# changelog

author: Support <support@atomicorp.com> - 4.0-9
changelog:
  - Add Requires on python26 for el5
  - Add heartbleed (CVE-2014-0160) checks across all IP's
  - Add DOWNLOADER configuration step to new install/conversions
  - Add web checks for cpanel on TraceEnable
  - Add weekly cron asl support
  - Added SIP nat module to force load in firewall
  - Update for port detection, add base firewall policies for cpanel, directadmin, and plesk
  - Update, Make yum events log to /var/asl/tmp/update.log
  - Update POSIX acl vulnerability check, lowered from critical to moderate
  - Retire POSIX ACL method for T-WAF, implement new method for per user directories
  - Rebase AUM-only installations on the tortix-common channel
  - Bugfix #XXX, ASL Web, removes waf_classes error message
  - Bugfix #XXX, ASL Web, blocklist window paging fix


author: Support <support@atomicorp.com> - 4.0-10
changelog:
  - Add support for Debian 6 to AUM
  - Add support for Debian 7 to AUM
  - Add support for Ubuntu 10 to AUM
  - Add support for Ubuntu 13 to AUM
  - Add support for Ubuntu 14 to AUM
  - Add support for OpenSuSE 12 to AUM
  - Add support for OpenSuSE 13 to AUM
  - Add support for metacharacter passwords in AUM
  - Update, ASL Firewall, whitelisted hosts will by default also bypass the firewall
  - Update, 
  - Bugfix #XXX, ASL Web, correct country links
  - Bugfix #XXX, ASL Web, correct view all activity by ip links
  - Bugfix #XXX, ASL Web, correct sequencing issue in AUM causing update events to overwrite rule modifications with defaults
  - Bugfix #XXX, ASL Web, fix for ASL Web user management
  - Bugfix #XXX, ASL Firewall, fix of ! issue with iptables and "Using intrapositioned negation"
  - Bugfix #XXX, ASL Firewall, fix for shuns lost from an asl-firewall restart event
  - Bugfix #XXX, AUM, fix for proxy port management


author: Support <support@atomicorp.com> - 4.0.1-11
changelog:
  - Add support for Mod_Security 2.8.0
  - Update Firewall, Change of default config so that whitelisted hosts also bypass the firewall
  - Update Firewall, detect if comment module isnt loaded for blocklist, and fixed bug in blacklist that wasnt disabling comments for blacklist on systems that dont support it
  - Update Firewall, Added in filesystem kernel modules, in case users create filesystem types that were not added on boot
  - Update ASL Web, shifts some filtering to cli from php  getting iptables
  - Update Firewall, Whitelist 127.0.0.1/8 by default
  - Feature Request #697, php_checks, add additional php functions: eval, ini_alter, ini_set, symlink, ink, ftok, posix_access openlog syslog re adlink apache_child_terminate apache_setenv define_syslog_variables escapeshellarghighlight_file ini_get_all posix_ge tpwuid posix_uname
  - Feature Request #1346, ssh_check, Set PermitEmptyPasswords to no 
  - Feature Request #1363, general_check, Add apache, nobody, www-data, and other users to /etc/cron.deny 
  - Feature Request #1523, hids_check, Add in a pruning system for the OSSEC diff events  (HIDS_CLEAN_DIFF)
  - Feature Request #1550, firewall,  Add logging to per port ACLs. Add "LOG=yes" to the acl file and this will enable logging
  - Feature Request #1552, waf_check,  Add user defined domain blocking
  - Feature Request #1553, Core, speed up performance of asl -dr
  - Bugfix #1498, aum, fixed KERNEL_CHANNEL= not disabling tortix-kernel.repo when set to disabled
  - Bugfix #1499, kernel_check, Consistent thread enforcement was mistakenly labeled as Deter Bruteforce
  - Bugfix #1501, firewall, WHITELIST rules are now correctly load right after RELATED,ESTABLISHED
  - Bugfix #1524, database-setup, change from localhost to 127.0.0.1 to handle conditions where the system is configured with skip-name-res
  - Bugfix #1527, AUM, DTC creation issues resolved
  - Bugfix #1536, ASL Web, displays message when no vulnerabilities are detected
  - Bugfix #1541, kernel_check, Force load of Asl-kernel modules before running Asl -s -f for the first time 
  - Bugfix #1549, hids_check, exclude 127.* from whiteist checks
  - Bugfix #1555, t-waf, add lint code to verify an IP address or Port number are valid
  - Bugfix #1557, waf_check,  apache 2.4 needs  files to exist if invoked wit Include. This will just create the basic files that are 
  - Bugfix #1559, waf_check, remove old audit/data/ log entries w/ new user type structure (CLEAN_ALERT)
  - Bugfix #XXX, Firewall, fix on plesk 3306 port rules
  - Bugfix #XXX, Firewall, fix issue with iptables and "Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned" errors
  - Bugfix #XXX, ASL Web, fixes country links in ASL Web
  - Bugfix #XXX, ASL Web, 'view all activity by ip' links in ASL Web
  - Bugfix #XXX, hids_check, fixes sequencing issue in AUM causing update events to overwrite rule modifications with defaults
  - Bugfix #XXX, integrity checks, fixes handling for all options set to no in file integrity watch rules
  - Bugfix #XXX, Core, Corrects yum proxy writing
  - Bugfix #XXX, ASL Web, fixes ASL Web user management
  - Bugfix #XXX, Firewall, fixes shuns lost from iptables on asl-firewall restart
  - Bugfix #XXX, ASL Web, Fixes list buttons in event detail and tld reports
  - Bugfix #XXX, ASL Web, fixes issue with state when adding/editing firewall rules
  - Bugfix #XXX, ASL Web, fixes clamav scanning from web
  - Bugfix #XXX, psa_check, remove duplicate Scoreboard entries from proftpd.conf


