210 lines
7.6 KiB
Plaintext
210 lines
7.6 KiB
Plaintext
20111215
|
|
Changelog for v2.0.10-4
|
|
* really fix counter setting bug (thanks to James' persistence)
|
|
20111204
|
|
Changelog for v2.0.10-3
|
|
* fix counter setting bug (reported by James Sinclair)
|
|
20110710
|
|
Changelog for v2.0.10-2
|
|
* enable compiler optimizations (-O3)
|
|
* small changes to remove the compiler warnings due to optimization being
|
|
turned on (thanks to Peter Volkov)
|
|
* respect LDFLAGS in Makefiles (Peter Volkov)
|
|
20110710
|
|
Changelog for v2.0.10-1
|
|
* fix --among-dst-file, which translated to --among-src
|
|
(reported by Thierry Watelet)
|
|
* fix bug in test_ulog.c example
|
|
* Makefile: respect LDFLAGS during ebtables build (Peter Volkov)
|
|
* Makefile: create directories to avoid build failure when DESTDIR is
|
|
supplied (Peter Volkov)
|
|
* incorporate fixes for possible issues found by Coverity analysis
|
|
(thanks to Jiri Popelka)
|
|
* define __EXPORTED_HEADERS__ to get access to the Linux kernel headers
|
|
* extend ebt_ip6 to allow matching on ipv6-icmp types/codes (by Florian
|
|
Westphal)
|
|
* Print a more useful error message when an update of the kernel table
|
|
failed.
|
|
* Add --concurrent option, which enables using a file lock to support
|
|
concurrent scripts updating the ebtables kernel tables
|
|
20100203
|
|
Changelog for v2.0.9-2
|
|
* fix unwanted zeroing of counters in the last user-defined chain
|
|
(reported by Jon Lewis)
|
|
* fix hidden symbol compilation error when using ld directly
|
|
* fix return value checking of creat to give a correct error
|
|
message if the atomic file couldn't be created
|
|
* correct info in INSTALL about compilation of ulog
|
|
20090621
|
|
Changelog for v2.0.9 vs v2.0.8-2
|
|
* added ip6 module for filtering IPv6 traffic (Kuo-Lang Tseng,
|
|
Manohar Castelino)
|
|
* added --log-ip6 option for logging IPv6 traffic (Kuo-Lang Tseng,
|
|
Manohar Castelino)
|
|
* added nflog watcher for logging packets to userspace (Peter Warasin)
|
|
* bugfix in ebtables.sysv (Michal Soltys)
|
|
* bugfix for among match on x86-64 (reported by Pavel Emelyanov)
|
|
20061217
|
|
Since last entry:
|
|
* fixed a few reported bugs
|
|
* ebt_among --among-dst-file and --among-src-file: allow
|
|
the list to be given in a file (circumvents command line max.
|
|
line length
|
|
* ebt_nat --snat-arp: if it's an arp packet, also change the source
|
|
address in the arp header
|
|
* ebt_mark --mark-or, --mark-xor, --mark-and
|
|
20051020
|
|
Since last entry:
|
|
* ebtables modules are now located in /usr/lib/ebtables/
|
|
* added '/sbin/service ebtables' support
|
|
* added ebtables-save (thanks to Rok Papez <rok.papez@arnes.si>)
|
|
and ebtables-restore (the first one a perl script, the second
|
|
one written in c (fast))
|
|
* optimized the code for the '-A' command, making ebtables-restore
|
|
very fast.
|
|
* ebtablesd/ebtablesu is deprecated and not compiled by default
|
|
the ebtables-save/ebtables-restore scheme is much better
|
|
20050117
|
|
Since last entry:
|
|
* added ulog watcher
|
|
* made the ebtables code modular (make library functions).
|
|
* added the ebtablesd/ebtablesu scheme to allow faster
|
|
addition of rules (and to test the modular code).
|
|
* some small fixes
|
|
* added -c option (initialize counters)
|
|
* added -C option (change counters)
|
|
20031102
|
|
Since last entry:
|
|
* <grzes_at_gnu.univ.gda.pl> added arpreply and among modules
|
|
* <tommy_at_home.tig-grr.com> added limit match
|
|
20030724
|
|
* added (automatic) Sparc64 support, thanks to Michael Bellion and
|
|
Thomas Heinz from hipac.org for providing a test-box.
|
|
20030717
|
|
* added stp frames match type
|
|
20030713
|
|
* added support for deleting all user-defined chains (-X option
|
|
without specified chain)
|
|
20030601
|
|
* added --Lmac2
|
|
* <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering
|
|
(experimental, kernel files are in the CVS)
|
|
|
|
20030503
|
|
* added negative rule counter support
|
|
* bugfix: bcnt was not updated correctly
|
|
* <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC
|
|
matching support
|
|
* added pkttype match
|
|
20030402
|
|
* fixed check bug in ebt_ip.c (report from
|
|
joe_judge_at_guardium.com).
