Advertisement

CHANGELOG

What's New in version 4.2.2:

  • Description field added on whitelist properties
  • HxListener added
  • DomainPatternDic enabled on Globlist
  • 'Proxy Filtering' -> 'Remote Filtering' on GUI
  • Windows installer to keep '/nxfilter/bin/startupbat'
  • Deb package to keep '/nxfilter/bin/startupsh'
  • '/nxfilter/bin/417-*bat' scripts removed
  • v422 of 'domain-patterntxt' applied
  • Jahaslist has been updated to 2005709
  • NxClassifier ruleset updated to 420
  • 'category_jahas' not populated bug fixed

What's New in version 4.2.1-p1:

  • NxClassifier.getDbJahaslist bug fixed

What's New in version 4.2.1:

  • Run JahasUpdate.remoteRecat on slave node.
  • JahasUpdate.loadBigList removed.
  • JahaslistDao uses local DB when it's on slave node.
  • Config.useLocalJahsalist flag added.
  • 'Invalid License' on slave node with 20 user free license bug fixed.

What's New in version 4.2.0-p1:

  • Enable custom category blocking on policy level.

What's New in version 4.20:

  • Globlist added.
  • LoginListener.dealHostLogout added.
  • 'Web Hosting' category separation enabled.
  • NxClassifier ruleset updated to v4.2.0.
  • Don't send license expiration email in trial period.
  • Biglist update disabled.
  • Duplicated 'classifier_ruleset' loading message removed.
  • Don't add an invalid request into request queue.

What's New in version 4.1.9:

  • v4.1.9 of 'domain-pattern.txt' applied.
  • Remove 'www.' when custom categorized domains merged into Jahaslist.
  • Typo corrected on categories.txt, 'Iilegal' -> 'Illegal'.
  • Maximum slave node number changed to 4.
  • Separated system/custom category exportation added.
  • Block domain removed from Config.isLoginDomain.
  • Jahaslist has been updated to 1816518.
  • v4.1.9 of 'domain-pattern.txt' applied.
  • NxClassifier ruleset updated to v4.1.9.
  • 'nx' -> 'vx' on vxlogon table when new installation.

What's New in version 4.1.8-p2:

  • p2, v4.1.8 of 'domain-pattern.txt' applied.
  • p2, Jahaslist has been updated to 1771263.

What's New in version 4.1.8:

  • DomainDic.isBotnetDomainByConsonantCount added.
  • Creating domain_unclass table only if it doesn't exist.
  • NxClassifier ruleset updated to v4.1.8.
  • Default memory allocation increased to 768 MB.
  • New Windows service wrapper applied.
  • VxLogon support added.
  • Don't increase domain test count on dealAskDomainCatid.
  • Jahaslist has been updated to 1722042.

What's New in version 4.1.7:

  • Reset NxStats.domainTestCnt on midnight.
  • Exception handling for AllowedIpDao.selectOne added.
  • New top menu bar applied.
  • V4.1.7 of 'domain-pattern.txt' applied.
  • AdminLoginDao.updateLoginCnt removed.
  • Jahaslist has been updated to 1670081.

What's New in version 4.1.5:

  • Threshold for unclassifed report decreased to 10.
  • Local NxClassifier.mcIdx hiding global one removed.
  • Recategorization request started on 105 points.
  • - 'Web Hosting' category readded on Jahaslist.
  • NxClassifier ruleset updated to 416.
  • V4.1.5 of 'domain-pattern.txt' applied.
  • User-agent string updated for NxClassifier.
  • Typo corrected on categories.txt, 'IIlegal' -> 'Iilegal'.
  • Only show search result on 'NxClassifier > Jahaslist'.
  • Jahaslist has been updated to 1588849.

What's New in version 4.1.4-p1:

  • p1, Bug with 'Bypassing by client IP' fixed.
  • p1, ZoneLookup bug fixed.