author: Support <support@atomicorp.com> - 4.0.9-20
changelog:
  - Add Roll Back Configuration system
  - Update, firewall, add cidr handling to local-service-acl
  - Update, firewall, add new plesk ka server IP
  - Update, ASL Web, Remove geoblock buttons for EU
  - Feature Request #1630, installation, Detect if we can not connect to mysql during install
  - Bugfix #1597, firewall, Handle CIDR and ip-ip ranges in local-services-acl
  - Bugfix #XXXX, ASL Web, fixes line break bug in rule enable/disable
  - Bugfix #XXXX, HIDS, correct repeat offender logic for x2 and x3 conditions
  - Bugfix #XXXX, Core, remove hardcoded database name "tortix" from setup
  - Bugfix #XXXX, Aum, force waf module building on cpanel during configuration step


author: Support <support@atomicorp.com> - 4.0.10-21
changelog:
  - Update, AUM, add randomizer to hourly update check event.
  - Update, firewall, add new atomicorp IP's to update policy
  - Update, firewall, add FW_ENABLE_IPV6 (default yes), this enables/disables ipv6 support in the kernel
  - Update, web_check,add checks for HonorCipherOrder, add vulnerability tests for new Ciphers and Protocol settings
  - Feature Request #1518, allow stronger mod_ssl configuration
  - Feature Request #1656,  add rpmbuild as aum dependency
  - Bugfix #1614,  SecResponseBodyLimitAction set to: Reject would always report Fixed
  - Bugfix #1664, suppress cmd_system ERROR: '/bin/echo 1 > /proc/sys/kernel/mod ules_disabled
  - Bugfix #1682, custom_ssh_port missing from config and config.template
  - Bugfix #XXXX, fixes return value in ASLRBC in web;  fixes blacklist_remove from cli/web;   adds /etc/rkhunter.conf to core perms tests


