
* debian/ufw.dirs, debian/rules: copy bash completions to
  /usr/share/bash-completion/completions
* debian/rules: run 'make clean' after running the testsuite since the
  testsuite creates a build/ directory not that would be reused
* debian/ufw.postrm: remove after.init and before.init on purge

Author: Martin Pitt
Revision Date: 2015-03-03 08:05:29 UTC

debian/ufw.service: Add missing DefaultDependencies=no to fix ordering
cycles.

Author: Martin Pitt
Revision Date: 2015-03-03 08:05:29 UTC

debian/ufw.service: Add missing DefaultDependencies=no to fix ordering
cycles.

Author: Martin Pitt
Revision Date: 2014-07-30 15:06:25 UTC

* Install the SysV init and upstart script for both Debian and Ubuntu.
  Debian has upstart too, and in Ubuntu we need the init script for LSB
  dependencies and for systemd. (LP: #1341083)
  - Rename debian/ufw.init.debian to debian/ufw.init
  - Rename debian/ufw.upstart.ubuntu to debian/ufw.upstart
  - Remove all the distro specific code from debian/rules and just call
    dh_installinit.
* Drop the distro specific logrotate configs, and use the ubuntu one with
  "rotate" instead of "reload" everywhere, as Debian's rsyslog init also
  supports "rotate".
* Add a systemd unit:
  - Add debian/ufw.service
  - Add dh-systemd build dep.
  - debian/rulles: Call dh_systemd_{enable,start}.

Author: Martin Pitt
Revision Date: 2014-07-30 15:06:25 UTC

* Install the SysV init and upstart script for both Debian and Ubuntu.
  Debian has upstart too, and in Ubuntu we need the init script for LSB
  dependencies and for systemd. (LP: #1341083)
  - Rename debian/ufw.init.debian to debian/ufw.init
  - Rename debian/ufw.upstart.ubuntu to debian/ufw.upstart
  - Remove all the distro specific code from debian/rules and just call
    dh_installinit.
* Drop the distro specific logrotate configs, and use the ubuntu one with
  "rotate" instead of "reload" everywhere, as Debian's rsyslog init also
  supports "rotate".
* Add a systemd unit:
  - Add debian/ufw.service
  - Add dh-systemd build dep.
  - debian/rulles: Call dh_systemd_{enable,start}.

Author: Jamie Strandboge
Revision Date: 2014-02-28 08:59:13 UTC

* debian/patches/0002-lp1078665.patch: distinguish between v4 and v6 rules
  when both addresses are 'any' (LP: #1078665). This can be dropped with
  0.34 release.
* debian/ufw.postinst:
  - drop old reload of policy for upgrades to 0.30.1-2
  - add new ufw[6]-track-forward primary chains on upgrade
* debian/patches/0003-manpage-hook-path.patch: update locations of hook
  scripts. This can be dropped with 0.34 release.
* debian/patches/0004-add-safe-icmp-to-forward.patch: update before*.rules
  to add safe icmp to ufw-before-forward. This can be dropped with 0.34
  release.
* debian/before[6].rules.md5sum: adjusted for new release

Author: Jamie Strandboge
Revision Date: 2014-02-28 08:59:13 UTC

* debian/patches/0002-lp1078665.patch: distinguish between v4 and v6 rules
  when both addresses are 'any' (LP: #1078665). This can be dropped with
  0.34 release.
* debian/ufw.postinst:
  - drop old reload of policy for upgrades to 0.30.1-2
  - add new ufw[6]-track-forward primary chains on upgrade
* debian/patches/0003-manpage-hook-path.patch: update locations of hook
  scripts. This can be dropped with 0.34 release.
* debian/patches/0004-add-safe-icmp-to-forward.patch: update before*.rules
  to add safe icmp to ufw-before-forward. This can be dropped with 0.34
  release.
* debian/before[6].rules.md5sum: adjusted for new release

Author: Jamie Strandboge
Revision Date: 2013-06-15 07:48:37 UTC

debian/patches/0005-lp1191197.patch: add check for -m rt --rt-type 0
(LP: #1191197)

Author: Jamie Strandboge
Revision Date: 2013-06-15 07:48:37 UTC

debian/patches/0005-lp1191197.patch: add check for -m rt --rt-type 0
(LP: #1191197)

Author: Jamie Strandboge
Revision Date: 2012-12-04 09:28:20 UTC

debian/patches/0004-lp1039729.patch: Skip get_netfilter_capabilities()
with ipv6 if ipv6 is disabled (LP: #1039729)

Author: Jamie Strandboge
Revision Date: 2012-12-04 09:28:20 UTC

debian/patches/0004-lp1039729.patch: Skip get_netfilter_capabilities()
with ipv6 if ipv6 is disabled (LP: #1039729)

Author: Jamie Strandboge
Revision Date: 2012-12-04 07:56:34 UTC

* debian/patches/0004-lp1039729.patch: Skip get_netfilter_capabilities()
  with ipv6 if ipv6 is disabled (LP: #1039729)
* debian/watch: use https instead of http

Author: Jamie Strandboge
Revision Date: 2012-12-04 07:56:34 UTC

* debian/patches/0004-lp1039729.patch: Skip get_netfilter_capabilities()
  with ipv6 if ipv6 is disabled (LP: #1039729)
* debian/watch: use https instead of http

