[Announce] NuFW 0.9.0 available

[Announce] NuFW 0.9.0 available

[Eric Leblond]

[-- Attachment #1: Type: text/plain, Size: 1288 bytes --]

We are pleased to announce the first release of the NuFW development
branch : NuFW 0.9.0.

It features quite a lot of brand new things. The most meaningful are the
protocol version 2 :

* A more evolutive protocol which will be able to support features like
application announcement (and thus per application filtering)
* Authentication is performed via SASL
* Encryption is performed via TLS
* It now uses username and not userid

and the cache system :

* User request is only performed at the authentication stage
* A cache has been added at the acl decision stage. Benches show
dramatically increased performances at no security cost (See
http://www.nufw.org/proto2_and_more.html for results).

You can expect more as next 0.9 releases will follow :

* Encryption of communications between nufw and nuauth. This is very
soon.
* Support for several Nufw gateways on nuauth.
* Application match support for even finer filtering control.
* Full IPv6 support.

0.9.0 should not be considered stable, as many deep rewrites have
occured (and are still to occur) in the code as well as in structures.
However, it is available for testing, benching, etc. As usual,
bugreports, wishes and comments will be welcome!


Happy user filtering,

The NuFW team.


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]