What's New in version 4.1.4:

  • News -> News/Magazine on Jahaslist category.
  • Don't report unclassified domains when JahasDic bypassing.
  • Redundancy validity check for DomainDic.doesDomainExist removed.
  • Bypass all by client IP on 'Config > Allowed IP' added.
  • Jahaslist has been updated to 1550327.
  • CategoryDic unsynchronized.
  • Custom classified domain export/import added on 'Category > System'.

What's New in version 4.1.3-p1:

  • Default value of proxy filter cache TTL set to 300 seconds.
  • Possible DB connection leaking on JahaslistDao removed.
  • DynUpdate -> AdapResolver.
  • ZoneLookup works without a zone file for dynamic DNS domain.
  • Jahaslist has been updated to 1531417.

What's New in version 4.1.3:

  • DNS load balance option removed on GUI.
  • Dynamic DNS setup menu separated.
  • 'use_negative_cache' option added on 'DNS > Setup'.
  • Negative cache TTL changed to 15 minutes.
  • 'hide_ssl_warning' option on cfg.properties file added.
  • Rebuild Jahaslist when it's smaller than 1,200,000.
  • Max custom classified size adjusted to 300,000.
  • v4.1.3 of 'domain-pattern.txt' applied.
  • 'Jahaslist Repository' on 'NxClassifier > Setup' removed.
  • DomainDic.unclassCntMap added.
  • JahasDic cache enabled.
  • user trial license for Cloudlist included.
  • Config.hostanme added for alert email.

What's New in version 4.1.2:

  • DomainDic.doesDomainExist only checks NX domain.
  • Default value for classifier_setup.keep_html_text set to be 'TRUE'.
  • Bypass NxClassifier.recat when Jahaslist update disabled.
  • Custom category selection possible on recategorization from 'Logging > Request'.
  • Tutorial link in 'tutorial.bat' fixed.
  • Import new domain only when it does biglist update.

What's New in version 4.0.7:

  • JahasDic.find bypasses when it is doing the initial update for Jahaslist DB.
  • Don't send an email alert for license expiration when it's not using any blacklist.
  • DEFAULT_LOG_FLUSH_LIMIT set to 3000.
  • WhiteoneDic.getWhiteone returns an empty one instead of null.

What's New in version 4.0.6-p2:

  • Faster Youtube domain checking applied.
  • Faster whitelist checking applied.
  • WhiteoneDic, Whiteone classes added.
  • Drop packet option added on whitelist.
  • Auto-switch to a free license from trial license for Jahaslist.
  • Synchronize license request count to traffic DB count.
  • Bug with bypass authentication from 'whiteone == null' fixed.
  • Bug on 'block,proxy.jsp' for calling old API fixed.

What's New in version 4.0.6:

  • Faster Youtube domain checking applied.
  • Faster whitelist checking applied.
  • WhiteoneDic, Whiteone classes added.
  • Drop packet option added on whitelist.
  • Auto-switch to a free license from trial license for Jahaslist.
  • Synchronize license request count to traffic DB count.

What's New in version 4.0.5:

  • Delimeter for 'Allowed IP' changed to comma.
  • '/GBI' protocol added for NxForward.
  • On 'NxClassifer > Ruleset', 'REPLACE' button changed to 'IMPORT' button.
  • Using comma for NxClassifer rule allowed.
  • NxError.timestamp not set bug fixed.
  • '/IBR' protocol returns always 'true' bug fixed.
  • Set 'RA' flag on DNS response header.
  • Unset 'AD' flag on response header when it is not set from an upstream server.
  • Unset 'AD' flag on block redirection message header.
  • Bypass OPT record from RespCache.find.
  • Use IPv4 over IPv6 for IPv6 block redirection at default.

What's New in version 4.0.4:

  • 'NxClassifier > Setup > Mass Import' has been removed.
  • 'REPLACE' button added on 'NxClassifer > Ruleset'.
  • 'IMPORT' button added on 'NxClassifer > Jahaslist'.
  • eDirectory support added.
  • Reclassify immediately when it is from NxClassifier.
  • Syslog prefix not converted to upppercase bug fixed.
  • Bypass RecatMan.recat for invalid domains.
  • Log retention days can be set to 0.
  • Possible NullPointerException in JahasUpdate.addBigList removed.