Author: Jamie Strandboge
Revision Date: 2012-09-24 08:52:57 UTC

* debian/patches/0002-lp1044361.patch: move netfilter capabilities checking
  into initcaps(), and call initcaps() only when we need it (LP: #1044361)
* 0003-fix-typeerror-on-error.patch: fix TypeError on error when using zh_CN

Author: Jamie Strandboge
Revision Date: 2012-04-04 12:12:25 UTC

* New upstream release (Closes: 663677, Closes: 625681)
* debian/control: update to standards 3.9.3
* convert to source format 3.0 (quilt)
* 0001-optimize-boot.patch: only read in /etc/ufw/ufw.conf when disabled
* debian/rules: adjust to only install the application profiles when not
  Ubuntu
* debian/po/nl.po: add Dutch translation of debconf templates. Thanks to
  Jeroen Schot (Closes: 658495)
* debian/po/da.po: add Danish translation of debconf templates. Thanks to
  Joe Dalton (Closes: 666557)

Author: Jamie Strandboge
Revision Date: 2011-07-18 17:09:57 UTC

* Merge from Debian unstable. Remaining changes:
  - debian/rules: Don't install the upstream application profiles that are
    shipped with the Debian package.
  - debian/control: use ufw-0.30-oneiric for Vcs-Bzr

Author: Jamie Strandboge
Revision Date: 2011-03-22 12:18:42 UTC

* Merge from Debian unstable. Remaining changes:
  - debian/rules: Don't install the upstream application profiles that are
    shipped with the Debian package.
  - debian/control: use ufw-0.30-natty for Vcs-Bzr

Author: Bilal Akhtar
Revision Date: 2010-11-29 18:49:31 UTC

debian/rules: Don't install the upstream application profiles that
are shipped with the Debian package. (LP: #682811)

Author: Jamie Strandboge
Revision Date: 2010-08-30 16:01:52 UTC

* adjust tests/good/apps/result for change to profiles/ufw-mailserver
  - upstream commit r707

Author: Jamie Strandboge
Revision Date: 2010-03-05 11:03:46 UTC

* debian/postrm: adjust ordering of commands so that NFS mounted root
  filesystems can still access iptables. Thanks to Sebastian J. Bronner
  for discovering the issue and describing the fix. (LP: #524395)
* merge fix from trunk for UnicodeDecodeError in get_status() (LP: #531886)

Author: Jamie Strandboge
Revision Date: 2009-09-23 18:06:56 UTC

* reduce console output when using Upstart so that ufw is quiet when
  ufw is disabled or enabled and no errors
  - src/ufw-init: add add 'quiet' option on start
  - debian/ufw.upstart.ubuntu: use 'quiet' option on start
* Debconf translation updates:
  - Vietnamese (thanks to Clytie Siddall. closes: #547919)

Author: Jamie Strandboge
Revision Date: 2009-01-19 10:32:03 UTC

* debian/postinst: don't stop in runlevels 0 and 6 (LP: #298736)
* don't do symlink check anymore (LP: #317700)
* conf/initscript: don't flush rules on stop when not enabled (LP: #311066)
* formatting of dpkg output incorrect on upgrades (LP: #300726)
* debian/control: update Vcs information

Author: Jamie Strandboge
Revision Date: 2009-01-17 09:04:06 UTC

* debian/postrm: don't fail if iptables or ip6tables fails (LP: #278670)
* debian/postinst: don't stop in runlevels 0 and 6 (LP: #298736)
* don't do symlink check anymore (LP: #317700)
* conf/initscript: don't flush rules on stop when not enabled (LP: #311066)
* debian/control: update Vcs information

Author: Jamie Strandboge
Revision Date: 2009-04-03 10:07:33 UTC

properly return translated string with formatted text (LP: #346563)

Author: Jamie Strandboge
Revision Date: 2009-01-19 10:32:03 UTC

* debian/postinst: don't stop in runlevels 0 and 6 (LP: #298736)
* don't do symlink check anymore (LP: #317700)
* conf/initscript: don't flush rules on stop when not enabled (LP: #311066)
* formatting of dpkg output incorrect on upgrades (LP: #300726)
* debian/control: update Vcs information

Author: Jamie Strandboge
Revision Date: 2008-10-07 09:22:34 UTC

fix typo in error message (LP: #280348)

Author: Jamie Strandboge
Revision Date: 2009-01-17 09:04:06 UTC

* debian/postrm: don't fail if iptables or ip6tables fails (LP: #278670)
* debian/postinst: don't stop in runlevels 0 and 6 (LP: #298736)
* don't do symlink check anymore (LP: #317700)
* conf/initscript: don't flush rules on stop when not enabled (LP: #311066)
* debian/control: update Vcs information

Author: Jamie Strandboge
Revision Date: 2008-03-31 15:21:17 UTC

* don't log noisy services by default (LP: #209709)
* don't log INVALID packets by default (LP: #207156)
* consult /etc/services for protocol (LP: #209845)
  - src/ufw added get_services_proto() and adjust process_args() to use it
  - ufw.8 updated
  - tests added and updated for verification
* bump version