2023-09-04, v4.6.7.7
- Drop packet by request type before adding it into request queue.
- Baselist has been updated to 5041092.


2023-08-15, v4.6.7.6
- /bin/runcmd.* scripts added.
- Free Jahaslist license size has been increased to 30.
- Base request count for license checking has been increased to 4000.
- Baselist has been updated to 4938928.


2023-07-20, v4.6.7.4
- /webapps/example has been copied into /guipack/sandwatch.
- Baselist has been updated to 4858558.


2023-06-09, v4.6.7.3
- Support NxProxy for Android v1.0.1 has been added.
- RecatMan fetch size has been increased to 20.
- Baselist has been updated to 4723833


2023-06-01, v4.6.7.2
- NxProxy auto-switch option has been removed.
- NxProxy for Android support has been added.
- Sub-admins log in to dashboard when they have the permission to dashboard.
- 'Enable File Logging' option for Syslog setup has been added.
- Baselist has been updated to 4714398.


2023-05-09, v4.6.6.4
- Deal with '/NXP', '/NXR' protocol by hxlistener without TCP connection.
- Accept agent ping signal on every minute.
- Signal log not appearing bug has been fixed.
- Select first_catid as catid in TopReport DAO class.
- Logo on GUI has been changed.
- Baselist has been updated to 4667364.


2023-04-20, v4.6.6.3
- Send drop message to CxBlock and custom agent when it's dropped.
- Make a new query if the original query doesn't have UDP size value on DoHListner.
- System menu permission has been added for sub-admin.
- Baselist has been updated to 4667364.


2023-04-05, v4.6.6.2
- NxClassifier queue size has been adjusted to 2000.
- UdpEncoder has been activated.
- Not listening on TCP/443 port bug has been fixed.


2023-03-30, v4.6.6.1
- 'category_id' has been replaced with 'first_catid' in top category query.
- Detailed logging for LogFacade in case of job queue flooding.
- The default maximum memory allocation has been increased to 1GB.
- TcpTalkie.loginMd5 has been removed.
- Asynchronous login session sharing in cluster has been implemented.
- UdpListener runs on slave node as well for asynchronous login session synching.
- Slave to master login session synch will be done by UdpTalkie.
- Master to slave login session synch will be done by UdpTalkie and ConfigLoader.
- Open UDP/19004 from instsvc.bat when creating NxFilter service for Windows.
- Well known domain list has been updated and its size increased to 300,000.
- 'stop_auto_delete' option has been added to cfg.properties file.
- Cloudflare cache for NxLocal has been removed.
- 'System > Setup > Misc > Disable Version Check' option has been added.
- Baselist has been updated to 4638844.


2023-03-03, v4.6.5.4
- NxClassifier ruleset has been updated to 637.
- RequestHandler.isRqDropDomain bug for not bypassing local domain correctly
  when there are too many wating queries in the queue has been fixed.
- Conditional forwarder feature has been added.
- Baselist has been updated to 4537434.


2023-02-08, v4.6.5.3
- Bug for old GUI not adding Active Directory setup corretly has been fixed.
- Suppressing log for Azure username not found by CxLogon.
- Add Client IP into access violation email.
- Drop ANY type query at default for new installation.
- Baselist has been updated to 4507060.


2023-01-24, v4.6.5.1
- Use UDP socket for sending log data between cluster nodes.
- Enable Config.useLocalJahaslist flag for Globlist.
- The size of domain columns in DB have been changed to 255.
- Try to close DB connections in ShutdownHook.
- Delete orphaned traffic data overnight.
- Set RD flag into block message if there's a recursion request.
- Traffic database cleanup script name has been changed to 'dbclean.sh'.
- Defragment function has been added into cleanup script.
- Delete login session on every node in a cluster by 'DELETE LOGIN SESSION'
  button on user test page.
- User login, logout by webpage will be notified to slave nodes by ConfigLoader.
- Baselist has been updated to 4499042.


2023-01-03, v4.6.4.5
- Unused blocked reasons have been removed.
- Config.adwareCatid flag has been removed.
- Freemarker library has been removed.
- 'System > Alert > Alert Events' menu has been added.
- User password change form has been added.
- Language files have been updated.
- Baselist has been updated to 4487203.


2022-12-19, v4.6.4.3
- Language files have been updated.
- DnsSetup.httpsDnsTimeout has been added.
- Custom DNS server for DNS over HTTPS option has been added.
- Baselist has been updated to 4469622.


2022-11-25, v4.6.4.1
- Max persistent cache size has been adjusted to 300000.
- Delete persistent cache which is not updated for 7 days over night.
- Upstream DNS column size has been increased to 64.
- Baselist has been updated to 4467158.


2022-11-22, v4.6.3.9
- ClusterSync.addBlocklistData has been added.
- Showing parent group instead of child group bug fixed on 'User > Group'.
- 'Exclude Empty Group' option has been added for Active Directory importation.
- Multiple IP for MS DNS value not allowed bug has been fixed.


2022-11-08, v4.6.3.8
- Baselist has been updated to 4456696.


2022-10-14, v4.6.3.6
- rediDomain rule has been enabled for NxClassifier.findCategory.
- Baselist has been updated to 4443843.


2022-09-26, v4.6.3.5
- Add down time in slave down alert email.
- Realy agent counting by master node.
- Login failure message on user login page has been added.
- Default timezone from startup.sh has been removed.
- Baselist has been updated to 4435424.


2022-09-14, v4.6.3.4
- Unclass report to main server has been stopped. 
- Missing token for AD imported users have been restored. 


2022-09-08, v4.6.3.3
- Ignore PartialResultException from AdapImport for DC only AD domain.
- Baselist has been updated to 4458254.


2022-08-22, v4.6.3.2
- BlockDomainResolver.setMyIp method has been added.
- /IBR protocol for LocalListener has been removed.
- /LNZ protocol for HxListener has been removed.
- 'ip_session' table not updating on new user login bug has been fixed.
- /CXB protocol accepts Azure AD username.
- UserDic not reloading after Azure AD import bug has been fixed.
- Temporary whitelist bugs with Permanent, Group flags have been fixed.
- Drop Packet by Whitelist and Request Type Control will be working
  even if 'Filter A Query Only' option is enabled.
- Baselist has been updated to 4451596.


2022-08-06, v4.6.3.1
- To find logged-in user by index.jsp in real-time way.
- BlockDao.isBlankBlock has been deprecated.
- Email library has been replaced to javax.mail.
- Delete login sesseion by Reset Login Session button on User Test page.
- block,logout.jsp page has been added.
- Baselist has been updated to 4448535.


2022-07-31, v4.6.2.5
- 500 error for user,adap_edit.jsp has been fixed.


2022-07-21, v4.6.2.4
- NxResolver replaces UDP and DoH resolver.
- Test for policyGloblist.adRemove by RequestHandler has been disabled.
- GUI created users can belong to multiple groups.
- GroupDic.replaceMap method has been added.
- EdapDao has been removed.
- Baselist has been updated to 4440639.


2022-07-01, v4.6.2.2
- DBCP library has been updated to v2.9.0.
- DNS over HTTPS listener has been enabled.
- 'tcpNoDelay' flag set for the embedded Tomcat.
- Embedded Tomcat has been updated to v9.0.64.
- TLS v1.3 has been enabled for Tomcat.
- 'System > Mobile Config' menu has been added on SandWatch GUI pack.
- Login Page category has been added to Cloudlist.
- Set Config.publicBlockIp by an external HTTP query from HandyMan.
- Baselist has been updated to 4423977.


2022-06-15, v4.6.1.6
- 'Block CName Cloaking' option added on policies.
- 'Bypass DNS Checking' option added for blocklists.
- Baselist has been updated to 4412373.


2022-06-01, v4.6.1.5
- Disable CxBlock poicy when user authentication Disabled.
- IP range map not reloading bug fixed.
- Cloudlist mapping file updated to exclude Under Construction from Misc.
- Baselist has been updated to 4403363.


2022-05-19, v4.6.1.4
- recatPopup has been added to 'Logging > Request' on SandWatch GUI.
- Baselist has been updated to 4397052.


2022-05-02, v4.6.1.2
- ParamTest.isValidRegex() -> isValidClassificationRule().
- Query again when cloud classifier query times out.
- User login page alias to 'http://server-address/login' added.
- /LOGIN, /LOGOUT, /ADMIN responses added for IBR query by CxForward.
- Baselist has been updated to 4386741.


2022-04-22, v4.6.1.1
- Agent signal bypassing bug fixed.


2022-04-21, v4.6.0.9
- Send NXDOMAIN when it's for Blocked Request Type.
- prunsvr.exe has been removed.
- Temporary whitelist feature added.
- Faster loading method for whitlist applied.
- djmod219.jar, v3.6.0 has been updated.
- Server side support for CxForward auto-discovery added.
- Delete action not working bug on 'System > Cluster' fixed.


2022-04-09, v4.6.0.8
- JRE has been embedded into Windows package.
- Disable 'nxfilter' service by uninstalling DEB package.


2022-04-06, v4.6.0.7
- Time format bug fixed on 'Logging > Admin Activity'.
- Delete more than 1 year old admin activity log.
- Baselist has been updated to 4379872.


2022-04-02, v4.6.0.6
- 'config,*.jsp' -> 'system,*.jsp'.
- IMPORT/EXPORT buttons added on 'Category > System', 'Categry > Custom'
  , 'Classifier > Jahaslist'.
- 'DELETE ALL' button added on custom category edit page.
- Sub-admin and GUI permission feature has been added.
- 'Logging > Admin Activity' GUI menu has been added.
- Version check function has been moved into main process for faster GUI login.
- Baselist has been updated to 4374277.


2022-03-22, v4.6.0.5
- Don't do automatic MS update bypassing anymore.
- NxClassifier ruleset has been updated to 618-3.
- Domain pattern dictionary has been updated.
- Query through DNS protocol disabled for CloudClassifier.
- 'System > Alert', category missing bug fixed.
- Fetch limit on 'user,user.jsp' has been increased to 100000.


2022-03-15, v4.6.0.4
- Delete old jar files before install by DEB, EXE packages.
- 'System > Admin' page not working bug fixed.
- NxClassifier ruleset has been updated to 618-2.
- Baselist has been updated to 4098826.


2022-03-12, v4.6.0.3
- 'NEW AUTO-SWITCH DOMAIN' button has been added on 'Policy > NxProxy'.
- 'svrinfo.jsp' has been added into SandWatch.
- Sorting by hidden ctime added on 'Logging > *'.
- Safe-search enforcing for DuckDuckGo, Yandex has been added.
- GUI lanuge support for Chinese, Dutch, Japanese, Polish, Turkish, Vietnamese
  has been added.
- Baselist has been updated to 4097826.


