# changelog

author: Support <support@atomicorp.com> - 4.0.8-19
changelog:
  - Update Aum, Add new update servers
  - Feature Request #1637, Suppress firewall errors on systems that dont support them
  - Feature Request #1638, Suppress ip_set loading messages
  - Bugfix #1631 -  Permissions wrong on clamav signatures files
  - Bugfix #XXX, fix for validation behind proxy with no port
  - Bugfix #XXX, for validation behind proxy with no l/p


author: Support <support@atomicorp.com> - 4.0.9-20
changelog:
  - Add Roll Back Configuration system
  - Update, firewall, add cidr handling to local-service-acl
  - Update, firewall, add new plesk ka server IP
  - Update, ASL Web, Remove geoblock buttons for EU
  - Feature Request #1630, installation, Detect if we can not connect to mysql during install
  - Bugfix #1597, firewall, Handle CIDR and ip-ip ranges in local-services-acl
  - Bugfix #XXXX, ASL Web, fixes line break bug in rule enable/disable
  - Bugfix #XXXX, HIDS, correct repeat offender logic for x2 and x3 conditions
  - Bugfix #XXXX, Core, remove hardcoded database name "tortix" from setup
  - Bugfix #XXXX, Aum, force waf module building on cpanel during configuration step


author: Support <support@atomicorp.com> - 4.0.10-21
changelog:
  - Update, AUM, add randomizer to hourly update check event.
  - Update, firewall, add new atomicorp IP's to update policy
  - Update, firewall, add FW_ENABLE_IPV6 (default yes), this enables/disables ipv6 support in the kernel
  - Update, web_check,add checks for HonorCipherOrder, add vulnerability tests for new Ciphers and Protocol settings
  - Feature Request #1518, allow stronger mod_ssl configuration
  - Feature Request #1656,  add rpmbuild as aum dependency
  - Bugfix #1614,  SecResponseBodyLimitAction set to: Reject would always report Fixed
  - Bugfix #1664, suppress cmd_system ERROR: '/bin/echo 1 > /proc/sys/kernel/mod ules_disabled
  - Bugfix #1682, custom_ssh_port missing from config and config.template
  - Bugfix #XXXX, fixes return value in ASLRBC in web;  fixes blacklist_remove from cli/web;   adds /etc/rkhunter.conf to core perms tests


author: Support <support@atomicorp.com> - 4.0.13-27
changelog:
  - Added ip_set_hash_ip to forced module load
  - Updated low level portscan detection to automatically exclude localhost
  - Modified syn scan engine to ignore half open requests on loopback
  - Updated ASL to support new fuzzy malware detection engine
  - Bugfix #1826 - fixes file read error in ASL Web when cl_clientapi is 0 bytes
  - Bugfix #1827 - fixes permissions issues for non-admin ASL Web users
  - Bugfix #1828 - fixes formatting error in memory and swap meters in ASL Web
  - Bugfix #xxxx - fixes asl/aum cli error output formatting
  - Bugfix #xxxx - fixes local ip lists in ASL Web


author: Support <support@atomicorp.com> - 4.0.14-29
changelog:
  - Enhanced IPS reporting for CVE-2015-5477
  - Bugfix #1873 - Adds SSLProxyEngine setting to twaf config when end point requires SSL
  - Bugfix #1872 - Changing tlsserverciphers and tlsclientciphers permissions breaks qmail


author: Support <support@atomicorp.com> - 4.0.15-30
changelog:
  - Enabled Malware Genome Scanner by default
  - Added new option to apply blacklist to WAF, for systems that are incorrectly configured or behind a NAT firewall or incorrectly configured Proxy
  - Update AUM,  config.template handling expanded to both HIDS and WAF updates
  - Bugfix #xxxx, ASL Web, corrects ampersand handling in WAF_REDIRECT_URL setting in ASL WEb
  - Bugfix #xxxx, ASL Web, allows wildcards in malware-detection
  - Bugfix #xxxx, ASL Web, Fixes mishanlding of unquoted comments in firewall rules in ASL Web
  - Bugfix #xxxx, ASL Web, Fixes waf category rule mapping in ASL Web
  - Bugfix #xxxx, Uninstaller, Make uninstaller exit if n is selected in yum


