Install notes for SmoothWall Version 0.9.4 (18/09/00)
By Lawrence Manning (lawrence@aslak.demon.co.uk)
and Jon Fautley (jon@filbert-da-frog.co.uk)

Remember to check our sourceforge site for updates!
(sourceforge.net/projects/smoothwall/)

LICENSE

This software is license under the terms of the GNU General Public License.  See
www.gun.org for more info.  It comes with NO WARRANTY.

BETA

This software is in BETA

Please refer to the Fixes section, to see what's been fixed.  It's at the bottom
of this file  

WARNING

This is a complete (if very small) linux distribution and if you install it, it
will reformat your harddisk!!!!!  Do not under any circumstances run the
installer on a machine you have data you wish to keep on!

INSTRUCTIONS 

Please refer to the Install guide and Config guide in the SmoothWall project
page on Sourceforge.

FIXES

The following fixes and improvements are relative to 0.9.2

ISO images is no longer gziped to help windows users.

Installer has been streamlined.  The website is mentioned in the welcome page.

Autoprobing of approximately 40 ethernet cards.

Baud rate selector in PPP setup page.

Webserver tweaks.  Won't use so much memory as before.

More extensive penetration/DoS testing done.

The FTP server now works correctly.

Tweaks: shutdown page, and version number added to credit page.


The following fixes and improvements are relative to 0.9.1

Documentation!  The README on the CDROM is fairly extensive.  In the docs/ dir
is a newsletter PDF file.  It's a very interesting read.

Finally fixed the invoking of pppd using system.  The shell will no longer be
called so it is no longer possible to feed naughty strings in.

Added a DHCP server, configurable by the webpage.

Added a DNS proxy.  There is nothing to configure; it just works. :-) No more
Netscape hangs.

You can view PPP, DHCP or kernel logs all from one log view page.

Added credits page (click the logo).

Added remote shutdown page.

tcpdump and nslookup added.  portfwd added.  Will add a page for configuring
port forwarding soon.

Tweaked the dial scripts abit.

Was accidently logging spoofed packets twice.



The following fixes and improvements are relative to 0.9

/etc/securetty amended so root can login from the local network.

ipcahins based firewall has been added. Everything is disallowed except that
which is permitted. TCP and UDP packets to the low ports on ppp0 is disallowed.
Spoofing attempts are blocked. A webpage is available for viewing the firewall
log on a day by day basis.

Another page lets you view the ppp log, in order to make it easier to see why
the connection failed etc.

The cdrom is now bootable.

CHAP and PAP have been merged and pppd is left to determine how the peer wants
it to authenticated.

Max retries is given a default setting of 1.

The Dial and Hangup buttons are not avaiable until ppp has been set up.

The front page has been spruced up abit.

The dial buttons now requires either admin access, or a password for the
"dial" user.

Removed some stray .a stub library files.

Added COM3 and COM4 support

Included VI for all you VI hacks.

Passwords are blanked in the install program.

Yet another new page lets you view basic system information: memory usage, 
w command, and interfaces.

Added quotes for ethernet DRIVER for drivers that need parameters (oops, this
stuffed up the shell variable in the rc.network script)

Fixed some speeling errors.