2022-03-02, v4.6.0.2
- 'Config' has been changed to 'System' on top menu.
- Multi language support has been added.
- 'System > Setup > Misc > GUI Language' option has been added.
- 'System > Setup > Misc > GUI Date Format' option has been added.
- Arts, Books/Comics, Cults categories added to Cloudlist.
- Sandwatch has been updated to v1.0.0.1.
- Cloudlist trial license has been activated.


2022-03-02, v4.6.0.1
- 'Config' has been changed to 'System' on top menu.
- Multi language support has been added.
- 'System > Setup > Misc > GUI Language' option has been added.
- 'System > Setup > Misc > GUI Date Format' option has been added.
- Arts, Books/Comics, Cults categories added to Cloudlist.
- Sandwatch has been updated to v1.0.0.1.
- Cloudlist trial license has been activated.


2022-02-24, v4.5.4.5
- Domain pattern dictionary has been updated.
- Jahaslist update repository URL fetching bug fixed.
- Baselist has been updated to 4086209.
- Jahaslist category file has been updated.
- Policy level DNS type control has been removed.


2022-02-21, v4.5.4.4
- Data list added for username search on reports.
- Show empty user report when the user doesn't exist.
- Sorting by date on classifier,classified.jsp.
- Apply tab on whitelist rule edit page.
- Sandwatch has been updated to v0.9.9.5.


2022-02-14, v4.5.4.3
- Login session TTL reset button has been added on user test page.
- UserDic -> UserDic2 as it's different from NxCloud's UserDic.
- NxClassifier ruleset has been updated to 618.
- Baselist has been updated to 4057207.


2022-02-01, v4.5.4.2
- Sandwatch became the default GUI.
- Delete orphaned domain index data from cleanup script.
- Sandwatch has been updated to v0.9.9.2.
- Domain pattern dictionary has been updated.


2022-01-24, v4.5.4.1
- Embedded Tomcat has been updated to v8.5.75.
- CBC mode cipher has been removed for webserver security.
- JSP compiler target has been changed to 1.8.
- WebSockerHandler has been removed.
- Baselist has been updated to 4057161.


2022-01-10, v4.5.3.2
- Top report generation speed up by 25%.
- Faster search algorithm for traffic data has been applied.
- Filter 'A' Query Only option added on 'Config > Setup > Misc'.
- Sandwatch has been updated to v0.9.9.1.


2021-12-28, v4.5.3.1
- Set LibNet.gUserAgent value from '/nxfilter/conf/user-agent.txt' file.
- Lib.safeSubstring(uname, 20) when logging admin login username.
- Baselist has been updated to 4057146.


2021-12-06, v4.5.2.9
- UnivCache class has been added for speed up index.jsp response.
- Update notification email for the same version will not be sent again
while it's running.
- Baselist has been updated to 4054350.


2021-11-30, v4.5.2.9
- UnivCache class has been added for speed up index.jsp response.
- Update notification email for the same version will not be sent again
while it's running.
- Baselist has been updated to 4054350.


2021-11-09, v4.5.2.8
- Unicode domain names have been allowed on 'Whitelist > Domain' and
  'Category > Custom'.
- Don't add NxError when it's a license problem.
- Request.isEdnsFlag has been removed.
- Sandwatch has been updated to v0.9.8.8.
- Reset index.jsp during startup process.
- Baselist has been updated to 4042739.


2021-10-20, v4.5.2.7
- Add a negative cache when there are 5 empty responses continuously
  for the same domain.
- Several antivirus software related domains have been added into
  common-bypass.tpl file.
- Baselist has been updated to 4032373.


2021-09-27, v4.5.2.6
- Sandwatch has been updated to v0.9.8.7.
- Baselist has been updated to 4019926.


2021-09-15, v4.5.2.5
- Delete cache for admin login page on startup.
- Use 'https://' for login redirection URL when it's on TCP/443 port. 


2021-09-09, v4.5.2.4
- DoubleCheck thread for detecting master node down added.
- 'svrinfo.jsp' has been added.


2021-08-28, v4.5.2.3
- 500 error for 'Classifier > Classified' fixed.


2021-08-24, v4.5.2.2
- Baselist has been updated to 4000547.
- Sandwatch has been updated to v0.9.8.6.


2021-08-02, v4.5.2.1
- 'date_display' option added for configuration file.
- Sandwatch has been included.
- User expiration date selection bug fixed.


2021-07-19, v4.5.1.7
- Add record array length check into MsgUtil.getMinTtl.
- System exit when there's no 127.0.0.1 IP address to bind.
- Baselist has been updated to 3985278.


2021-06-21, v4.5.1.6
- Deal with 'REFUSED' return code for type 65 queries.
- Viewport meta tag added for default block page and welcome page.
- Duplicated entries for the same domain on 'Whitelist > Domain' blocked.
- Baselist has been updated to 3975892.


2021-05-28, v4.5.1.5
- Close LDAP connection before bail out from LdapUpdater.update.
- 'rss', 'feeds' subdomains excluded from NxClassifer domain scanning.
- Spaces to one space in Lib.escapeSql.
- Pie charts became clickable and linked to 'Logging > Request' search result.
- Baselist has been updated to 3965542.


2021-04-26, v4.5.1.4
- Category name change, Warez -> Warez/Torrent.
- Add custom category domain as lower case string.
- 'User > CxLogon' has been added.
- 'Auto-register for new users' option for CxLogon has been added.
- 'User > Mass Import' has been added.
- Baselist has been updated to 3947317.


2021-04-02, v4.5.1.1
- Cryptocurrency, Real Estate, Pets categories have been added to Cloudlist.
- Cryptocurrency, Pets categories have been added to Jahaslist.
- Well-known domain list has been updated.
- djmod.jar has been updated to v3.3.1.
- Bypass system block if it's a request from the server.
- Baselist has been updated to 3922792.
- NxClassifier ruleset has been updated to 574.


2021-03-24, v4.3.9.4
- Cache control scripts have been added.
- AttackerDic has been disabled as it's been replaced by ServerProtection.
- Remove noise words from title in NxClassifier.findCategory.
- NxClassifier ruleset has been updated to 445.
- Set '*_load_balance' to 'FALSE' at default.
- Baselist has been updated to 3894447.


2021-02-18, v4.3.9.2
- Adding default upstream server arbitrarily bug fixed.
- Allow non-standard SSL port for Alert Email.


2021-02-05, v4.3.9.1
- Change pipes to underscores for HX query.
- Allow non-standard DNS port into 'Upstream DNS Server' on 'DNS > Setup'.
- Baselist has been updated to 3751633.


2021-01-20, v4.3.8.9
- Unset Alert Categories at default.
- Use 'block_public_ip' option when it's actually set.
- Baselist has been updated to 3740797.


2020-12-18, v4.3.8.8
- Max file size for a blocklist has been increased to 30MB.
- Block by request type before attack domain detection.
- Baselist has been updated to 3727033.


2020-11-18, v4.3.8.7
- NxRelay policy update through HTTP added.
- Baselist has been updated to 3709649.


2020-10-21, v4.3.8.6
- '/nxfilter/conf/system-block.txt' added for System Block Domains.
- Baselist has been updated to 3694015.


2020-09-22, v4.3.8.5
- 'version.bat', 'version.sh' scripts have been added.
- Ruleset adjust for ordering Business category at the last.
- ReducedLog class added.
- Auto-switch support for filtering between NxProxy and NxFilter added.
- Exclude OPT record from Persistent Record cache deserializing.
- Baselist has been updated to 3677641.


2020-08-19, v4.3.8.2
- Baselist has been updated to 3641806.


2020-07-28, v4.3.8.1
- Bypass login redirection when it's AAAA query.
- To deal with TIME_KW from cloud classifier.
- Populate DNS access control from 'dns-allow-ip.txt' and 'dns-block-ip.txt'.
- To support domain mapping to user.
- 'DNS > Server Protection' menu added.
- Block by DNS request type feature added.
- NxClassifier.setExcludedFlag -> NxClassifier.setErrFlag.
- Show error reason on 'Classifier > Test Run'.


2020-07-07, v4.3.7.4
- Baselist has been updated to 3615648.


2020-06-19, v4.3.7.3
- NxClassifier.parseMetaRefresh bug fixed.
- NxClassifier ruleset has been updated to 442-2.
- Set retry count to 1 in for ResolverMan.
- Ignore additional records for Response.updateAnswerTtl().
- Baselist has been updated to 3570601.
- Cache refresh for every DNS request bug has been fixed.


2020-06-05, v4.3.7.2
- Don't start a new thread for upstream query.
- Rewrite ZoneTransfer and ZoneLookup classes according to library update.
- 'Allowed IP for Login Redirection' has been removed.
- New IP based access control, 'DNS > Access Control' has been added.
- Login redirection only works when it's A or AAAA query.
- Use IpRangeMap for UserDic.findByIp.
- Baselist has been updated to 3557219.


2020-05-25, v4.3.6.5
- Set restarter for MyClassifier.
- ServerProtection.TRIGGER_DOMAIN_CNT has been increased to 200.
- ServerProtection.TRIGGER_IP_CNT has been increased to 400.
- Safe-search CNAME domain cache bug fixed.


2020-05-07, v4.3.6.4
- 'TEST' button on 'Config > Alert' works with 'CC Recipients'.
- Don't use a temporary cache for frequently updated domains when they expire.
- Baselist has been updated to 3528535.


2020-04-23, v4.3.6.3
- NAPTR record parsing bug fixed for DoH.
- TLS support for alert email has been added.
- Email library has been updated to v1.5.
- Baselist has been updated to 3514959.
- top.jsp -> header.jsp, bottom.jsp -> footer.jsp.


2020-03-27, v4.3.6.2
- Timeout for DNS connection will be set inside ResolverMan.createResolver.
- Category name check on JahaslistDic.find.
- Password size limit has been increased to 128.
- Baselist has been updated to 3477079.


2020-02-24, v4.3.6.1
- Check null for NxErr.catnameLine.
- ServerProtection.TRIGGER_DOMAIN_CNT has been increased to 300.
- ServerProtection.TRIGGER_IP_CNT has been increased to 300.
- Whitelist will be applieed to 'Drop Attack Request By Domain'.
- Persistent cache TTL has been adjusted to 8 hours.
- 'Bypass Microsoft Update' option has been removed from GUI.
- '*.microsoft.com', '*.windowsupdate.com' will be exposed on 'Whitelist > Domain'.
- 'Silent Block' option added on 'Config > Setup'.