author: Support <support@atomicorp.com> - 4.0.11-22
changelog:
  - EL7 support
  - mod_security 2.9 support
  - Add support to enable/disable real-time malware access prevention. Modes allow detect-only, or enforcement. Requires clamd 0.98.5-22 or higher
  - Add WAF support for Lua based rules (beta)
  - Added in new firewall configuration settings for RDATE, NTP and DNS restrictions
  - Added in new firewall dynamic hostname whitelisting support (beta)
  - Feature Request #1331, ssh_check, add check for small ssh keys
  - Feature Request #1526, Firewall, do not log drop events on non-ssl pop/imap
  - Feature Request #1655, Configuration, Disabe 4151 on virtuozzo systems
  - Feature Request #1679, WAF, add lua based search engine auto-whitelisting support
  - Feature Request #1697, Configuration, add "kvm", "vmware" and others to list of virtualization types 
  - Bugfix #1645, waf_check, resolve rules sets console output duplication
  - Bugfix #1686, mysql_check, resolve symbolic-links = 0  duplication
  - Bugfix #1715, Core, fixes zero byte issue with rbc
  - Bugfix #XXXX, ASL Web, fixes creation of firewall log rules from asl web
  - Bugfix #XXXX, firewall, remove duplicate active response loaders
  - Bugfix #XXXX, firewall, fixes cidr in whitelist module


author: Support <support@atomicorp.com> - 4.0.11-22
changelog:
  - EL7 support
  - mod_security 2.9 support
  - Add Atomic Rev Limiter  (alpha)
  - Add support to enable/disable real-time malware access prevention. Modes allow detect-only, or enforcement. Requires clamd 0.98.5-22
  - Add WAF support for Lua based rules (beta)
  - Added in new firewall configuration settings for RDATE, NTP and DNS restrictions
  - Added in new firewall dynamic hostname whitelisting support (beta)
  - Feature Request #1331, ssh_check, add check for small ssh keys
  - Feature Request #1526, Firewall, do not log drop events on non-ssl pop/imap
  - Feature Request #1655, Configuration, Disabe 4151 on virtuozzo systems
  - Feature Request #1679, WAF, add lua based search engine auto-whitelisting support
  - Feature Request #1697, Configuration, add "kvm", "vmware" and others to list of virtualization types 
  - Bugfix #1645, waf_check, resolve rules sets console output duplication
  - Bugfix #1686, mysql_check, resolve symbolic-links = 0  duplication
  - Bugfix #1715, Core, fixes zero byte issue with rbc
  - Bugfix #XXXX, ASL Web, fixes creation of firewall log rules from asl web
  - Bugfix #XXXX, firewall, remove duplicate active response loaders
  - Bugfix #XXXX, firewall, fixes cidr in whitelist module


author: Support <support@atomicorp.com> - 4.0.8-19
changelog:
  - Update Aum, Add new update servers
  - Feature Request #1637, Suppress firewall errors on systems that dont support them
  - Feature Request #1638, Suppress ip_set loading messages
  - Bugfix #1631 -  Permissions wrong on clamav signatures files
  - Bugfix #XXX, fix for validation behind proxy with no port
  - Bugfix #XXX, for validation behind proxy with no l/p


author: Support <support@atomicorp.com> - 4.0.12-25
changelog:
  - Add support for Cloudlinux 7
  - Add IPSET firewall drop support
  - Add firewall support to define custom types for DNS DDOS attacks
  - Updates for mod_security 2.9 support
  - Update configuration, add automatic cgroups config detection
  - Update to support cpanel apache 2.2 to 2.4 transitions
  - Retire SCANONACCESS setting from config. This is now merged with realtime malware scan settings
  - Feature Request #1734, add Cloudflare active response integration
  - Feature Request #1741,  detect existing query cache settings
  - Feature Request #1768, restrict module checks on openvz
  - Feature Request #1774, ssh_check, sudo checks for requiretty
  - Feature request #XXXX, ipset based active response support
  - Bugfix #1761: firewall, exclude custom domain element if there are no defined custom domains
  - Bugfix #XXX, psa_check, forces mode 4110 on plesk crontabmng if set to enabled
  - Bugfix #XXX, database-setup, fix for remote DB support
  - Bugfix #XXX, ASL Web, fixe issue when setting date+time for integrity scan from ASL Web
  - Bugfix #XXX, ASL Web, include the generic input and output rules in running.fw when a modification is made via web
  - Bugfix #XXX, ASL Web, fixes bug in web_validate preventing default user/group creation
  - Bugfix #XXX, ASL Web, fix for missing privileges check on events_search data pulls
  - Bugfix #XXX, firewall, fix for case mismatch on IP variable
  - Bugfix #XXX, ASL Web, corrects html in event detail rendering
  - Bugfix #XXX, ASL Web, fixes displayed mem usage in web
  - Bugfix #XXX, firewall, adds firewall restart on unblock


