Releases: rfxn/advanced-policy-firewall
Releases · rfxn/advanced-policy-firewall
1.7.6-3
1.7.6-2
1.7.6-1
- 1.7.6-1 | Jun 18 2019:
[New] add mitigation options for TCP SACK Panic vulnerability
SYSCTL_TCP_NOSACK and BLK_TCP_SACK_PANIC added to conf.apf
https://access.redhat.com/security/vulnerabilities/tcpsack
[Change] updated autoconf template
[Change] ignore value of BLK_TCP_SACK_PANIC when SYSCTL_TCP_NOSACK is set
[Change] make init script LSB compliant for use with systemd; pr #26
[Fix] README typos; pr #28
[Fix] flush ip6tables rules on stop/flush if USE_IPV6 enabled; pr #28
[Fix] only the first nameserver in resolv.conf would be whitelisted when
RESV_DNS_DROP is set enabled; issue #25
[Fix] change ipv4.ip_local_port_range to not emmit errors ref:
Marco Padovan
https://access.redhat.com/solutions/2887631
https://www.spinics.net/lists/netdev/msg330895.html