2020-02-06, v4.3.5.6
- NxClassifier ruleset has been updated to 442.
- Don't delete old traffic data on startup if it's deleted on midnight.
- 'cleanup.bat', 'cleanup.sh' scripts added for deleting old traffic data.
- Null pointer exception check for HttpsLookup.JsonToMsg has been added.
- Use 'dns.google' instead of 'dns.google.com' for DoH to Google DNS.
- Baselist has been updated to 3413419.


2020-01-08, v4.3.5.5
- Write domain, user, client IP counts by logAll data.
- Add default policyId and a new token for the new user by login request
  approval.
- Config.start_time has been added.
- Negative cache will be applied on IPv6 response.
- Baselist has been updated to 3335847.
- Display uptime on 'Report > Usage'.
- Set true to 'drop_attack_request_by_domain', 'drop_attack_request_by_ip'
  at default.


2019-12-04, v4.3.5.4
- djmod has been updated to 219.
- NxProxy support added.
- The number of users for a free Jahaslist license has been increased to 25.
- JSONObject with ordering added.
- Global.STATIC_KW, Global.BLOCK_KW added.
- Exporting Syslog in JSON format at default.
- block,proxy.jsp has been removed as a redundancy.
- External block redirection IP has been removed as a redundancy.
- IPv6 block redirection IP has been removed as a redundancy.
- Cache control by JSP code has been added into 'top.jsp'.
- 'Config > Admin > Client Password' has been readded.
- Baselist has been updated to 3266825.


2019-10-22, v4.3.5.3
- NxClassifier ruleset updated to 440-5.
- Globlist supports up to 5 policies.
- Baselist has been updated to 3179377.


2019-10-07, v4.3.5.2
- ServerProtection class added.
- Default request queue size has been increased to 2000.
- Jahaslist has been updated to 3140451.


2019-09-10, v4.3.4.9
- Trim the result of Config.getHostname.
- Answer 'use-application-dns.net' with NXDOMAIN.
- Jahaslist has been updated to 3086091.


2019-08-20, v4.3.4.8
- Use req_sum, block_sum for trend chart.
- nxlib.css has been updated to 4348.
- New popup form has been applied on 'Classifier > Classified'.
- 'Policy > Chromebook' has been removed.
- 'Config > Admin > Client Password' has been removed.
- Set line_cnt to 0 in BlocklistUpdate.setActiveThread.
- Jahaslist has been updated to 3048949.


2019-07-30, v4.3.4.7
- Info box color restored to the old green one.
- The initial LogCache size on master node limited to 100,000.
- ZoneTransfer.update not to block startup process.
- nxlib.css has been updated to 4347.
- FirstDao.getPolicyIdNameMap returning a sorted map added.
- Jahaslist has been updated to 3011156.


2019-07-20, v4.3.4.6
- Fieldset, legend for GUI have been applied.
- Pagination has been added on Whitelist and Policy.
- nxlib.css has been updated to 4346.
- Lazy loading for PolicyData.blockCategoryList and PolicyData.quotaCategoryList.


2019-07-10, v4.3.4.5
- DbMan.getDbJahastlist -> DbMan.getDbJahaslistMaster.
- Run BlocklistUpdate only when it's not a slave node.
- ClusterSync class for slave node added.
- nxd.cluster package has been separated.
- Jahaslist has been updated to 2956013.


2019-06-23, v4.3.4.4
- Use space as the delimeter for Allowed IP.
- Exact matching rule by adding a tailing dot introduced for Allowed IP.
- Slave node to use local Jahaslist at default.
- Read local license file first always.
- Local domain option added on User > RADIUS.
- Adding new users by 802.1x authetication.
- Restore IP session when NxFilter restarts.
- Lazy loading for slave node applied on LogWriter.loadLogCache.
- 'Config > VxLogon' -> 'User > VxLogon'.


2019-06-06, v4.3.4.3
- User login by RADIUS added.
- Jahaslist has been updated to 2841147.


2019-05-02, v4.3.4.2
- Cloudflare DNS server IP cache for NxLocal added.
- Verify Jahaslist size only when there's no search keyword on
  classifier,jahaslist.jsp.
- '/LNZ' protocol will be ignored over cloud.
- Delete old firewall rules in 'instsvc.bat'.
- '-' allowed in all 'name' properties.
- NxClassifier ruleset updated to 440-4.
- Jahaslist has been updated to 2762212.


2019-04-12, v4.3.4.1
- Validation check for '|)' for classifier rule.
- NxClassifier ruleset updated to 440-3.
- Wait 2 seconds for graceful shutdown on LocalListener.
- Increase ruleset modification count when it's through GUI.
- Add Local DNS and Local Domain into NxClient policy.
- NxLocal support added.
- Uppercases allowed on LDAP setup.
- '/LNZ' protocol added for CxBlock.
- 'ldap.admin' column size increased to 256.
- '-' allowed in group name.
- Jahaslist has been updated to 2730651.


2019-03-20, v4.3.3.9
- Graceful shutdown for LogWriter has been introduced.
- Copy 'nxfilter.service' into '/etc/systemd/system' by 'deb' package.
- Write a log message for master node down.
- Don't do login redirection on 'index.jsp' when 'Disable Login Redirection'
  option eabled.
- 'config.disable_login_redirection' column added into Local database.
- Warning when you have an incomplete copy of Jahaslist on Classifier > Jahaslist'.
- Whiteone.isGlobal bug with system block domains fixed.


2019-03-02, v4.3.3.8
- Multi-policy loophole with Globlist has been closed down.
- v4.3.3.8 of 'domain-pattern.txt' applied.
- Jahaslist has been updated to 2674438.
- New action-info CSS applied.


2019-02-25, v4.3.3.7
- 'Classifier > blocklist' menu added.
- New well known domain list applied.
- CategoryCustomDao.selectDomainCount added.


2019-02-12, v4.3.3.5
- Common bypass domain will not be loaded when the domain is already
  whitelisted on 'Whitelist > Domain'.


2019-02-11, v4.3.3.4
- v4.3.3.4 of 'domain-pattern.txt' applied.
- Config.DEFAULT_HTTPS_PORT set to 443.
- Custom domain related params moved into Global class.
- NxClassifier ruleset updated to 440-2.
- Select only the first 2,000 data for CategoryData.getDomainList.
- CategoryData.hasDomainList flag has been removed.
- Use ConcurrentHashMap for WhiteoneDic.domainMap.
- 'Whitelist > Common Bypass' added.
- New Jahaslist category 'Suspicious' added.
- Jahaslist has been updated to 2645292.


2019-01-16, v4.3.3.3
- Cloud classifier uses HTTPS only.
- SSL Certificate CN added on LDAP importation setup for using LDAPS
  protocol.
- NXZ format for Jahaslist import/export introduced.
- NxClassifier ruleset updated to 440.
- Jahaslist has been updated to 2583200.


2018-12-20, v4.3.3.2
- Check the specific 'listen_ip' rather than localhost if any IP specified
  when it starts.
- Jahaslist has been updated to 2554268.
- v4.3.3.2 of 'domain-pattern.txt' applied.


2018-11-26, v4.3.3.1
- Total bypass by whitelist applies first.
- Whiteone.systemBlock and DnsSetup.dropHostnameWithoutDomain work
  only on global level.
- Global level WhiteOne.bypassFilter bypasses attack domain detection.
- v4.3.3.1 of 'domain-pattern.txt' applied.
- Botnet detection rule adjusted to exclude valid subdomains.


2018-11-16, v4.3.2.9
- AttackerDic.isAttackDomain not bypassing 'A' type query bug fixed.
- Config.attackDomainCnt added.


2018-11-14, v4.3.2.8
- Cloud classifier feature added.
- DDOS protection by attacker target domain detection added.
- To be able to unset alert email address on 'Config > Alert'.
- NxClassifier ruleset updated to 439-2.
- Jahaslist has been updated to 2467342.
- 'Admin Password' -> 'Current Password' on Config > Admin.
- Add port number when it's redirected to login, logout domains.
- v4.3.2.8 of 'domain-pattern.txt' applied.


2018-10-18, v4.3.2.7
- Extract domain from URL on Domain > Test.
- v4.3.2.7 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to 439.
- Use LocalTalkie.clearJahasDicCache() on DAO classes.
- Jahaslist has been updated to 2443476.


2018-10-04, v4.3.2.6
- Allow zero classifier on slave node.
- DnsSetup.allowPtrForServerIp added.
- LoginListener.dealLoginPolicy removed.
- Include wildcard domain redirection into the redirection list for client.
- NxResolveRunnableMan.maxThreadNum has been increased to 2048.
- Config.queueFullExit flag has been removed.
- Drop queries except A, AAAA type queries when the request queue is full.
- Whiteone.systemBlockFlag added for blocking browser specific HTTPS DNS.
- Remove cache type check for negative cache.
- Cache ANY type query.
- Maximum number of custom classified domains set to 300,000.
- 'Policy > Chromebook' menu added for CxBlock.


2018-09-13, v4.3.2.5
- Support IPv6 safe-search forwarding by RespCache.
- Use cloned message on RespCache.
- NxClient policy disabled bug fixed.
- Jahaslist has been updated to 2392825.


2018-09-08, v4.3.2.4
- SafeCache related changes rolled back.


2018-09-06, v4.3.2.3
- Possible null pointer exception bug from MsgUtil.RecordArrayToString
  fixed.
- Process 'Bypass All' after local resolver forwarding.
- Null data permitted into persistent_cache.authority_arr column.
- Persistent cache not adding with Minimum Responses enabled bug fixed.
- SafeSearchCache class replacing RespCache for safe-search forward.
- Safe-search forward for IPv6 added.
- EDNS identifier verification enabled.


2018-08-29, v4.3.2.2
- JSP pages with 'noacl,' prefix will be regarded as user pages.
- Config.bypassEmptyDomain flag removed.
- Use LocalListener.loginMd5 on UserLoginDao.login.
- UTF-8 encoding applied on net.Talkie and net.Listener.
- '/CXB' protocol for base64 encoded username from CxLogon added.
- Redirection only works for A type query.
- Fix truncate table bug from v4.1.1 update.
- Create 'persistent_cache' table only if not exists on 4280 update.
- 'startsWith' check for Global.NSLOOKUP_DOMAIN on request handler.
- 'startsWith' check for Global.BLOCK_DOMAIN on request handler.


2018-08-18, v4.3.2.1
- Request.parseHttpsQuery works with the local bind IP other than '127.0.0.1'.
- Add a dot to a domain name on DnsListener if there's no tailing dot.
- When there's no associated user, relay signals and EDNS queries will be blocked
  instead of Login Redirection.
- DnsListener, HxListener will use Config.listenIP and Config.dnsPort.
- Initialize Request.realUname to an empty string rather than null.