What's New in version 4.0.3-p1:

  • Category 'None' excluded from license validation.

What's New in version 4.0.3:

  • ClassifiedData.getCtime format restored to 'MM/dd HH:mm'.
  • login.css has been removed.
  • v1.1 of 'domain-pattern.txt' applied.
  • NxClassifier ruleset updated to 385.
  • ClassifierRulsetDao.updateRulesetOld removed.
  • classifier_ruleset.update_count column removed on a new installation.
  • 'score' added on 'recat' table.

What's New in version 4.0.2:

  • Camel case notation applied.
  • 'report_pw' on admin.jsp changed to 'rpw'.
  • SLF4J introduced for enhancing logging performance.
  • NxParam has been removed.
  • Shallalist support has been removed.
  • Cache DB connection not released bug on Main.deleteOld fixed.
  • Sanitize HTML before NxClassifier.findCategory.
  • Reclassifying on NxClassifer data updates ctime of its statistics.
  • Only the group name being associated to the applied policy will be logged.
  • Sending group name on Syslog exportation.
  • Default values for DNS, HTTP connection, read timeout on NxClassifier increased
  • to 6 seconds.
  • NxClassifier finds a category by redirected domain when it gets redirected.
  • Use placeholder for SQL with LogCache.
  • Bypass Main.remoteUpdate on a slave node.
  • New admin login page applied.
  • Logging queue with LogFacade class added.
  • Keep response cache when the connection to upstream server lost.
  • Login-page, block-page, welcome-page template updated.
  • LoginListener bypasses login when it gets a hostname not convertible to an IP

What's New in version 3.4.9-p1:

  • Cache DB connection not released bug on Main.delete_old fixed.
  • Charset extraction regex pattern on NxClassifier updated.
  • New domain pattern dictionary from v4 added.
  • Auto-update for biglist for Jahaslist added.
  • New ruleset for NxClassifier having 375 rules.
  • Main.LdapUpdaterRestarter class added.
  • Lazy loading for LogCache.domain restored to pre-loading.
  • LogCache.find has been unsynchronized

What's New in version 3.4.9:

  • Cache DB connection not relased bug on Main.delete_old fixed.
  • Charset extraction regex pattern on NxClassifier updated.
  • New domain pattern dictionary from v4 added.
  • Auto-update for biglist for Jahaslist added.
  • New ruleset for NxClassifier having 375 rules.
  • Main.LdapUpdaterRestarter class added.

What's New in version 3.4.8-p1:

  • LDAP over SSL support added.
  • LogWriter.flush before making report cache and delete old data.
  • Apply 'Alert Category' option on domains blocked as 'Adware'.
  • Add host IP on queue full alert email.
  • Safe-search has been applied on 'youtube.googleapis.com'.
  • LookupHandler not refreshing safe-search domain cache bug fixed.
  • Safe-search to be working only for 'A' type DNS query.
  • Google safe-search redirection will only be applied on its 'www' and 'encrypted' subdomain.
  • Global.Nx_DOWNLOAD link has been updated.
  • Safe-search mode on policy has been introduced.
  • Default value for 'max_slave_num' has been increased to 8.
  • Whitelist not reloading after zone file deleted bug fixed.
  • UserDao.select_one_by_name has been added.
  • PolicyDao.select_one_by_name has been added.
  • GroupDao.select_one_by_name has been added.
  • Missing column for policy creation bug fixed.
  • 'safe_search' on PolicyProxyDao has been removed.

