Veritech : Network Technology + Innovation

Here is the latest Endian Bugfix Notification

As at 2009-12-15, Endian have released an update for version 2.3 
on Endian Network.

Please note that upgrading 2.3 appliances through Endian Network 
was not possible due to a bug that has been fixed with this 
update release.
All 2.3 appliances must be updated through the GUI of the appliance
itself first.  Once this update has been applied, updates from 
Endian Network will then work.

The following list of changes have been applied:


== FEATURES ==

- HTTP Proxy:
 * now it is possible to define multiple zones as source
   or destination (#2491)

- QoS:
 * now with qos service rules it is possible to define portranges
   with : e.g. 22:100 (#2240)
 * Added bandwith headroom value that removes 4% of traffic to 
   avoid link saturation

- OpenVPN:
 * implemented stacked authentication using authentication modules
 * adds openvpn ldap authentication module

- EMI:
 * added possibility to set debuglevel during runtime
   made emi reloadable


== BUGFIXES ==

- Console:
 * Added options for changing admin/root password again
   (requires to enter the right passwords first)
 * Show green ip by checking "ip addr", useful if the appliance 
   queries dhcp server on first boot hide product if product file 
   is missing

- GUI:
 * performance improvements of menu registration
 * fix i18n handling when language will be change without 
   restarting EMI (#2298)
 * updated jquery to get a working excanvas and flot for ie8 (#1876)
 * interface editor: now concentrator, servicename, reconnection
   timeout and mtu are saved when creating/editing uplink (#2405)
 * now service switch works even if translation contains single or
   double quote (#1412)

- EMI:
 * reorganized emi startup in order to wait before daemonization 
   until all modules are loaded

- Services:
 * now ddns and clamav work again when upstream proxy is used 
 * ipsec: hides debug flags which make pluto crash if enabled 

- Upgrades:
 * many preparations for 2.2 to 2.3 migration of both upgrade and
   after restore of 2.2 backups
 * make upgrades work when called from EN (#2385)
 * endian-client works again using upstream proxy (#2482)
 * pass also stderr to EN actions history (#2386)
 * adds auto-installation/removal of packages in optional channels

- HA:
 * fix slave registration which always said password is wrong 

- Hotspot:
 * infoedit works again and is accessable with hotspot account
   editor user (#2268)
 * added link from hotspot.cgi to account editor gui (#2474)
 * fix wrong redirect to /accounts (#2374)
 * some string fixes and translation changes
 * creating a ticket with the generic api works again (#2462)
 * hotspot login is working with ie again (#2466)
 * import and export of accounts is working again (#2434)
 * hotspot account generator entry is deleted
   correctly (#2445, #2304)
 * hotspot account editor works again (#2446)
 * fixed support for vendor hotspot certificates / domain (#2450)
 * fix hotspot login with handies (#2371)

- Platform:
 * remove /etc/mtab link to /proc, since it is now created by initrd
 * kernel: applied pipe race condition fix
 * python: backport of fix in python2.5: make type cast to unicode 
   call str (#2298)
 * openswan (ipsec): fixes CVE-2009-0790 and CVE-2009-2185

- Products:
 * add snort to 4i products
 * substitute endian firewall icons with endian utm appliance icons

- Backups:
 * fix usb backup which did not work anymore (#2283)
 * fix system un-registration if restoring from backup during
   initial wizard
 * fix GUI not working after restore of 2.2 backup (#2326)

- HTTP Proxy:
 * contentfilter: custom blacklist does not overwrite anymore 
   category configuration (#2300)
 * disable logging per default (#2257)
 * removed wrong () brackets in strings (#2258)
 * transparent source bypass with mac addresses is now working 
 * local user management is now working correctly (#2028, #2349)
 * dynamic sites are cached too (#2199)
 * added temporary quickfix which will start havp as soon as
   there is one dg profile which has havp enabled (#2248)
 * added migration script to migrate from 2.2 to 2.3

- Dashboard:
 * i18n also *all* dashboard strings
 * dashboard works with ie8 (#1876)
 * outgoing / incoming traffic is converted to KB, MB, GB
   and 1000 is used instead of 1024

- DHCP:
 * html entities are decoded before saving the custom conf (#2190)
 * fix only fixed leases option, which caused dhcp not to start 

- Firewall:
 * create the log rules *before* the policy rules (#2290)
 * adds migration module for portfw->dnat
 * sort out lists with empty values, which would explode
   to 'any' in input firewall (#2443)
 * migrate moved firewall config files back in place (#1978)
 * block dhcp requests to firewall not only those from firewall 
 * use ACCEPT as default instead of ALLOW (with IPS) (#2464)

- QoS:
 * fix serviceselector error message (#2295)
 * Added incoming/downstream traffic limiting (#2414)

- SMTP Proxy:
 * now RBL configuration is not set to empty when saving
   with another gui (#2272)
 * open port 25 for every zone for which smtp proxy is enabled 
 * redirect also connections from VPN (#2451)
 * now maximum contentsize is saved (#2431)
 * spam black- and whitelist are saved and applied (#2396)
 * added migration routine for 2.2 to 2.3 migration

- OpenVPN Client:
 * fix crash of openvpnbridge when routing/config is empty (#2454)


      

* For further enquiries, please contact our office.

Veritech Corporation Pty Limited
phone: (02) 6964 5377
email: This e-mail address is being protected from spambots. You need JavaScript enabled to view it
web: www.veritechcorp.com.au