2018-08-14, v4.3.2.0
- Thread pool applied on UDP client connection.
- Global.BLACKLIST_TYPE_NONE has been removed.
- Request.isUnsupportedProtocol flag has been removed.
- Jahaslist has been updated to 2352337.
- Bind on listenIP for DnsListener, HxListener, WebSocketHandler.
- Clean up additional section for relay signal.
- Listner for DNS over SSL enabled.
- Add one more NxError for NxRelay client IP.


2018-07-23, v4.3.1.1
- classifier.DomainQueue.size returns domainList.size.
- HtmlPatternDetector has been disabled.
- JahasUpdate().copyRulesetToSlaveLocalDb() added.
- NxClassifier ruleset updated to 438.
- Jahaslist has been updated to 2319531.


2018-07-15, v4.3.1.0
- Fail-safe with HTTPS DNS not working bug fixed.
- NodeTalkie.isAuthedUser removed since we can do it with LocalTalkie.
- Keep login session into local session map on UserLoginDao.login.
- Use file DB when it updates classifier ruleset.
- Call MsgUtil.sendBuf directly in MsgUtil.sendBlockMsg.
- Keep local copy of LastError map.
- Config.agentPolicyUpdatePeriod has been removed.
- 'Policy > Remote Filter' and 'Policy > Application Control' merged into
  'Policy > NxClient'.
- Minimum cache TTL and block cache TTL introduced.
- Dynamic DNS has been removed on GUI level.
- Detailed output from nxwrapper.exe applied.


2018-07-02, v4.3.0.0
- New persistent cache serialization scheme applied.
- License verification process by License Manager added.
- CxLogon support added.
- eDirectory link has been removed on top menu.
- Print agentName on log message on LoginListener.
- Group selectbox added on user edit page for manually created users.
- Jahaslist has been updated to 2279690.
- Send NX domain answer to private PTR query of we are not in a private
  network.
- Send NX domain answer when drop packet option enabled on 'DNS > Setup'.


2018-06-08, v4.2.7.0
- 4 digits version system introduced.
- NxClassifier.MAX_CONTENT_LEN increased to 500000.
- Exclude HTML comments from NxClassifier parsing.
- Send license expiration emails 5 times within 15 days before the
  expiration date.
- Redirection with '0.0.0.0' as a destination IP will be bypassed.
- Domain to IP redirection comes before domain to domain redirection.
- classifier.NxHtml.HtmlPatternDetector added.
- v4.2.7.0 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to 436.
- Jahaslist has been updated to 2236181.


2018-05-26, v4.2.6-p1
- DNS over HTTPS support added.
- ClassifierRulset.incModCnt added.
- 'No system categories' option has been removed.
- v4.2.6 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to 433.
- Jahaslist has been updated to 2179277.
- p1, Wildcard redirection added.
- p1, Bypass caching when there's no ARecord for an A type query.
- p1, JahaslistDic cache size increased to 300000.


2018-04-21, v4.2.5
- Maximum subdomain chopping count on JahasDic.findId adjusted to 5.
- Duplicated token check on UserDao added.
- User policy overrides group policy.
- Redundant 'catnameLine' and 'grpLine' have been removed from making unique
  keyword for logging.
- Active Directory integration over cloud with NxRelay added.


2018-04-02, v4.2.4
- 200 milliseconds delay for '/IBR' protocol added.
- '/PING' protocol added on HxListener.
- Remove 'Top User', 'Top Client IP' charts from user report.
- v4.2.4 of 'domain-pattern.txt' applied.
- Jahaslist has been updated to 2107631.
- NxClassifier ruleset updated to 420.1.
- VxLogon protocol bug with '.' in username fixed.


2018-03-08, v4.2.3
- Search keyword on UserDao to be applied on token column.
- v4.2.3 of 'domain-pattern.txt' applied.
- Not to add 'ns', 'mail' subdomains into NxClassifier queue.
- HX protocol sends domains instead of resolving them.
- Persistent cache reset for serialization ID change.
- Config.rqDropSize added for DDOS prevention.
- Add domain into NxClassifier queue even if it's classified by domain
  pattern analyzer.
- NxRelay support added.
- Message for free Jahaslist license on dashboard added.
- Adding 'continue' after 'allowedIpDic.isBypassAll'.
- Jahaslist has been updated to 2060034.


2018-01-31, v4.2.2
- Description field added on whitelist properties.
- HxListener added.
- DomainPatternDic enabled on Globlist.
- 'Proxy Filtering' -> 'Remote Filtering' on GUI.
- Windows installer to keep '/nxfilter/bin/startup.bat'.
- Deb package to keep '/nxfilter/bin/startup.sh'.
- '/nxfilter/bin/417-*.bat' scripts removed.
- v4.2.2 of 'domain-pattern.txt' applied.
- Jahaslist has been updated to 2005709.
- NxClassifier ruleset updated to 420.
- 'category_jahas' not populated bug fixed.


2018-01-10, v4.2.1-p1
- Run JahasUpdate.remoteRecat on slave node.
- JahasUpdate.loadBigList removed.
- JahaslistDao uses local DB when it's on slave node.
- Config.useLocalJahsalist flag added.
- 'Invalid License' on slave node with 20 user free license bug fixed.
- p1, NxClassifier.getDbJahaslist bug fixed.


2017-12-25, v4.2.0-p1
- Globlist added.
- LoginListener.dealHostLogout added.
- 'Web Hosting' category separation enabled.
- NxClassifier ruleset updated to v4.2.0.
- Don't send license expiration email in trial period.
- Biglist update disabled.
- Duplicated 'classifier_ruleset' loading message removed.
- Don't add an invalid request into request queue.
- p1, Enable custom category blocking on policy level.


2017-12-04, v4.1.9
- v4.1.9 of 'domain-pattern.txt' applied.
- Remove 'www.' when custom categorized domains merged into Jahaslist.
- Typo corrected on categories.txt, 'Iilegal' -> 'Illegal'.
- Maximum slave node number changed to 4.
- Separated system/custom category exportation added.
- Block domain removed from Config.isLoginDomain.
- Jahaslist has been updated to 1816518.
- v4.1.9 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to v4.1.9.
- 'nx' -> 'vx' on vxlogon table when new installation.


2017-11-07, v4.1.8-p2
- JahasDic.isBotnetDomainByConsonantCount added.
- Creating domain_unclass table only if it doesn't exist.
- NxClassifier ruleset updated to v4.1.8.
- Default memory allocation increased to 768 MB.
- New Windows service wrapper applied.
- VxLogon support added.
- Don't increase domain test count on dealAskDomainCatid.
- Jahaslist has been updated to 1722042.
- p1, Config.resetAcl table name bug fixed.
- p1, lib.css updated to 418.1.
- p2, v4.1.8 of 'domain-pattern.txt' applied.
- p2, Jahaslist has been updated to 1771263.


2017-09-12, v4.1.7
- Reset NxStats.domainTestCnt on midnight.
- Exception handling for AllowedIpDao.selectOne added.
- New top menu bar applied.
- v4.1.7 of 'domain-pattern.txt' applied.
- AdminLoginDao.updateLoginCnt removed.
- Jahaslist has been updated to 1670081.


2017-08-26, v4.1.6-p1
- Possible null pointer exception from LibFile removed.
- CSS alert popup applied on GUI.
- infoList, warnList added on lib.jsp.
- Bypass Request.parseRfSignal for 'ZX' custom protocol.
- Restore 'Block by Windows Title' for application control.
- Jahaslist has been updated to 1636933.
- p1, 'Block by Windows Title' has been disabled.


2017-08-01, v4.1.5
- Threshold for unclassifed report decreased to 10.
- Local NxClassifier.mcIdx hiding global one removed.
- Recategorization request started on 105 points.
- 'Web Hosting' category readded on Jahaslist.
- NxClassifier ruleset updated to 416.
- v4.1.5 of 'domain-pattern.txt' applied.
- User-agent string updated for NxClassifier.
- Typo corrected on categories.txt, 'IIlegal' -> 'illegal'.
- Only show search result on 'NxClassifier > Jahaslist'.
- Jahaslist has been updated to 1588849.


2017-07-10, v4.1.4-p1
- News -> News/Magazine on Jahaslist category.
- Don't report unclassified domains when JahasDic bypassing.
- Redundancy validity check for DomainDic.doesDomainExist removed.
- Bypass all by client IP on 'Config > Allowed IP' added.
- Jahaslist has been updated to 1550327.
- CategoryDic unsynchronized.
- Custom classified domain export/import added on 'Category > System'.
- p1, Bug with 'Bypassing by client IP' fixed.
- p1, ZoneLookup bug fixed.


2017-06-26, v4.1.3-p1
- DNS load balance option removed on GUI.
- Dynamic DNS setup menu separated.
- 'use_negative_cache' option added on 'DNS > Setup'.
- Negative cache TTL changed to 15 minutes.
- 'hide_ssl_warning' option on cfg.properties file added.
- Rebuild Jahaslist when it's smaller than 1,200,000.
- Max custom classified size adjusted to 300,000.
- v4.1.3 of 'domain-pattern.txt' applied.
- 'Jahaslist Repository' on 'NxClassifier > Setup' removed.
- DomainDic.unclassCntMap added.
- JahasDic cache enabled.
- 50 user trial license for Cloudlist included.
- Config.hostname added for alert email.
- p1, Default value of proxy filter cache TTL set to 300 seconds.
- p1, Possible DB connection leaking on JahaslistDao removed.
- p1, DynUpdate -> AdapResolver.
- p1, ZoneLookup works without a zone file for dynamic DNS domain.
- p1, Jahaslist has been updated to 1531417.


2017-05-30, v4.1.2-p2
- DomainDic.doesDomainExist only checks NX domain.
- Default value for classifier_setup.keep_html_text set to be 'TRUE'.
- Bypass NxClassifier.recat when Jahaslist update disabled.
- Custom category selection possible on recategorization from
  'Logging > Request'.
- Tutorial link in 'tutorial.bat' fixed.
- 1.4 million domains added into 'baselist.txt'.
- Import new domain only when it does biglist update.
- p1, Recat request disabled for custom categories.
- p1, Negative cache has been disabled temporarily.


