Artikelbeschreibung:
SmoothWall is a family of Internet security products, designed to defend your users and your network from external attacks. SmoothWall Express is based on the Linux operating system. Linux is the ideal choice for security systems; it is well proven, secure, highly configurable and freely available as open source code. SmoothWall includes a hardened subset of the GNU/Linux operating system, so there is no separate OS to install. Designed for ease of use, SmoothWall is configured via a web-based GUI, and requires absolutely no knowledge of Linux to install or use.
New features and fixes relative to the previous Express 3.0 beta, Degu
- Final changes to the theme graphics to incorporate the polar bear siloette, including the bootscreen.
- Added missing page descriptions.
- Added support for empty hostnames in Dynamic DNS pages.
- MySmoothWall integration.
- Build system: Now uses hosts resolv.conf instead of Makefile variables.
- Runtime kernel now has DMA support for all supported IDE chipsets. Added bridging module (but no tools) for people who want to work with bridging.
- Various version bumps (clamav, pciutils, ethotool).
- Added ISC DHCP integration option to dnsmasq, but no UI.
- Fixed timed access rules so they are applied to proxy access too.
- Added support for setting the NTP servers that the DHCP server will supply to clients. DHCP server now marks itself as "authorative".
- Fixes to logrotate.
- Cycling networking interfaces now should work as expected.
- Fixed type in multicast block advanced networking smoothd code so it works.
- Fixed problem with migration from 2.0 which could result in bad permissions on settings files.
- Hostname can now only contain valid chars to stop the situation where you could set a hostname that would be incompatible to squid.
- Minor fixes to the networking probe setup code.
- Added support for the VT8237A VIA SATA chip.
- Added NTTP over SSL and SMTP over SSL to the Email and News port list.
- Updated autorun HTML page so it looks supercool.
- 5 minute "stayup" should now properly reboot the smoothie.
- ISO now contains the install manual.
- Swap sized according to the amount of RAM.
- Fix for conflict between RED DHCP and PURPLE.
- VPN should now show as running on the status page.
- Widended setup password entry from 20 to 25 chars.
- Added support for more gigabit nics.
- Only 5 realtime graphs/bars shown to stop browser meltdown.
- IM proxy should now support MSN 7.5 and Messenger Live.
- Added Conexant ADSL PCI support.
- Fixed UPnP support by switching to miniunpd.
- Online help and glossary is now complete.
- Fixed problems with Editing port-based rules.
- The "Other" system log viewer has been renamed "System" logs.
- Mail log viewer should now work properly.
- Fixed missing setup user's password "hole" and made shadow file properly match user list.
- Removed un-used files and debug messages etc. Cleaned up smoothd plugins so they look into settings files instead of using silly touch files.
- NTP now listens on PURPLE.
- Dynamic DNS should work again.
- Slashes now allowed in PPP usernames and passwords to fix problems with some ISPs.
- Cleanups of install and setup code. Also changed probing so it will not re-probe from the top of the list after adding a NIC.
- Low-spec support is fixed. We've compiled and tested Sammy on a P166(MMX!) with 64meg of RAM. To avoid confusion, the ISO filename and internal archictecture for 32bit machines is now called i386.
- Registration on PPP machines is fixed.
- Snort restarting on PPP machines is fixed.
- Syncing SpeedTouches on boot should work now.
- Problems with some SCSI cards should be fixed (also: some kernel memory is saved on IDE machines cos unused driver parts are not loaded anymore).
- Kernel is updated to 2.6.16.53.
- Smoothie beeps again! Also added EHCI USB, and TUN/TAP modules, but neither are ever loaded at present.
New features relative to the previous Express 3.0 alpha, Koala
- 64bit support - additional builds for 64bit Intel and AMD chips.
- New realtime traffic graph shows traffic bandwidth usage over time (AJAX).
- Smoothd fully integrated, increasing the speed of the web interface.
- Outbound filtering completed.
- Portforward and other networking pages now use the new service list controls.
- Installer now supports USB keyboards and CDROMS, making it possible to install Smoothie Express on "legacy-free" hardware.
- Per-IP address traffic statistics collection in all traffic stats pages - you can now view weekly, monthly, etc totals for specific internal IPs, or see which local IP is using the most bandwidth, in real-time.
- The interface page now functions, at least as well as the setup program.
- Now includes a POP3 proxy with support for Anti-Virus using ClamAV.
- Online validation using javascript to show input validity before the Add and Save buttons have been pressed.
- Many core components have been version-bumped to the latest versions for improved security and reliability.
- Tables of data are now sortable.
- Can update snort rules using sourcefire's "Oink code" mechanism.
- Comments can be included in portforwards and similar listed items.
- Quality-of-Service (QoS) support for traffic-shaping and management - nice and easy to use but powerful, can traffic shape Peer-to-Peer traffic.
- Can now DROP bad traffic instead of REJECTing it.
- OpenSWAN now working reliably.
- SIP proxy support using siproxd, with transparent mode.
- Protection-level profile selector at install time can be used to pre-configure default settings.
- Timed-access feature for allowing or blocking access to a list of IPs or subnets based on time of day and day of the week.
New features relative to the previous Express 3.0 alpha, Grizzly
- IM proxy with logging and filtering abilities (MSN/AIM/ICQ/Yahoo).
- SATA/SCSI support.
- Streamlined installer/setup.
- GREEN is probed with the other NICs now so it is possible to replace GREEN.
- Smoothd privileged deamon (although only a few things are utilising it still).
- Firewall log viewer looks much nicer and has some AJAX coolness.
- Hopefully working BeWAN and openswan.
- Realtime traffic bars.
- New update mechanism which can download and install all pending updates with a single click.
Other new features relative to Express 2.0
- Based upon the latest (at least at the time of building) 2.6 kernel.
- Brand new even prettier theme. The polar bear is back!
- Includes many new NIC drivers that are in 2.6.
- Brand new update system - updates are downloaded directly onto the smoothie itself instead of going via the desktop browser.
- NTP service for the local network.
- Local hosts list that can be served through the DNS proxy.
- Replacement traffic stats page.
- SIP NAT support (experimental!)
- Many internal changes to make the code more organised and easier to work with.
- Jazzed up control page.
- Easier to use log viewers with Google-style pagination.
Known Problems
Only one known.
- USB ISDN support is broken.