What's New in version 3.4.8:

  • LDAP over SSL support added
  • LogWriter.flush before making report cache and delete old data
  • Apply 'Alert Category' option on domains blocked as 'Adware'
  • Add host IP on queue full alert email
  • Safe-search has been applied on 'youtube.googleapis.com'
  • LookupHandler not refreshing safe-search domain cache bug fixed
  • Safe-search to be working only for 'A' type DNS query
  • Google safe-search redirection will only be applied on its 'www' and 'encrypted' subdomain
  • Global.Nx_DOWNLOAD link has been updated
  • Safe-search mode on policy has been introduced
  • Default value for 'max_slave_num' has been increased to 8

What's New in version 3.4.7:

  • LogWriter waits for flusing until traffic DB unlocked.
  • Not able to set 'classifier_num' to 0 bug has been fixed.
  • Jahaslist updated to 378336.
  • NxClassifier ruleset updated to 381.
  • Duplicated domain in 'domain_classified' table bug fixed.

What's New in version 3.4.6:

  • Return on invalid protocol for WebSocketHandler.onTextMessage.
  • User, Group classes moved into 'nxd.policy' package.
  • NxError, LastError, BlockedReason classes moved into 'nxd.filtering' package.
  • AD integration for NxBlock readded.
  • Syslog port' option added on 'Config > Setup'.
  • From Each Node' option for Syslog exportation added.
  • Disable Login Redirection' option added on 'Config > Setup'.
  • Sending alert email for queue full error.
  • Lazy loading has been applied for LogCache.domain.
  • LogCache.find has been synchronized.
  • Highlight for blocked domains on 'Logging > Request'.

What's New in version 3.4.5:

  • Minimum TTL for safe-search domain and domain to domain response introduced.
  • To read alert email template as a regular text file on AlertMan.
  • CC recipients added for alert email.
  • Bypass nightly report generating on a slave node.
  • Return on invalid message for WebSocketHandler.onTextMessage.
  • NxForward support added.
  • 'Disable Default Repository' option added on 'NxClassifier > Setup'.

What's New in version 3.4.4:

  • 'queue_full_exit' option on cfg.properties added.
  • Connection error count from DB not being reset bug fixed.
  • Connection timeout and socket timeout for sending an email have been increased to 6 seconds.
  • 'nxd.policy' package added.
  • 'nxd.dns' package added.
  • 'nxd.phome' package added.
  • 'nxd.filter' package added.
  • Adjustable query cache TTL introduced for proxy clients.

What's New in version 3.4.3:

  • Not refreshing expired CNAME cache on LookupHandler bug fixed.
  • CSV log exportation limit incresed to 100,000.
  • 'common_edge.css' has been removed.
  • PrefixDic is not a Thread anymore.
  • 'alert' package added.
  • Path not allowed in IE proxy bypass.

What's New in version 3.4.2:

  • 'drop_empty_response' option added on cfg.properties.
  • NodeTalkie doesn't try to connect when master node down.
  • BlockPage gets a default NxError when master node down.
  • Login to slave GUI when master node down allowed.
  • Interval for finding the last error on BlockDao adjusted to 50.
  • LogWriter flush interval to master node adjusted to 5 seconds.

What's New in version 3.4.1:

  • Redundant bootstrap directory has been removed.
  • We don't load data on DynUpdate when we find a blank domain.
  • License file sharing between cluster nodes bug fixed.

What's New in version 3.4.0:

  • Improved DataBase, RowSet classes applied
  • BlockDomainResolver returns '127.0.0.1' when there is no block redirection IP loaded on a slave node
  • Filtering still works on a slave node having master node down
  • Blacklist license update on GUI added
  • License policy changed
  • New authoritative DNS server module applied
  • URLBlacklist support has been removed

What's New in version 3.3.4:

  • LDAP importation bug in 'LdapUpdater.delete_user' fixed.

What's New in version 3.3.1:

  • New domain validation function applied for allowing the domains not having dot.
  • Support for NxUpdate v1.x, NxClient v1.x stopped.
  • Using standard DNS protocol for NxUpdate and NxClient signals and queries.
  • Send error message to NxClient when authentication disabled.
  • Remove duplicated username on the dropdown list on 'Report > Daily'.
  • Keep LDAP DN for an LDAP imported user for LDAP login.
  • 'nxd.ldap' package added.
  • Add auth_drop_cnt instead of auth_redi_cnt when authentication not enabled.
  • Set 'false' for 'follow_referral' on LDAP login.
  • Version query signal added.
  • Cache DNS response only when it has at least one A record.
  • Removed redundancy checking for empty message from response cache.
  • UTF-8 support for Jahaslist remote repository text file.
  • Not sending DNS response after caching bug from v3.3.0 fixed.
  • LDAP import excluded keyword size increased to 2,000 bytes.