author: Support <support@atomicorp.com> - 4.0.12-27
changelog:
  - Added ip_set_hash_ip to forced module load
  - Updated low level portscan detection to automatically exclude localhost
  - Modified syn scan engine to ignore half open requests on loopback
  - Updated ASL to support new fuzzy malware detection engine
  - Bugfix #1826 - fixes file read error in ASL Web when cl_clientapi is 0 bytes
  - Bugfix #1827 - fixes permissions issues for non-admin ASL Web users
  - Bugfix #1828 - fixes formatting error in memory and swap meters in ASL Web
  - Bugfix #xxxx - fixes asl/aum cli error output formatting
  - Bugfix #xxxx - fixes local ip lists in ASL Web


author: Support <support@atomicorp.com> - 4.0.14-29
changelog:
  - Enhanced IPS reporting for CVE-2015-5477
  - Bugfix #1873 - Adds SSLProxyEngine setting to twaf config when end point requires SSL
  - Bugfix #1872 - Changing tlsserverciphers and tlsclientciphers permissions breaks qmail


author: Support <support@atomicorp.com> - 4.0.15-30
changelog:
  - Enabled Malware Genome Scanner by default
  - Added new option to apply blacklist to WAF, for systems that are incorrectly configured or behind a NAT firewall or incorrectly configured Proxy
  - Extend debugging error messages in database-setup
  - Update, config.template handling expanded to both HIDS and WAF updates
  - Bugfix #xxxx - corrects ampersand handling in WAF_REDIRECT_URL setting in ASL WEb
  - Bugfix #xxxx: allows wildcards in malware-detection
  - Bugfix #xxxx:  Fixes mishanlding of unquoted comments in firewall rules in ASL Web
  - Bugfix #xxxx:  Fixes waf category rule mapping in ASL Web
  - Bugfix #xxxx -  Make uninstaller exit if n is selected in yum


author: Support <support@atomicorp.com> - 4.0.15-30
changelog:
  - Enabled Malware Genome Scanner by default
  - Added new option to apply blacklist to WAF, for systems that are incorrectly configured or behind a NAT firewall or incorrectly configured Proxy
  - Update AUM,  config.template handling expanded to both HIDS and WAF updates
  - Bugfix #xxxx, ASL Web, corrects ampersand handling in WAF_REDIRECT_URL setting in ASL WEb
  - Bugfix #xxxx, ASL Web, allows wildcards in malware-detection
  - Bugfix #xxxx, ASL Web, Fixes mishanlding of unquoted comments in firewall rules in ASL Web
  - Bugfix #xxxx, ASL Web, Fixes waf category rule mapping in ASL Web
  - Bugfix #xxxx, Uninstaller, Make uninstaller exit if n is selected in yum


author: Support <support@atomicorp.com> - 4.0.16-32
changelog:
  - Feature Request #1835, realtime malware detection, autoexclude directories malware scanning, /var/log, /home/*log; mail; spamassassin
  - Feature Request #1849, realtime malware detection, report  disabled/unavailable as vulnerability
  - Feature Request #1850, WAF, add fx for aum-only environments on cpanel to regenerate configs post easyapache
  - Bugfix #1726, configuration, add check for apr & apr-util if this is an rpm based install
  - Bugfix #1742,  AUM,  VERSION handle condition when content types are missing (WAF_ENGINE_VERSION, etc)
  - Bugfix #1783, aum, prevent incompatible MODSEC_00_AUTOWHITELIST_SEARCHENGINE and MODSEC_00_SEARCHENGINE to be enabled in 2.9.0
  - Bugfix #1896, rework cpanel updates for rules-only, all, exclude-kernel update types
  uzzy matching database to the scanner (lua format, MODSEC_99_ADV_SCANNER)
  - Bugfix #XXXX, Firewall, Update dynamic whitelisting to load from both cron and core firewall
  - Bugfix #XXXX, Aum, expand environment checking on cpanel to regenerate configs post easyapache
  - Bugfix #XXXX, ASL Web, fixes removal of 0.0.0.0 from tortixd acl when a valid ip address is added