2017-05-10, v4.1.1
- Clustering access control applied on DB connection.
- Modified h2db-1.3.176.jar having '-tcpAllowedIP' option applied.
- Block-page column size increased to 1,000,000.
- 'Block DNS Rebinding' on policy removed.
- NxClassifier works only against 'A' type query.
- StringBuilder used for Request.toLogLine and LogWriter.sendSysLog.
- 'Use Persistent Cache' option added on 'DNS > Setup'.
- 'Minimal Responses' option added on 'DNS > Setup'.
- Maximum response cache size increased to 10,000,000.
- Bypass Jahaslist update when there's no version file fetched.
- LookupHandler has been removed.
- Reset requestOverflowFlag when the request count resets.
- NxClassifier ruleset updated to 391.
- Null pointer exception from LdapUpdater.getLdapAgent fixed.
- Negative response cache up to 1 hour added.
- Showing cache size information on 'DNS > Setup'.
- Custom categorized domain table size increased to store 1,000,000 domains.
- Count only 'A' type request for license validation.


2017-04-17, v4.0.8
- Don't set blacklist type from master-node when it can't connect master-node.
- JahasDic.isIncompleteUpdate -> JahasDic.isCompleteUpdate.
- DomainDic.isLocalDomain -> !DomainDic.isInvalidDomainToCheck.
- NxClassifier ruleset updated to 388.
- 'DNS Setup > Misc > Drop Hostname Without Domain' added.
- 'DNS Setup > Misc > Drop PTR For Private IP' added.
- Domain pattern analyzer works only for cached domain to reduce CPU load.
- Domain pattern dictionary updated to v4.1.0.
- 'Without Youtube' option for safe-search added on a policy.
- LogData.zoneDomainFlag removed.


2017-04-05, v4.0.7
- JahasDic.find bypasses when it is doing the initial update for
  Jahaslist DB.
- Don't send an email alert for license expiration when it's not using
  any blacklist.
- DEFAULT_LOG_FLUSH_LIMIT set to 3000.
- WhiteoneDic.getWhiteone returns an empty one instead of null.


2017-03-30, v4.0.6-p2
- Faster Youtube domain checking applied.
- Faster whitelist checking applied.
- WhiteoneDic, Whiteone classes added.
- Drop packet option added on whitelist.
- Auto-switch to a free license from trial license for Jahaslist.
- Synchronize license request count to traffic DB count.
- p1, Bug with bypass authentication from 'whiteone == null' fixed.
- p2, Bug on 'block,proxy.jsp' for calling old API fixed.


2017-03-12, v4.0.5
- Delimeter for 'Allowed IP' changed to comma.
- '/GBI' protocol added for NxForward.
- On 'NxClassifer > Ruleset', 'REPLACE' button changed to 'IMPORT' button.
- Using comma for NxClassifer rule allowed.
- NxError.timestamp not set bug fixed.
- '/IBR' protocol returns always 'true' bug fixed.
- Set 'RA' flag on DNS response header.
- Unset 'AD' flag on response header when it is not set from an upstream server.
- Unset 'AD' flag on block redirection message header.
- Bypass OPT record from RespCache.find.
- Use IPv4 over IPv6 for IPv6 block redirection at default.


2017-03-07, v4.0.4-p2
- 'NxClassifier > Setup > Mass Import' has been removed.
- 'REPLACE' button added on 'NxClassifier > Ruleset'.
- 'IMPORT' button added on 'NxClassifier > Jahaslist'.
- eDirectory support added.
- Reclassify immediately when it is from NxClassifier.
- Syslog prefix not converted to upppercase bug fixed.
- Bypass RecatMan.recat for invalid domains.
- Log retention days can be set to 0.
- Possible NullPointerException in JahasUpdate.addBigList removed.
- Recat threshold for NxClassifier lowered to 120.
- User/request counting bypassed for no system category setup.


2017-02-06, v4.0.3
- ClassifiedData.getCtime format restored to 'MM/dd HH:mm'.
- login.css has been removed.
- v1.1 of 'domain-pattern.txt' applied.
- NxClassifier ruleset updated to 385.
- ClassifierRulsetDao.updateRulesetOld removed.
- classifier_ruleset.update_count column removed on a new installation.
- 'score' added on 'recat' table.


2017-02-01, v4.0.2
- Camel case notation applied.
- 'report_pw' on admin.jsp changed to 'rpw'.
- SLF4J introduced for enhancing logging performance.
- NxParam has been removed.
- Shallalist support has been removed.
- Cache DB connection not released bug on Main.deleteOld fixed.
- Sanitize HTML before NxClassifier.findCategory.
- Reclassifying on NxClassifer data updates ctime of its statistics.
- Only the group name being associated to the applied policy will be logged.
- Sending group name on Syslog exportation.
- Default values for DNS, HTTP connection, read timeout on NxClassifier increased
  to 6 seconds.
- NxClassifier finds a category by redirected domain when it gets redirected.
- Use placeholder for SQL with LogCache.
- Bypass Main.remoteUpdate on a slave node.
- New admin login page applied.
- Logging queue with LogFacade class added.
- Keep response cache when the connection to upstream server lost.
- Login-page, block-page, welcome-page template updated.
- LoginListener bypasses login when it gets a hostname not convertible to an IP.


2017-01-24, v3.4.9-p1
- Cache DB connection not relased bug on Main.delete_old fixed.
- Charset extraction regex pattern on NxClassifier updated.
- New domain pattern dictionary from v4 added.
- Auto-update for biglist for Jahaslist added.
- New ruleset for NxClassifier having 375 rules.
- Main.LdapUpdaterRestarter class added.
- Lazy loading for LogCache.domain restored to pre-loading.
- LogCache.find has been unsynchronized.


2016-12-22, v3.4.8-p1
- LDAP over SSL support added.
- LogWriter.flush before making report cache and delete old data.
- Apply 'Alert Category' option on domains blocked as 'Adware'.
- Add host IP on queue full alert email.
- Safe-search has been applied on 'youtube.googleapis.com'.
- LookupHandler not refreshing safe-search domain cache bug fixed.
- Safe-search to be working only for 'A' type DNS query.
- Google safe-search redirection will only be applied on its 'www'
  and 'encrypted' subdomain.
- Global.NX_DOWNLOAD link has been updated.
- Safe-search mode on policy has been introduced.
- Default value for 'max_slave_num' has been increased to 8.
- Whitelist not reloading after zone file deleted bug fixed.
- UserDao.select_one_by_name has been added.
- PolicyDao.select_one_by_name has been added.
- GroupDao.select_one_by_name has been added.
- Missing column for policy creation bug fixed.
- 'safe_search' on PolicyProxyDao has been removed.


2016-12-10, v3.4.7-p2
- LogWriter waits for flushing until traffic DB unlocked.
- Not able to set 'classifier_num' to 0 bug has been fixed.
- Jahaslist updated to 378336.
- NxClassifier ruleset updated to 381.
- Duplicated domain in 'domain_classified' table bug fixed.
- Logging bypassed when traffic DB locked.
- Performance enhancing by removing unnecessary volatile variables.


2016-11-10, v3.4.7
- Return on invalid protocol for WebSocketHandler.onTextMessage.
- User, Group classes moved into 'nxd.policy' package.
- NxError, LastError, BlockedReason classes moved into 'nxd.filtering' package.
- AD integration for NxBlock readded.
- 'Syslog port' option added on 'Config > Setup'.
- 'From Each Node' option for Syslog exportation added.
- 'Disable Login Redirection' option added on 'Config > Setup'.
- Sending alert email for queue full error.
- Lazy loading has been applied for LogCache.domain.
- LogCache.find has been synchronized.
- Highlight for blocked domains on 'Logging > Request'.


2016-10-24, v3.4.5
- Minimum TTL for safe-search domain and domain to domain response
  introduced.
- To read alert email template as a regular text file on AlertMan.
- CC recipients added for alert email.
- Bypass nightly report generating on a slave node.
- Return on invalid message for WebSocketHandler.onTextMessage.
- NxForward support added.
- 'Disable Default Repository' option added on 'NxClassifier > Setup'.


2016-10-02, v3.4.4
- 'queue_full_exit' option on cfg.properties added.
- Connection error count from DB not being reset bug fixed.
- Connection timeout and socket timeout for sending an email have been
  increased to 6 seconds.
- 'nxd.policy' package added.
- 'nxd.dns' package added.
- 'nxd.phome' package added.
- 'nxd.filter' package added.
- Adjustable query cache TTL introduced for proxy clients.


2016-09-19, v3.4.3
- Not refreshing expired CNAME cache on LookupHandler bug fixed.
- CSV log exportation limit incresed to 100,000.
- 'common_edge.css' has been removed.
- PrefixDic is not a Thread anymore.
- 'nxd.alert' package added.
- Path not allowed in IE proxy bypass.


2016-08-22, v3.4.2
- 'drop_empty_response' option added on cfg.properties.
- NodeTalkie doesn't try to connect when master node down.
- BlockPage gets a default NxError when master node down.
- Login to slave GUI when master node down allowed.
- Interval for finding the last error on BlockDao adjusted to 50.
- LogWriter flush interval to master node adjusted to 5 seconds.


2016-08-12, v3.4.1
- Redundant bootstrap directory has been removed.
- We don't load data on DynUpdate when we find a blank domain.
- License file sharing between cluster nodes bug fixed.


2016-08-06, v3.4.0
- Improved DataBase, RowSet classes applied.
- BlockDomainResolver returns '127.0.0.1' when there is no block
  redirection IP loaded on a slave node.
- Filtering still works on a slave node having master node down.
- Blacklist license update on GUI added.
- License policy changed.
- New authoritative DNS server module applied.
- URLBlacklist support has been removed.


2016-07-06, v3.3.4
- Client password for remote filtering agent added.
- Block by window title has been removed from application control.
- MS DNS IP validation removed for adding secondary DNS IP on Active
  Directory importation setup.
- Remove protocol from reclassification request.
- Bug for '172.16.x.x' with LibNet.is_private_ip method fixed.
- Authoritative flag unset from block redirection.
- LDAP importation bug in 'LdapUpdater.delete_user' fixed.


2016-06-14, v3.3.1
- New domain validation function applied for allowing the domains
  not having dot.
- Support for NxUpdate v1.x, NxClient v1.x stopped.
- Using standard DNS protocol for NxUpdate and NxClient signals and
  queries.
- Send error message to NxClient when authentication disabled.
- Remove duplicated username on the dropdown list on 'Report > Daily'.
- Keep LDAP DN for an LDAP imported user for LDAP login.
- 'nxd.ldap' package added.
- Add auth_drop_cnt instead of auth_redi_cnt when authentication not
  enabled.
- Set 'false' for 'follow_referral' on LDAP login.
- Version query signal added.
- Cache DNS response only when it has at least one A record.
- Removed redundant checking for empty message from response cache.
- UTF-8 support for Jahaslist remote repository text file.
- Not sending DNS response after caching bug from v3.3.0 fixed.
- LDAP import excluded keyword size increased to 2,000 bytes.


