I've just uploaded a new Beta update.
Up2Date packages are available from the FTP server and should be
available from the Up2Date server in the next half hour.
Configuration Change Tracking
As promised when I talked about the changes in Confd logging this
additional information is now also made available in WebAdmin.
On the Management overview page you can now see a list of past
WebAdmin sessions with a link to a detailed changelog for each session.
The information in there is rather low level and might not always be
fully comprehensible without deep knowledge of the ASG configuration.
But in most cases you should be able to follow what was changed.
Mapping this information on its WebAdmin representation is something
that might follow later during this Beta.
Also the info button in object lists now show when the object was
last changed and by whom. Again this contains a link to detailed
changelog of that session.
Note that while the Managment overview page only lists WebAdmin
sessions, the "Last Changed" information for individual objects includes
all changes, even if they were done by backend processes (e.g. the
DNS resolver daemon for "DNS Host/Group" objects).
HTTP Reverse Proxy and Web Application Firewall (WAF)
In this beta update you can find a first preview for our
reverse proxy feature for V8. You can find the configuration
at Application Security >> HTTP Reverse Proxy.
Currently you can map virtual servers on the ASG ("Application Servers"
in the interface) onto one or more real HTTP servers in your internal network.
Supported features are load balancing, SSL offloading (clients connect
to ASG with HTTPS, but ASG connects to real server with HTTP) and a
Application Firewall that will scan the HTTP traffic for viruses and
common attacks.
Internally the reverse proxy is an Apache Web Server, using mod_security
and the usual ASG anti-virus engines for the WAF.
Known Issues: Less than the unknown issues [;)] This still has rough
edges all around and is only intended as a first preview.
Localization
This release re-enables localization support in WebAdmin and
End-User Portal. Most localizations are not updated for V8, so
expect a lot of untranslated strings if you use a localized
version. At this point it is more about testing the localization
support than the actual localizations.
Known Issue: If you switch the language in WebAdmin
(Managment >> WebAdmin settings), the reload does not
correctly switch the language since for some reason the backend
process doesn't get correctly killed. Executing "/etc/init.d/httpd restart"
as root on the console will fix this.
Files:
7.890/u2d-sys-7.885-890.tgz.gpg:
U2D size................: 71M (74680743 bytes)
U2D md5sum..............: 451d649014700e496017a9f46706b654
U2D sha1sum.............: 0c39c9ec10168969dfae32e966f4b7aeca95f94a
7.890/asg-7.890-100310-4.iso:
ISO size................: 384M (403003392 bytes)
ISO md5sum..............: 0a5bcf92e0c27832304093c2279137a3
ISO sha1sum.............: 1fba4976716dc6512f8b0fc7c40988c292a22b23
7.890/ssi-7.890-100310-2.iso:
ISO size................: 386M (404264960 bytes)
ISO md5sum..............: 05b5095a7ececd20761b11896acece99
ISO sha1sum.............: c59cc58b81ec58fdcbb032892ec26a2d1da20425
Issues fixed with this release:
- [11940] encoding problems with japanese/chinese/korean/german webadmin
- [11948] DHCP_RELAY_SERVER error is not shown
- [12295] [UBB][7.851] log archive download: text says "zip" but files are ".gz"
- [12430] Advanced tabs accessible though POP3 is disabled
- [12473] smtpd not running after installation - forces restart by selfmon
- [12483] SMTP Profile Mode doesn't work
- [12748] HA Cleanup
- [12887] Add VPN data to Executive Report
- [12913] Drop ICMPv6 mcast packets if IPv6 is disabled
- [12915] DHCPv6 Option 'dhcp6.name-servers' used incorrectly
- [12919] Static Routing: Blackhole Routing for IPv6 broken
- [12933] [UBB][7.880] Wrong email counting
- [12937] Subrequest handling of request headers (Apache mod_headers) CVE-2010-0434
- [12941] httpd 2.2.15
- [12949] Traffic-column is missing in CSV-report of Web Usage (Top Users by Domain)
- [12950] Socks proxy can't write pid file
- [12952] executive report not ipv6 ready
- [12955] Not all packetfilter rules updated when IPv6 is switched on or off
- [12958] HTTP proxy in standard mode loosing dstip
- [12959] [UBB][7.885] AFCD log still beeing flooded
- [12960] [UBB][7.885] empty dstip= in http proxy log
- [12964] chroot-socks deletes sockd user on upgrade
- [12973] adapt patterndist for new clamav patterns