What's New in version 3.2.0:

  • NxClassifier ruleset type for HTML text added.
  • 'Keep HTML Text' option added on 'NxClassifier > Setup'.
  • Domain validation for whitelist has been removed.
  • Drop packet when there is a response message having no record from an upstream server.

What's New in version 3.1.9:

  • Remove respawn option from Systemd script.
  • 'enable_auto_update' flag removed from NxClassifier.
  • Not to share login session when master node down.
  • 'is_queue_full' flag removed from MasterCheck.
  • 'IE Proxy Bypass' added on 'Policy > Proxy Filtering'.
  • Typo on 'Config > Redirection' fixed.
  • NxClassifier DNS checking bug fixed.

What's New in version 3.1.8:

  • Error message for upstream DNS query timeout added.
  • DnsStats class added.
  • Updating Jahaslist through remote repository added.
  • Importing Jahaslist uses lesser memory.

What's New in version 3.1.7:

  • 'HTTP_RECAT_MAX_LINE' has been increased to 100000.
  • Don't merge custom classified domains when it's not on Jahaslist.
  • Remote update for NxClassifier ruleset disabled.
  • 'IMPORT RULESET' on 'NxClassifier > Setup' changed to 'REPLACE RULESET'.
  • Jahaslist can be updated without any existing data.
  • 'recatlist.txt' in '/nxfilter/jahaslist'has been removed.
  • Use 'img/pix.png' to express a horizontal line on GUI.
  • Reading file line by line when it imports Jahaslist.
  • 'Web Hosting' category added on Komodia mapping.
  • Systemd auto-start script added on 'deb' package.
  • 'Disable Auto Update' on 'NxClassifier > Setup' removed.
  • 'Enable Auto Update' on 'NxClassifier > Setup' added.

What's New in version 3.1.6:

  • Set host IP only once for Syslog setup with system startup.
  • Checking for empty DNS answer from cache added.
  • 'Log Retention Days' length limit on GUI increased to 3.
  • Separator for 'Slave IP' on 'config,cluster.jsp' changed to a comma.

What's New in version 3.1.5:

  • Local DNS setup menu added on GUI.
  • MS DNS setup menu added on GUI.
  • Upstream DNS server load balancing option introduced.
  • 'local_dns' and 'local_domain' disabled on cfg.properties.
  • DNS level safe-search enforcing for Bing added.

What's New in version 3.1.4:

  • Use get_real_uname, instead of accessing real_uname directly.
  • 'Log retention days' increased to 400.
  • System domains bypassed for proxy filtering.
  • Waiting for the block reason populated for 100 milliseconds.
  • Lib.system_output gets string array as its parameter.

What's New in version 3.1.3:

  • Bypassing Active Directory domain to MS DNS server for unauthenticated users
  • Follow Referral' option added for Active Directory importation
  • \#{nx_name}' not populated on 'block,chrome.jsp' bug fixed
  • Active Directory DNS bypassing comes before zone file search
  • Zone trasfer search comes after zone file search
  • Zone Transfer option on Active Directory importation removed
  • New algorithm for caculating the remaining TTL of a cached record to setup the TTL for each record separately
  • bypass_cache_domain_list' param removed from cfg.propertis

What's New in version 3.1.2:

  • Dynamic domain loaded with zero mtime bug fixed.
  • Shallalist not including 'education/schools' bug fixed.
  • Report on domain, user, client IP number missing bug fixed.

What's New in version 3.1.1-p1:

  • Reclassified domain being deleted bug fixed.

What's New in version 3.1.0p2

  • - 'clt_cache_ttl' column moved into 'dns_setup' table.