|
|
20030111
|
|
* fixed problem when removing a chain (report from
|
|
ykphuah_at_greenpacket.com).
|
|
* Added --help list_extensions which, well, lists the extensions
|
|
20021203
|
|
* changed the way to use the atomic operations. It's now possible
|
|
to use the EBTABLES_ATOMIC_FILE environment variable, so it's no
|
|
longer necessary to explicitly state the file name. See the man.
|
|
20021120
|
|
* changed the way of compiling. New releases will now contain their
|
|
own set of kernel includes. No more copying of kernel includes to
|
|
/usr/include/linux
|
|
* added getethertype.c (Nick) and use it. Removed name_to_number()
|
|
and number_to_name().
|
|
20021106
|
|
* added possibility to specify a rule number interval when deleting
|
|
rules
|
|
20021102
|
|
* added ! - option possibility, which is equivalent to - ! option
|
|
20021102
|
|
* since last entry: added byte counters and udp/tcp port matching
|
|
20020830
|
|
* updated the kernel files for 2.4.20-pre5 and 2.5.32
|
|
* last big cleanup of kernel and userspace code just finished
|
|
20020820
|
|
* ARP module bugfix
|
|
* IP module bugfix
|
|
* nat module bugfix
|
|
20020730
|
|
* other things done before 2.0-rc1 that I can think of,
|
|
including kernel:
|
|
* cache align counters for better smp performance
|
|
* simplify snat code
|
|
* check for --xxxx-target RETURN on base chain
|
|
* cleanup code
|
|
* minor bugfixes
|
|
20020724
|
|
* code cleanup
|
|
* bugfix for --atomic-commit
|
|
20020720
|
|
* added mark target+match
|
|
20020714
|
|
* added --atomic options
|
|
20020710
|
|
* some unlogged changes (due to lazyness)
|
|
* added --Lc, --Ln, --Lx
|
|
20020625
|
|
* user defined chains support: added -N, -X, -E options.
|
|
20020621
|
|
* some unlogged changes (due to lazyness)
|
|
* change the output for -L to make it look like it would look when
|
|
the user inputs the command.
|
|
* try to autoload modules
|
|
* some minor bugfixes
|
|
* add user defined chains support (without new commands yet,
|
|
deliberately)
|
|
* comparing rules didn't take the logical devices into account
|
|
20020520
|
|
* update help for -s and -d
|
|
* add VLAN in ethertypes
|
|
* add SYMLINK option for compiling
|
|
20020501
|
|
* allow -i and --logical-in in BROUTING
|
|
* update the manual page
|
|
* rename /etc/etherproto into /etc/ethertypes (seems to be a more
|
|
standard name)
|
|
* add MAC mask for -s and -d, also added Unicast, Multicast and
|
|
Broadcast specification for specifying a (family of) MAC
|
|
addresses.
|
|
20020427
|
|
* added broute table.
|
|
* added redirect target.
|
|
* added --redirect-target, --snat-target and --dnat-target options.
|
|
* added logical_out and logical_in
|
|
* snat bugfix (->size)
|
|
20020414
|
|
* fixed some things in the manual.
|
|
* fixed -P problem.
|
|
20020411
|
|
* -j standard no longer works, is this cryptic? good :)
|
|
* lots of beautification.
|
|
- made some code smaller
|
|
- made everything fit within 80 columns
|
|
* fix problems with -i and -o option
|
|
* print_memory now prints useful info
|
|
* trying to see the tables when ebtables is not loaded in kernel
|
|
no longer makes this be seen as a bug.
|
|
20020403
|
|
ebtables v2.0 released, changes:
|
|
* A complete rewrite, made everything modular.
|
|
* Fixed a one year old bug in br_db.c. A similar bug was present
|
|
in ebtables.c. It was visible when the number of rules got
|
|
bigger (around 90).
|
|
* Removed the option to allow/disallow counters. Frames passing
|
|
by are always counted now.
|
|
* Didn't really add any new functionality. However, it will be
|
|
_alot_ easier and prettier to do so now. Feel free to add an
|
|
extension yourself.
|
|
* There are 4 types of extensions:
|
|
- Tables.
|
|
- Matches: like iptables has.
|
|
- Watchers: these only watch frames that passed all the matches
|
|
of the rule. They don't change the frame, nor give a verdict.
|
|
The log extension is a watcher.
|
|
- Targets.
|
|
* user32/kernel64 architectures like the Sparc64 are unsupported.
|
|
If you want me to change this, give me access to such a box,
|
|
and don't pressure me.
|