Firewall Builder 4.1.1

Firewall Builder 4 comes with support for high availability
firewall configurations, including heartbeat, vrrpd, keepalived,
conntrackd on Linux, CARP and pfsync on OpenBSD and PIX failover
configuration. It can generate configuration scripts to manage ip
addresses, VLAN, bridge and bonding interfaces on the firewall.
Drop-in support for OpenWRT firewall script is now available, as well
as experimental integration with IPCOP firewall appliances. The GUI
has supports undo/redo of unlimited depth and was generally
streamlined and improved.

v4.1 includes new enhancements and features including:

Support for Address Table objects that use the iptables ipset module

New toolbar shortcut to view complete generated firewall configuration files in the GUI

Shortcut buttons in the main window to help new users get started more easily

Updated many dialog window sizes to work better for users with smaller displays (1024x768)

Users requested the iptables ipset module support for dynamic environments where existing firewall rules need to be updated with a new object to match (IP address or IP subnet). IP sets provide an efficient way to do this without requiring a reload of your iptables rules.


v4.1.1 includes fixes for a number of minor bugs and is the first release to officially support HP ProCurve ACL configuration. Thanks to a generous donation of several switches from HP we were able to test and finalize the ProCurve support. This release also fixes a critical bug in V4.1.0 related to Cisco IOS ACL configurations. Some configurations would cause Firewall Builder to incorrectly generate and error with the message "Can not find interface with network zone that includes address A.B.C.D.".