2016-05-22, v3.2.0
- NxClassifier ruleset type for HTML text added.
- 'Keep HTML Text' option added on 'NxClassifier > Setup'.
- Domain validation for whitelist has been removed.
- Drop packet when there is a response message having no record from
  an upstream server.


2016-05-07, v3.1.9
- Remove respawn option from Systemd script.
- 'enable_auto_update' flag removed from NxClassifier.
- Not to share login session when master node down.
- 'is_queue_full' flag removed from MasterCheck.
- 'IE Proxy Bypass' added on 'Policy > Proxy Filtering'.
- Typo on 'Config > Redirection' fixed.
- NxClassifier DNS checking bug fixed.


2016-04-28, v3.1.8
- Error message for upstream DNS query timeout added.
- DnsStats class added.
- Updating Jahaslist through remote repository added.
- Importing Jahaslist uses lesser memory.


2016-04-20, v3.1.7
- 'HTTP_RECAT_MAX_LINE' has been increased to 100000.
- Don't merge custom classified domains when it's not on Jahaslist.
- Remote update for NxClassifier ruleset disabled.
- 'IMPORT RULESET' on 'NxClassifier > Setup' changed to 'REPLACE RULESET'.
- Jahaslist can be updated without any existing data.
- 'recatlist.txt' in '/nxfilter/jahaslist'has been removed.
- Use 'img/pix.png' to express a horizontal line on GUI.
- Reading file line by line when it imports Jahaslist.
- 'Web Hosting' category added on Komodia mapping.
- Systemd auto-start script added on 'deb' package.
- 'Disable Auto Update' on 'NxClassifier > Setup' removed.
- 'Enable Auto Update' on 'NxClassifier > Setup' added.


2016-04-10, v3.1.6
- Set host IP only once for Syslog setup with system startup.
- Checking for empty DNS answer from cache added.
- 'Log Retention Days' length limit on GUI increased to 3.
- Separator for 'Slave IP' on 'config,cluster.jsp' changed to a comma.


2016-03-24, v3.1.5-p1
- Local DNS setup menu added on GUI.
- MS DNS setup menu added on GUI.
- Upstream DNS server load balancing option introduced.
- 'local_dns' and 'local_domain' disabled on cfg.properties.
- DNS level safe-search enforcing for Bing added.
- AD domain resolver not loaded bug fixed.


2016-03-08, v3.1.4-p2
- Use get_real_uname, instead of accessing real_uname directly.
- 'Log retention days' increased to 400.
- System domains bypassed for proxy filtering.
- Waiting for the block reason populated for 100 milliseconds.
- Lib.system_output gets string array as its parameter.
- Response cache returns null when it's type A record bug fixed.
- New TTL calculation with the elapsed time bug in response cache fixed.
- Google safe-search domain not updated on response cache bug fixed.


2016-02-16, v3.1.3
- Bypassing Active Directory domain to MS DNS server for unauthenticated
  users.
- 'Follow Referral' option added for Active Directory importation.
- '#{nx_name}' not populated on 'block,chrome.jsp' bug fixed.
- Active Directory DNS bypassing comes before zone file search.
- Zone trasfer search comes after zone file search.
- Zone Transfer option on Active Directory importation removed.
- New algorithm for calculating the remaining TTL of a cached record to setup
  the TTL for each record separately.
- 'bypass_cache_domain_list' param removed from cfg.propertis.


2016-02-08, v3.1.2
- Dynamic domain loaded with zero mtime bug fixed.
- Shallalist not including 'education/schools' bug fixed.
- Report on domain, user, client IP number missing bug fixed.


2016-02-04, v3.1.1-p1
- Dynamic DNS support added.
- Whitelist applied on safe-search.
- Delete temporary zone files nightly.
- Warning message for not enabling authentication on IP association
  to user.
- Reclassified domain being deleted bug fixed.


2016-01-23, v3.1.0-p2
- 'gob.xx' classified into government category.
- Authority DNS server feature added.
- DNS setup menu on GUI separated.
- Different CSS applied on MS browser.
- Wildcard lookup allowed on zone transfer.
- Bypass DNS query against '*.ip6.arpa '.
- 'block-time' on policy not reset bug fixed.
- 'clt_cache_ttl' column moved into 'dns_setup' table.


2016-01-04, v3.0.9
- 'reset_pw.bat' resets admin name to 'admin'.
- Set 'Config.admin_pw' from admin table.
- Recategorization requires to keep it for 3 days.
- Redirection works on total bypass and master node down.
- 'recatlist.ver' -> 'recatlist_ver.txt'.
- 'CDN' added for domain pattern dictionary.


2015-12-18, v3.0.8
- Minimum idle connection for DB pool changed to 10.
- Maximum idle connection for DB pool changed to 30.
- Sorting whitelist domains for NxClient.
- Remote update for Jahaslist when NxFilter starts.
- Bypass remote update when there's no data in Jahaslist.
- Possible connection leak from RecatMan fixed.
- Delete recategorization data before submitting.


2015-12-05, v3.0.7
- Safe-search redirection applied to 'youtubei.googleapis.com' and
  'www.youtube-nocookie.com'.
- Auto-update for NxClassifier ruleset added.
- Update count for NxClassifier ruleset introduced for auto-update.
- Policy based block-time added.


2015-11-19, v3.0.6
- Safe-search redirection applied to 'm.youtube.com'.
- Jahaslist auto-update disabled when domain pattern dictionary disabled.
- Case sensitivity problem with username for bandwidth control fixed.
- Bandwidth control, 2000MB for a user limit removed.


2015-11-04, v3.0.5
- HTML code input on 'GET/POST' requests blocked for preventing 'CSRF'
  attack.
- Javascript error for deleting custom categories fixed.
- Alert categories added on 'Config > Alert'.


2015-10-21, v3.0.4
- Remote Jahaslist recategorization list update added.
- DomainPatternDic updated.
- 1,000 user limit for user selectbox on report removed.
- 'RESTORE-DEFAULT' button added on 'NxClassifier > Ruleset' and
  'NxClassifier > Jahaslist'
- Unclassified domain cache removed.
- Remove admin session data when admin logout.
- admin.jsp?action=logout -> admin.jsp?action_flag=logout.
- On log-view, hovering on category will show all the categories if there
  are multiple categories.


2015-10-04, v3.0.3
- Domain process queue size for NxClassifier adjusted to 10000.
- Internal lookup_map size for domain process queue of NxClassifier adjusted
  to 1000.
- SQL error for 'is_already_classified()' fixed.


2015-10-03, v3.0.2
- InvaludContentTypeException class readded.
- Missing Lib.chop_subdomain() restored.
- Excluded list added for NxClassifier.
- Max redirection count for NxClassifier increased to 5.
- Unclassified cache bypassed for Jahaslist and Shallalist.


2015-10-02, v3.0.1-p1
- ShallaUpdate, BlacklistUpdate classes moved into 'nxd.util' package.
- Remove 'www.' from reclassification request.
- Jahaslist added.
- Auto-classification by NxClassifier added.
- Multi-bytes character support for block-page added.
- 'TEST' button added for alert email setup.
- Use ParamTest instead of ParamValidator.
- Ciphers defined for Tomcat to solve 'ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY'
  error on Chrome.
- Not being able to select Shallalist on 'Category > System' bug fixed.


2015-08-27, v2.8.7
- New responsive login form template added.
- 'webapps/lib/jquery-1.11.3.min.js' added.
- 'webapps/lib/jquery.cookie.js' added.
- 'webapps/lib/bootstrap.min.css' added.
- CSS and Javascript file inclusion moved into 'top.jsp'.
- Preview script on 'Config > Block Page' changed to use 'document.write()'.


2015-08-20, v2.8.6
- Keep logging for request IP address for admin login.
- New parsing algorithm for DomainPatternDic added.
- Tracker domain separated from Ads domain for DomainPatternDic.
- Missing data sanitization on WhitelistDao.update() added.
- Only one category for a custom categorized domain allowed.
- Domain reclassification popup on log-view added.
- Bypass LDAP synch when there's read timeout error.
- AutoCloseable DataBase and RowSet classes added.


2015-08-07, v2.8.5
- Recategorization request criteria activated.
- Log data not showing bug when you update from pre-v2.6.6 fixed.
- Block page size limit increased to 100 KB on validation.
- 'oem.properties' introduced.
- Update notification via alert email added.
- 'alert_email.ftl' template added.
- CNAME caching bug for safe-search fixed.


2015-08-01, v2.8.4
- Block page size limit increased to 100 KB.
- Bypassing 'Client Cache TTL' not working bug fixed.
- Response cache applied on DNS response having additional section.
- Use is_cached_once() instead of find() on DomainDic.
- 'moment.js' library removed from logging,*.jsp pages.


2015-07-24, v2.8.3
- 'EDIT' on 'Category > System' changed to 'ADD-DOMAIN'.
- Tomcat compilerSourceVM and compilerTargetVM set to 1.7.
- UserTestDao.find_user() method restored.


2015-07-16, v2.8.2
- PhishDao removed.
- DaoUtil introduced for simplifying GUI customization.
- 'use_phishtank' field from ConfigData removed.
- Domain validation blocking for IDN bug fixed.
- Single category preference applied for 'Download'.
- Use 'ParamValidator.ERR_USERNAME_CHAR' for username checking.
- Ambiguous action target bug for 'category,system.jsp' fixed.
- has_new_message() and get_popup() methods have been removed from
  AdminLoginDao.
- Javascript date calculation bug on report fixed.


2015-07-07, v2.8.1
- '/nxfilter/conf/prefix.txt' added for dynamic classification.
- '/nxfilter/conf/suffix.txt' added for dynamic classification.
- Datetime picker not selecting the days of last month bug fixed.
- Database connection hang on 'Policy > policy' problem fixed.
- CategoryData.get_domain_list() method for lazy loading added.
- 'moment.js' library removed.


2015-07-01, v2.8.0
- Adding domain into system category became possible.
- Dynamic classification based on domain pattern applied for Shallalist.
- Duplicated map data for traffic DB on cluster bug fixed.


2015-06-19, v2.7.9
- Special domain detection function added for Komodia.
- Single category preference applied for 'Home/Gardening'.
- Remove 'www' for Komodia query.
- User IP listing format applied.


2015-06-16, v2.7.8
- DynUpdate host checking obsoleted.
- Local domain excluded from Komodia query.
- Komodia query cache retention period increased to 7 days.
- Table name 'cache' changed to 'komodia'.
- Goverment category comes first when there are multi-categories for
  Komodia mapping.


2015-06-11, v2.7.6
- IPv6 redirection IP setup added.
- prunsrv.exe updated to v1.0.15.
- Zone transfer checkbox removed from new Active Directory importation
  setup.
- First login check for login through NodeListener.
- Bypass filtering for queue full error on slave node.
- Bypass domain existence checking for queue full error.


