   ----------------------------------------------------------------------
   The SINUS Firewall -- a TCP/IP packet filter for Linux

   Written within the SINUS project at the University of Zurich,
   SWITCH, Telekurs Payserv AG, ETH Zurich.
   originally based on the sf Firewall Software (C) 1996 by Robert
   Muchsel and Roland Schmid.

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 2 of the License, or
   (at your option) any later version.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.

   You should have received a copy of the GNU General Public License
   along with this program; if not, write to the Free Software
   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.

   SINUS Firewall resources:
   SINUS Homepage: http://www.ifi.unizh.ch/ikm/SINUS/
   Firewall Homepage: http://www.ifi.unizh.ch/ikm/SINUS/firewall.html
   Frequently asked questions: http://www.ifi.unizh.ch/ikm/SINUS/sf_faq.html
   Mailing list for comments, questions, bug reports: firewall@ifi.unizh.ch
   -------------------------------------------------------------------------


Known Bugs of the SINUS firewall, version 0.1.4:

- The firewall works not properly when there is no loopback device
  configured (check with ifconfig before you start the firewall).
  However, it should not crash anymore.

- "reject" works currently for TCP (thanks to Florian Heinz).
  The UDP parts need to be entirely rewritten. Use only "accept" or
  "block" rules for UDP packets.

- Somebody told me that the kernel module crashes the box after changing
  the interface or routing table while the module is loaded, as soon
  as the first packet to be forwarded arrives. I cannot reproduce this,
  but it seems safe to unload the module for changing the interfaces
  or routes.

- The documentation is VERY outdated, I know.


Harald Weidner <weidner@ifi.unizh.ch>  25.08.1999