author: Support <support@atomicorp.com> - 4.0.1-11
changelog:
  - Add reputation system 
  - Add AUM channel support (-testing)
  - Add domain blocking tab to blocking window in ASL Web
  - Update, ASL Web, allows modification of default asl web user group
  - Update, ASL Web, Adds alert in web if invalid config settings detected
  - Feature Request #1304, ASL Web, makes unapplied updates vuln open a window with contents of updates_pending.log
  - Bugfix #XXX, firewall, load whitelist before RBLs
  - Bugfix #XXX, aum, fix condition where a null waf_engine_versin would be detected creating a condition where rules from un-allowed versions would be copied in on an -u event.


author: Support <support@atomicorp.com> - 4.0.3-13
changelog:
  - Add debian jessie detection to AUM
  - Update cpanel build events, add  rpmbuild dependency into templates
  - Update AUM, RULES_PATH support to the fixed vhost & global file creation (this is needed for planned apache 2.4 support)
  - Feature Request #1519, ASL Web, Add snat,dnat,masquerade,redirect handling to ASL Web firewall interface
  - Feature Request #1568, generate vhost php.ini files from master file (PSA_PHP_DOMAIN_POLICY)
  - Bugfix #1571, waf_check,  waf_check error on asl -s -f when MODSEC_ENABLED=no 
  - Bugfix #1573, AUM, fix validate_asl Nothing from request condition
  - Bugfix #XXX, ASL Web, Fixes event detail viewing on blocked ips


author: Support <support@atomicorp.com> - 4.0.4-15
changelog:
  - Add suport for Plesk 12
  - Removed support for asl -u and asl -uf, this is now exclusively handled by aum
  - Update genera_checks, Add abrt to service disable configuration
  - Update database-setup, Add warning on skip-name-resolve
  - Update ASL web to handle long report names in menus
  - Update Firewall, Changed advanced port scan so it wont alarm on loopback
  - Update Firewall, add IP validation to blocklist event
  - Update asl_db_rotate, aslw_archive_tmp cleanup when db archiving is disabled
  	- added force_archive option to db rotate
  	- added force_clean option to db rotate
  - Update cpanel templates to detect if the module directory has been deleted
  - Feature Request #1576, add syslog & rsyslog to watchdog
  - Bugfix #1580, ASL Web, omits ASL-ACTIVE-RESPONSE from running.fw
  - Bugfix #XXX, ASL Web, fixes web display issue when rules are disabled/enabled from cli
  - Bugfix #XXX, ASL Web, fallback data on waf event detail to be full_log rather than [msg ..]
  - Bugfix #XXX, ASL Web, suppresses netstat error in web
  - Bugfix #XXX, ASL, Fixes ALLOW_escapeshellarg typo in config.template


author: Support <support@atomicorp.com> - 4.0.5-16
changelog:
  - Add support for el7 (beta)
  - Add support for Apache 2.4 (beta, el7 only)
  - Add support for systemd (beta, el7 only)
  - Update, aum, adds owner check on aslw.key
  - Update, Firewall, Added in http rules for ASL-UPDATES chain
  - Update, ASL Web, adds help message if error during web validate
  - Update, ASL Core, shows help if old --vhost param is sent during enable/disable rule
  - Update, ASL Web, adds 'locally modified' search filter to Rule Manager window in ASL Web
       this will display all locally modified rules as found in /etc/asl/rules
  - Update, database-setup, includes sql setup from ASL Web
  - Update, ASL Web,  adds per-vhost settings to the search results summary in Rule Manager window
  - Bugfix #1587, handles safari forcing numeric indeces in for/in loops in user group management
  - Bugfix #XXX, correct condition for remote SSL t-waf
  - Bugfix #XXX, fixes rule reset from ASL Web
  - Bugfix #XXX, fixes error when updates pending log is 0 bytes