2015-05-10, v2.7.5
- 'no_share_session' option for cfg.properties added.
- 'Max domain length check' on policy bypassed at default.
- 'Block covert channel' on policy is off at default.
- 'Block mailer worm' on policy is off at default.
- 'Block DNS rebinding' on policy is off at default.


2015-04-26, v2.7.4
- Pre-cache bug with CNAME record fixed.


2015-04-20, v2.7.3
- Dropdown menu added.
- config,config.jsp -> config,setup.jsp.
- main,dashboard.jsp -> dashboard.jsp.
- CSS validated.
- /conf/komodia.map updated to fix some typo.


2015-04-09, v2.7.2
- 'show_netflow' option for cfg.properties added.
- Daily trend chart interval corrected to 3600.
- User traffic trend duplicated in report_cache bug fixed.
- User traffic trend only 23 hours display bug fixed.
- Domain, user, client-ip count on weekly report to show MAX value.
- 'chart3div' tag removed from report GUI.
- Minimum response cache size increased to 100,000.
- Maximum response cache size increased to 2000,000.
- Reset whitelist when it lose the last parent policy.
- chk_new_message() not to add blank line.
- Well known site list size increased to 100,000.


2015-03-30, v2.7.1
- Null data return for daily report bug fixed.
- Single category only for Komodia categories applied.


2015-03-27, v2.7.0
- Custom category domain limit increased to 100,000.
- daily_stats table added.
- request_traffic_5m, request_traffic_1h, real_user_count removed.
- 'syslog_only' flag added into cfg.properties.
- Authentication error with LDAP username having space allowed.
- Default data for empty trend chart added.
- LibDate.strftime_arr bug fixed.
- log_view, signal_view, netflow_view, hh24, category_count_5m removed.
- Daily report and weekly report being generated based on start date.
- Datetime picker added for log-view and report.
- Report caching structure redesigned.
- Delete old data on 02:00.
- Generating report cache for daily, weekly report on 03:00.
- 'stop_auto_report' option for cfg.properties added.
- 'ldap_conn_timeout' option for cfg.properties added.
- 'ldap_read_timeout' option for cfg.properties added.
- Swimsuit/Underwear category on Komodia map merged into Fashion/Beauty.
- h2-1.3.176.jar added.


2015-03-10, v2.6.5
- 'log_flush_limit' option for cfg.properties added.
- Komodia query only for existing domain.
- 'most_permissive' option for cfg.properties for multi-category permit.
- MIN_TTL set to 5 seconds for a response cache.


2015-03-03, v2.6.4
- DB_CLOSE_ON_EXIT=FALSE added in JDBC URL.
- cluster_monitor missing colummn bug fixed.
- Phishing related option for cfg.properties removed.
- report_server_ip option for cfg.properties for separating reporting
  DB added.
- Komodia 'Misc' mapping bug fixed.


2015-02-27, v2.6.3
- Syslog format changed to have 'NXFILTER' prefix.
- ShallalistUpdate to be using system DNS.
- Downloading the backup file from 'Config > backup'.


2015-02-11, v2.6.2
- License share between cluster nodes added.
- keystore_file, keystore_pass option added on cfg.properties for
  custom SSL certification.
- Multi-level domain chopping with Shallalist bug fixed.


2015-02-06, v2.6.1
- alert_email.ftl removed.
- Komodia dynamic classification not added into cache.
- Most specific IP range comes first rule for user association added.
- '/conf/komodia.map' updated to having 69 categories.


2015-02-01, v2.6.0
- Domain test protocol changed.
- Komodia cloud blacklist option added.
- URLBlacklist option on GUI removed.


2015-01-10, v2.5.3
- Quota reset not synchronized over cluster bug fixed.
- localhost excluded from DNS ACL for WebSoket.
- Chrome block-page not showing on HTTPS bug fixed.
- Proxy level redirection added.
- Bypass authentication doesn't apply on authenticated user.


2015-12-30, v2.5.2
- install_time added into config table.
- New block-page and login-page set added.
- Chrome agent support added.
- Wildcard, '*' support for whitelist keyword added.
- DNS level Youtube safe-search enforcing added.


2014-12-05, v2.5.1
- Only allows IP address for AD/LDAP host.
- Embedded Tomcat updated to v7.0.57.
- Proxy level domain redirection added.
- Bypassing IP host from forwarding query.
- Custom query parsing bug fixed.
- Java mail API updated to v1.5.1.


2014-11-27, v2.5.0
- Group account concept introduced.
- NxClient v4.0 support added.
- Showing real username from NxClient.
- no-usr, no-grp -> anon-user, anon-grp.
- Proxy log not display correctly with IDN bug fixed.
- zvelo_timeout option added into cfg.properties.
- Proxy blocked reason not display bug fixed.
- 'local_resolver_port' option added into cfg.properties.
- real_user_cnt table added for counting distinct logged-in username.
- Version check for agent added.


2014-11-12, v2.4.5
- Time format on 'Report > usage' changed.
- Log filename changed to 'nxfilter.log'.
- PTR record bypassed from 'Block unclassified' option.


2014-11-07, v2.4.4
- DNS level safe-search enforcing implemented.
- Safe-search option became policy specific.
- bypass_empty_domain option added into cfg.properties.


2014-10-30, v2.4.3
- Alert email showing detailed reason for proxy block.
- Usage report for recent 30 days added.


2014-10-20, v2.4.2
- is_valid_domain, is_valid_email moved into lib.jsp.
- Group specific free-time not updated bug fixed.
- Redirection domain timeout error fixed.
- Zvelo license alert email bug fixed.


2014-10-13, v2.4.0-p1
- Admin domain and DDNS domain bypassed from filtering.
- Reverse lookup domain added into DDNS domain lookup table.
- 'max_slave_num' variable added into cfg.properties.
- traffic_trend_5m -> request_trend_5m.
- Report cache file extension changed from 'xml' to 'txt'.
- Zvelo cloud option for blacklist added.
- Minimum length for name adjusted to 1.
- Phishing DB removed.
- 'www_dir' param introduced for easier customization of GUI.
- Default HTTPS port changed to 443.
- Temp direcotry under webapps moved into tmp/www.
- TCP port checking added into Windows setup.
- Checking blacklist_type disparity among cluster nodes.


2014-09-24, v2.3.0
- Faster startup time by reducing local port checking timeout.
- Performance increased by introducing thread safe map.
- Domain cache and unclassified cache introduced.
- Fusion chart compatibility removed.
- Locking algorithm redesigned for PhishiDic.
- ResponseCache redesigned using thread safe map.
- Default response cache size increased to 200,000.
- err_list removed from DAO.
- OpenLDAP import supports 'memberOf' attribute.


2014-09-02, v2.2.8
- STOP signal added for NxClient and NxUpdate.
- SWITCH signal removed.
- Default block page not showing bug with IE fixed.


2014-08-25, v2.2.7-p1
- IP session synchronize for login_policy only.
- StatsMaker thread bypassed for a slave node.
- Bypass cache if there's an authority or additional record.
- Slave node request count added into 'Config > cluster'.
- Javascript added for hiding embedded block-page.
- upstream_dns option added into cfg.properties.
- Sending rf_block_ip to local user bug fixed.
- Duplicated custom category name check added.
- Custom query support added.
- Single IP association comes before IP session.


2014-08-15, v2.2.6
- Slash relaced to back-slash on NxPath.
- Checking AD DNS server availability.
- use_local_dns param not used bug fixed.
- IPUPDATE signal ingnored if it comes from a static IP.
- Proxy, application error count added into report.
- tomcat.ks -> nxfilter.jks.
- dump_domain option for cfg.properties added.
- bypass_cache_domain option for cfg.properties added.


2014-07-22, v2.2.5
- Local DB initial copy routine at startup added.
- block_redi_ip, rf_block_redi_ip length adjusted to 100.
- Logout signal added.


2014-07-14, v2.2.4
- 'Request' -> 'User' on header of 'Logging > request' list.
- Array index overflow bug on logging across clustering nodes fixed.
- Load balancing for block reason added.
- Admin domain redirection rule added for clustering.
- top_nomenu.jsp, bottom_nocopy.jsp, action_info_nomenu.jsp removed.
- FusionCharts.js link removed from top.jsp.
- Program icon changed.


2014-07-01, v2.2.3
- Windows installer preserves previous config files with the introduction
  of default config files.
- Back-slash in NxPath replaced to slash.
- Regex removed from whitelist map.
- True bypass concept introduced.
- Login through NxLogon to slave node synchronized with master node.
- Adjust resolving order to prevent socket connection error on NxLogon.
- Bulk insert for custom category bug fixed.
- Load balancing for login, block redirection.
- Local cache DB added for load balancing.
- '/extra' directory and 'nxlogon.exe' removed for preventing false positives
  from some virus detection program.


2014-06-26, v2.2.2
- Forcing safe-search option through NxClient, NxLogon V2 added.
- URL keyword filtering through NxClient, NxLogon V2 added.
- Application control through NxClient, NxLogon V2 added.
- CharacterSet encoding removed from NxParam as a redundancy.
- Request object removed from AdminLoginDao.
- javax.naming.PartialResultException ignored by LdapAgent.
- '+' in application control rule changed to '*'.
- Minimum length(4) introduced for application control keyword.
- Empty record check for finding response cache added.
- application -> policy_application.
- Domain to domain redirection added.
- block_domain introduced.
- Fash-flux detection removed.
- IP based ACL for login redirection added.
- err_detail -> reason_detail.
- System domain concept removed.
- Log only applied to proxy policy.
- Whitelist domain, keyword for bypass filtering applied to proxy policy.
- Block IP host added to proxy policy.
- Using DynUpdate for AD domain resolving.
- Block other browser option added for proxy policy.
- Default number of request handler became 4.
- Default value for 'Log retention days' changed to 30.
- Timeout applied to TCP port checking at startup.
- Application block execution interval introduced.
- Included NxLogon updated to v1.5 having application blocking removed.
- Agent policy update period added on 'Config > config'.
- SMTP port reset bug on GUI fixed.
- Google chart not displaying for IE bug fixed.
- 'overflow: hidden' on 'div.hr' added into block-page template.


2014-05-18, v2.1.0
- Application control added.
- New NxLogon for killing UltraSurf and Tor processes.
- NxMapper for AD single sign-on support added.
- Per-user basis sum view added for 'Log > bandwidth'.
- '#{user}' variable supported on welcome page.
- Bordering spaces allowed in exclude keyword for LDAP import.
- Make a temporary copy for the request parameter map.
- Empty password for LDAP import allowed.
- '0:0:0:0:0:0:0:1' check for GUI restriction restored.
- Block, login, welcome page removed from GUI IP restriction.
- FusionChart library removed.