What's New in version 3.1.0

  • gob.xx' classified into government category.
  • Authority DNS server feature added.
  • DNS setup menu on GUI separated.
  • Different CSS applied on MS browser.
  • Wildcard lookup allowed on zone transfer.
  • ypass DNS query against '*.ip6.arpa '.
  • 'block-time' on policy not reset bug fixed.
  • 'clt_cache_ttl' column moved into 'dns_setup' table.

What's New in version 3.0.9

  • Minimum idle connection for DB pool changed to 10.
  • Maximum idle connection for DB pool changed to 30.
  • Auto-update for NxClassifier ruleset added.
  • Update count for NxClassifier ruleset introduced for auto-update.
  • Sorting whitelist domains for NxClient.
  • Remote update for Jahaslist when NxFilter starts.
  • Bypass remote update when there's no data in Jahaslist.
  • Possible connection leak from RecatMan fixed.
  • - Delete recategorization data before submitting.
  • 'reset_pw.bat' resets admin name to 'admin'.
  • Recategorization requires to keep it for 3 days.
  • Redirection works on total bypass and master node down.
  • 'recatlist.ver' -> 'recatlist_ver.txt'.
  • 'CDN' added for domain pattern dictionary.
  • 'gob.xx' classified into goverment category.

What's new in version 3.0.8:

  • Minimum idle connection for DB pool changed to 10.
  • Maximum idle connection for DB pool changed to 30.
  • Sorting whitelist domains for NxClient.
  • Remote update for Jahaslist when NxFilter starts.
  • Bypass remote update when there's no data in Jahaslist.
  • Possible connection leak from RecatMan fixed.
  • Delete recategorization data before submitting.

What's New in version 3.0.7:

  • Safe-search redirection applied to 'youtubei.googleapis.com' and 'www.youtube-nocookie.com'.
  • Auto-update for NxClassifer ruleset added.
  • Update count for NxClassifer ruleset introduced for auto-update.
  • Policy based block-time added.

What's new in version 3.0.6:

  • Safe-search redirection applied to 'm.youtube.com'.
  • Jahaslist auto-update disabled when domain pattern dictionary disabled.
  • Case sensitivity problem with username for bandwidth control fixed.
  • Bandwidth control, 2000MB for a user limit removed.

What's New in version 3.0.5:

  • HTML code input on 'GET/POST' requests blocked for preventing 'CSRF' attack.
  • Javascript error for deleting custom categories fixed.
  • Alert categories added on 'Config > Alert'.

What's New in version 3.0.4:

  • Remote Jahaslist recategorization list update added.
  • DomainPatternDic updated.
  • 1,000 user limit for user selectbox on report removed.
  • RESTORE-DEFAULT' button added on 'NxClassifier > Ruleset' and 'NxClassifier > Jahaslist'
  • Unclassified domain cache removed.
  • Remove admin session data when admin logout.
  • admin.jsp?action=logout -> admin.jsp?action_flag=logout.
  • On log-view, hovering on category will show all the categories if there are multiple categories.

What's New in version 3.0.3:

  • Domain process queue size for NxClassifier adjusted to 10000
  • Internal lookup_map size for domain process queue of NxClassifier adjusted to 1000
  • SQL error for 'is_already_classified()' fixed

What's New in version 2.8.7:

  • New responsive login form template added.
  • 'webapps/lib/jquery-1.11.3.min.js' added.
  • 'webapps/lib/jquery.cookie.js' added.
  • 'webapps/lib/bootstrap.min.css' added.
  • CSS and Javascript file inclusion moved into 'top.jsp'.
  • Preview script on 'Config > Block Page' changed to use 'document.write()'.

What's New in version 2.8.6:

  • Keep logging for request IP address for admin login.
  • New parsing algorithm for DomainPatternDic added.
  • Tracker domain separated from Ads domain for DomainPatternDic.
  • Missing data sanitization on WhitelistDao.update() added.
  • Only one category for a custom categorized domain allowed.
  • Domain reclassification popup on log-view added.
  • Bypass LDAP synch when there's read timeout error.
  • AutoCloseable DataBase and RowSet classes added.