author: Support <support@atomicorp.com> - 4.0.5-16.1
changelog:
  - Bugfix #1600, lint whitelist entries in asl-firewall
  - Feature Request #1208, ASL Web: Add in firewall whitelisting 
  - Feature Request #900, add mod_qos support
  - Move asl whitelist to first position
  - Minor QA fix for handling no-ipv6 conditions
  - Add more MSN ranges to mod_Evasive
  - Added in Bing ranges to mod_evasive whitelists
  - Fixes handling of garbage results when fetching scan/aum log updates
  - Added in logic to prevent 127/localhost from ever being shunned to the active-response firewall script
  - Moved blacklist in position so it loaded ahead of RBL lists
  - Changed active-response asl-firewall init script to use its own chain, asl-shun.pl still needs to be updated to do the same and to remove entries from THIS chain
  - Added in logic to check for comment support and to not use comments on systems that dont have the module loaded
  - Minor fix to exclude plesk 9 configs from plesk 12 and up
  - Add ACL support to T-WAF's
  - Moved whitelist to load before other firewall elements
  - Add detection for wait_timeout, skip-networking, skip-name-resolve
  - Increase dbd wait timeout to 5000
  - Add logging to uninstaller
  - handling for 0 byte rules file
  - Set /var/tmp as ignore for integrity checks, somehow it was included in diff checks
  - adds fallback to tld trigger; cleaned up mysql during web validate
  - mysql movings
  - Add TSA dir for dynamic data tracking to tortixd
  - adds non-checkbox parentage for config setting disabling in ASL Web
          1) identify <parent></parent> as normal
          2) add <comp></comp> lines for any comparisons wanted
          3) operators:   EQ|NEQ|GT|GTE|LT|LTE

          ex:  <comp>NEQ turtle</comp>
               parent value must not be turtle

          ex:  <comp>GTE 400</comp>
               parent value must be greater than or equal to 400

          ex:  <comp>GTE 1</comp><comp>LTE 100</comp>
               parent value must be between 1 and 100 inclusive
  - Added in legacy ip tracking modules to asl-kernel startup script for really really old kernels
  - Add functionality to install mod_qos
  - Created webserver detection function to help consolidate webserver interrogation. This is still very basic, but will provide the framework to detect different webservers in the future.
  - Expanded a basic verify() component function to validate for basic component requirements
  - corrects check against archive tables when searching the last week
  - Add mod_qos updating to AUM, begin consolidating config file paths under ASLCommon
  - Add mod_qos support to core ASL
  - suppresses rpm error message in c_watchdog
  - BR #1594 - fixes force mode when enabling a rule
  - HIDS: add option to enable/disable tcpwrappers active response
  - Basic mod_qos support
  - Bugfix #XXX, remove t-waf configs if waf is disabled
  - Bugfix #XXX, ossec-execd check is still made if ACTIVE_RESPONSE is disabled
  Atomic Secured Linux:  Updates to integrity checks
  - FR#1570,  Add in "this may make several minutes" warning to "Checking versions ... "
  - Add Timestamp checking to download event for files
  - Add Apache 2.4 support for cpanel
  - Update for new proftpd.d/ structure.
  - Update to use the new plesk 12 API to manage ssl settings. Move TLS files under /etc/proftpd.d/ structure. Retire the proftpd-tls.conf file and the fixed includes used in proftpd.conf
  - Add proftpd.conf file from plesk 12
  - FR#1589 -  Flush all firewall rules on uninstall of ASL
  - Update Firewall, IP's on the whitelist will always be excluded from the blacklist rules