2014-04-28, v2.0.6
- Login redirection bug fixed.


2014-04-27, v2.0.5
- Login API through HTTP added for custom login script.
- Top 5 chart by client-ip added into daily and weekly report.
- Group or user exclusion by keyword for LDAP import added.
- Request, Response, Wonfig for GUI removed.
- Group specific free-time added.
- Free-time policy added on user, group list GUI view.
- User, group, policy, category variables added into block-page.
- Phishing host converted to lower case.
- Not selecting 'Same as work-time policy' for user-edit bug fixed.
- Free-time flag added in user-test view.
- 24:00 added for free-time setup.


2014-04-14, v2.0.4
- Logout-domain not working bug fixed.
- Correct cluster node downtime added into alert email.
- Slave node monitor added on 'Config > cluster'.
- Connection check from slave node startup readded.
- Action info missing on user,ldap_edit.jsp fixed.
- 'overflow: hidden' added for IE compatibility.
- Blocked IP for DNS added on 'Config > allowed-ip'.
- Concurrency bug with NxParam fixed.


2014-04-08, v2.0.3
- Report statistics cache added for faster report generation.
- NxClient signals removed from DNS packet.


2014-04-02, v2.0.2
- Netflow size format changed to human readable format.
- OpenLDAP support restored by user request.
- Cluster mode warning message added.
- Custom category not showing on policy bug fixed.
- Custom category domain limit bug fixed.
- Quota time not reset on midnight bug fixed.
- 'Duplicate headers returned by the server' on Chrome bug fixed.


2014-04-01, v2.0.1
- Whitelist keyword not realoading bug fixed.
- Null pointer exception from version check fixed.
- Bandwith synch bug when a cluster node died fixed.
- Block redirection not working on SSL bug fixed.


2014-03-30, v2.0.0
- New GUI component layer for easy customization applied.
- Google chart introduced for dashboard and report.
- Weekly report added.
- Block-page edit, preview on GUI supported.
- 'Config > alert' menu separated.
- Alert period introduced.
- Detailed statstics with request-count, request-sum and ip-count.
- no-user, no-grp introduced for default user and group name.
- Login redirection using login domain.
- Admin name introduced.
- 'Config > admin-pw' -> 'Config > admin'.
- user_ip index added.
- history_retention_period -> log_retention_period
- history -> log.
- OpenLDAP, eDirectory support removed.
- Variable names in access_violation.ftl changed.
- Use update button to change login-token.
- LDAP period caculation algorithm changed.
- div.hr class replacing hr tag for IE compatibility.
- Row highlight for list introduced.


2014-03-10, v1.7.6
- Alert interval changed to 5 minutes.
- Include SRV record for category lookup.
- RecordSet not closing bug from config, report fixed.
- Embedded Tomcat updated to v7.0.52.
- max_domain_len adjusted to between 0 and 1000.


2014-02-10, v1.7.5
- Alert email sender changed to admin email.
- Zone-transfer test button added.
- reset_acl util script added.
- table.view class added into common.css.
- log_blocked_only option added into cfg.properties.
- PTR record excluded from domain length checking.
- DB connection not closing bug after bandwidth data loading fixed.


2014-01-06, v1.7.4
- IE, Chrome compatibility enhanced for HR tag color.
- Stops on binding error for UDP 53 port.
- Zone-transfer interval adjusted to 5 seconds.
- Bypassing DDNS update message for Active Directory.
- File not close bug fixed on Logging > request.
- admin_pw removed from Config, Wonfig.


2013-12-20, v1.7.3-p1
- 'RF token' changed to 'Login token'.
- 'RF block redirection IP' changed to 'External redirection IP'.
- preferIPv4Stack option enabled for Tomcat.
- Time difference between user report and global report fixed.
- Policy specific ad-remove option added.
- Top 5 category chart added into dashboard.
- User specific top 5 category chart added into 24 hour report.
- Active Directory connection timeout changed to 5 seconds.
- Active Directory read timeout changed to 20 seconds.
- delete_old applied to signal and netflow data.
- Traffic column not updating for reducing update time.


2013-11-14, v1.7.2
- Changed several menu names, history -> logging or request.
- Fast-flux detection not disabled bug fixed.
- Domain lookup speed improved with new caching algorithm.
- Firewall rule added for TCP 80 port on Windows installer.


2013-10-27, v1.7.1
- Tutorial link added into the top menu.
- 'Response cache size' option moved into 'Config > config > DNS setup'.
- Connection pool leak on 'Config > config' fixed.
- SRV query excluded from domain name length filtering.
- GUI design layout changed.


2013-10-14, v1.7.0
- GUI view layer changed to JSP.
- Changing GUI template directory made to be possible.
- 'ad-remove' category introduced for removing embedded adverts.
- Initial password information added to admin login-page.
- 'Config > config' not updating bug fixed.


2013-10-09, v1.6.2
- Uncaught exception handler added for worker threads.
- Pagination HTML tag bug fixed.
- Admin domain added for accessing GUI using domain.


2013-10-05, v1.6.1
- local_dns, local_domain options added for bypassing NxFilter.


2013-09-22, v1.6.0
- Shallalist support added.
- Auto-backup retention period added.
- User select box error with IE, Chrome on report page fixed.
- Checking for URL insertion on whitelist by domain added.
- DB Query timeout applied for GUI.
- Script name changed, update-bl.bat to update_bl.bat.


2013-09-15, v1.5.4
- Bandwidth control added.
- Duplicated TTL manipulating routine removed.
- AD/LDAP login-page username changed to case-insensitive.
- Policy update error with empty category bug fixed.
- Username not found exception on per-user report fixed.


2013-08-29, v1.5.3
- User identification by ip-session comes before IP based user.
- Communication for history in clustering works asynchronous way.
- IP binding with local connection bug fixed.


2013-08-26 v1.5.2
- IP binding added.
- One to many relationship applied for whitelist and policy.
- Default list size of history, signal search changed to 200.
- CSV file export added for history.
- User, group relation not deleted on AD import bug fixed.


2013-08-19, v1.5.1
- OpenLDAP integration support added.
- Novell eDirectory integration support added.
- Client IP shown on user selection for per-user basis report.
- Clear button added in 'History > history' and 'History > signal'.
- Admin password reset util script added.


2013-08-10, v1.5.0
- Category top 5 chart added.
- Setting 'Max domain length' in policy not to 0 fixed.
- List order in GUI changed to ignore the case.
- Concurrency issue with block-page fixed.


2013-07-27, v1.4.9
- 'Block unclassified' option added into policy.
- DB connection not return bug on 'User > active-directory > import' fixed.
- Empty group allowed from AD import.


2013-07-21, v1.4.8
- User specific report added.
- User, Client IP linked in 'History > signal'.
- Exact matching keyword introduced into history search.


2013-07-14, v1.4.7
- Auto-backup for config DB added.
- Typo on 'Response cache size' removed.
- User, group, policy search option link on 'History > history'.
- Initial DB connection will be tried for 1 minute until it gets connected.
- http_port, https_port parameter added into cfg.properties.
- Group filter missing after navigation in history search fixed.


2013-07-07, v1.4.6
- IP based ACL for cluster node applied to database connection.
- Sending success message to NxUpdate.
- Bypassing AD update when it gets an empty data set.


2013-06-29, v1.4.5
- Dynamic IP update for client added.
- bypass_filter on per-policy whitelist enabled.
- Duplicated domain, keyword on whitelist allowed.
- Expiration-date display bug fixed.
- Quota reset bug fixed.


2013-06-25, v1.4.4
- Zone-transfer on AD import bug fixed.


2013-06-23, v1.4.3
- Per-policy whitelist/blacklist added.
- Response cache size option added.
- AD importation of computer account bug fixed.
- Default value for 'Max domain length' changed to 64.


2013-06-13, v1.4.2
- Zone transfer function added.
- Admin password reloading bug fixed.


2013-06-08, v1.4.1
- SPF record detection moved into 'covert channel'.
- Covert channel detection on CNAME, SRV response record added.


2013-06-01, v1.4.0
- Malware/Botnet detection added.
- Inspection on response packet added.
- DNS record type added in history, syslog exportation.
- Domain property added to active directory data.
- User move bug in group edit fixed.


2013-05-17, v1.3.1
- Alert mailing system revised.
- Time format changed in access violation email.
- Clustering node down alert email added.
- Whitelist overrides phishing protection.
- Simpler management for phishing protection.


2013-05-06, v1.3.0
- Load-balancing and fail-safe with clustering added.
- Login to multiple server function for nxlogon added.
- Opening Windows firewall port from the installer.
- prunsrv.exe for AMD64, IA64 removed from the package.
- NxClient separated from the package.


2013-04-22, v1.2.0
- Remote filtering client added.
- Auto-detection for 'NX_HOME' added.


2013-04-07, v1.1.5
- Expiration date for user account added.
- Checking JRE version from the Windows installer.
- Installing service option from the Windows installer.
- Bug fixed, user password update bug fixed.
- Bug fixed, ignore the DNS resolvers not responding.
- Bug fixed, logout not closing socket connection fixed.


2013-03-19, v1.1.4
- SRV record excluded from local DNS cache.
- Logoff script added for Active Directory.
- IP based ACL replaced to simpler one.
- IP based ACL for admin GUI added.
- Bug fixed, apply custom categories against IDN.


2013-03-12, v1.1.3
- Phishing protection overrides 'log_only' option in policy.
- 'admin_block' in whitelist overrides 'log_only' option in policy.
- Using '*' for including subdomains in whitelist and custom category.
- Summary statistics added in dashboard and report.


2013-03-07, v1.1.2
- System categories will not be appeared in policy-edit before populated.
- Bug fixed, Multi-category bug fixed.
- Bug fixed, default data for lunch-time bug fixed.


2013-03-01, v1.1.1
- Phishing DB update bug fixed.
- History search bug fixed.


2013-02-25, v1.1
- Phishing protection added.
- link to domain in history added.
- Bug fixed, free-time bug fixed.
- Bug fixed, group member assignment bug fixed.


2013-02-12, v1.0
- Single sign-on with Active Directory added.
- Dual policy setup, You can have work-time policy and free-time policy
  for user and group.
- Template for new policy creation added.
- 'Quota all' option for applying quota to all domain added.
- Javascript confirm message added for deleting data.
- IE compatibility improved.


2013-01-30, v0.91
- Mass toggle for blocked categories added.
- Syslog exportation added.
- Quota time added.
- Bug fixed, history, report custom date bug fixed.
- Bug fixed, possible deadlock in internal socket fixed.