Skip to content

Changelog

What changed, release by release.

A summary of what matters to people using the product. The agent updates itself, in stages, from the dashboard.

  1. Agentv1.0.12

    Per-block firewall read

    • The agent reads the kernel and checks three things: the INPUT jump to ATALINCE-BANS, the drop rule and the IP in the set. This is the trail's “Firewall read verified” step.
    • A failed read is not counted as success: the block stays unknown in the dashboard.
    • IPv6 written differently by ipset no longer causes a false missing.

  2. Dashboard

    Founders program

    • Application, team approval and activation of the Founders plan: Pro features on up to 3 servers for 12 months.

  3. Agentv1.0.11

    Attacked port and a sturdier SSH source

    • SSH, MySQL/MariaDB, PostgreSQL, MongoDB and FTP events now show the attacked port.
    • If syslog stops writing auth.log, the agent switches to journald on its own.

  4. Agentv1.0.10

    More signals for the intelligence network

    • Platform sensors now record attempts on more protocols (SSH, Telnet, FTP, mail, databases and web).

  5. Dashboard

    Slack and Telegram alerts

    • New alert channels on the Pro plan, alongside email and webhook.

  6. Agentv1.0.8

    Malware sources from the dashboard

    • The YARA engine, rules and hashes are now distributed by the dashboard. Nothing extra to install.
    • Updates no longer download tools that are already installed.

  7. Agentv1.0.7

    Docker with nftables

    • Servers using Docker's nftables backend now have published ports covered.
    • ipset is installed on older servers that didn't have it yet.

  8. Agentv1.0.6

    Scans, floods and integrity

    • Port scans detected by the kernel.
    • Flood only counts inbound connections, on IPv6 too.
    • A single integrity monitor, with an on-disk baseline.

  9. Agentv1.0.4

    Docker published ports

    • Blocks, manual rules and geoblocking now also apply to ports published by Docker (Coolify, Compose).

  10. Agentv1.0.2

    Coexisting with other tools

    • atalince's rules sit right after chains that only drop (mailcow, fail2ban, manual DROPs), without fighting for the first position.
    • On key-only servers, attempts against existing users now count. IPv6 addresses are detected correctly.

  11. Agentv1.0.0

    First distributed release

    • Installer at get.sentinnel.com.br, no questions asked.
    • Signed manifest (ed25519) with SHA-256 per architecture, amd64 and arm64.
    • Updates driven by the dashboard, in stages, with rollback on crash loops.