author: Support <support@atomicorp.com> - 4.0.6-17
changelog:
  - Add Threat Intelligence Engine
  - Add ipset support to the ASL Firewall
  - Add Apache 2.4 support for cpanel
  - Update, ASL Web, Adds confirmation to geoblocking from report windows;  
  - Update, ASL Web, Updates to reporting engine
  - Update, ASL Web, adds fallback to tld trigger; cleaned up mysql during web validate
  - Update, AUM, Add all blacklists to update event
  - Update, AUM, Add Timestamp checking to download event for files
  - Update, Core, Add TSA dir for dynamic data tracking to tortixd
  - Update, Firewall, Added in logic to prevent 127/localhost from ever being shunned to the active-response table
  - Update, Firewall, Changed active-response asl-firewall init script to use its own chain
  - Update, Firewall, Updates to Firewall Intrusion Protection System
  - Update, Firewall, Move whitelist to load before other firewall elements
  - Update, Firewall, IP's on the whitelist will always be excluded from the blacklist rules
  - Update, Firewall, Move service acl's ahead of blacklists
  - Update, Firewall, Move blacklist to load ahead of RBL lists
  - Update, Firewall, Added in logic to check for firewall comment support and to not use comments on systems that dont have the module loaded
  - Update, Firewall, Added in legacy ip tracking modules to asl-kernel startup script for really really old kernels
  - Update, FIM, Ignore /usr/src by default
  - Update, hids_check, add option to enable/disable tcpwrappers active response
  - Update, installer, Add logging to uninstaller
  - Update, mod_evasive, Add more MSN/Bing ranges to mod_Evasive
  - Update, mysql_check, Add detection for wait_timeout, skip-networking, skip-name-resolve
  - Update, psa_check, add support for new proftpd.d/ structure.
  - Update, psa_check, use the new plesk 12 API to manage ssl settings. Move TLS files under /etc/proftpd.d/ structure. Retire the proftpd-tls.conf file and the fixed includes used in proftpd.conf
  - Update, T-WAF, Add ACL support 
  - Update, waf_check, add vulnerability checks for disabled rules by domain and globally
  - Feature Request #115, malware blacklist using ipset
  - Feature Request #900, add mod_qos support
  - Feature Request #1208, ASL Web: Add in firewall whitelisting 
  - Feature Request #1532, use swap in ipsets to eliminate outage window caused by loading the
  - Feature Request #1570, Add in "this may make several minutes" warning to "Checking versions ... "
  - Feature Request #1589, Flush all firewall rules on uninstall of ASL
  - Bugfix #1594, fixes force mode when enabling a rule
  - Bugfix #1600, lint whitelist entries in asl-firewall
  - Bugfix #XXX, ASL Web, corrects check against archive tables when searching the last week
  - Bugfix #XXX, ASL Web, fixes bug in geo lookup in report windows
  - Bugfix #XXX, ASL Web, corrects handling of garbage results when fetching scan/aum log updates
  - Bugfix #XXX, ASL Web, fix parent tags in asl-web for non string types
  - Bugfix #XXX, Core, handling for 0 byte rules file
  - Bugfix #XXX, hids_check, fix ossec-execd check is still made if ACTIVE_RESPONSE is disabled
  - Bugfix #XXX, psa_check, Minor fix to exclude plesk 9 configs from plesk 12 and up
  - Bugfix #XXX, rblcheck, fix email reporting for rbl check subsystem 
  - Bugfix #XXX, T-WAF, remove t-waf configs if waf is disabled


author: Support <support@atomicorp.com> - 4.0.7-18
changelog:
  - Add SSL Protocol management for apache SSL
  - Add Ciphersuite management for apache SSL
  - Add SSL Protocol management for Courier POP/IMAP 
  - Add remote syslog/secure syslog server management
  - Add support to archive logs to Amazon glacier
  - Update Core, adds ip address to debug / completed with errors output from cli
  - Update Core, skips sig reload during whitelist add/remove events
  - Bugfix #XXX, suppress ipset delet message output
  - Bugfix #XXX, ASL Web, correct issue with adding/removing vhost settings in asl web
  corrects wildcards when running malware scans from web
  - Bugfix #XXX, ASL Web, fix condition  with scan results not being handled correctly in ASL Web


