HardWall Firewall

DNAT --to PORT for SSH in Hosting was fixed. A bug
in which QUICK_IDENT TCP-Reset didn't work in
EXTOUT was fixed. The IANA reserved IPv4 blocked
host list was updated in the main configuration
file. A problem created with 15-Stable-3 with the
SQUID accounting rule in the User Table LOCOUT was
fixed.

Comments were added to the main firewall script.
Some of the code at the start of the main script
was changed. Snort active IDS guardian support was
added in the contrib directory. This release has
gone though a four-week closed testing period to
ensure that it doesn't break anything for anyone
that is using 15-Stable-1.

Logging was changed to suit the iptables log
analyzer. The way the drop chains work was changed
to suit setups where you are bridging on the LAN
side. The way strict local ports work was changed
for better use. The way IP to MAC security works
was also changed to suit bridges. The denied ports
lists in DOWNSPAM and UPSPAM were updated. A
logging feature was added to Samba in the HwFw
main conf file. The abitlity not to log traffic
with a destination of the local LAN was added.

This release adds a check to see if the user is 'root' or 'Super
User'.