blob: ac4455c5375d321e40bb5aa8653f2cf6f5b24640 [file] [log] [blame]
Bart De Schuymer81994bf2009-06-21 12:47:34 +0000120090621
2 Changelog for v2.0.9 vs v2.0.8-2
3 * added ip6 module for filtering IPv6 traffic (Kuo-Lang Tseng,
4 Manohar Castelino)
5 * added --log-ip6 option for logging IPv6 traffic (Kuo-Lang Tseng,
6 Manohar Castelino)
7 * added nflog watcher for logging packets to userspace (Peter Warasin)
8 * bugfix in ebtables.sysv (Michal Soltys)
9 * bugfix for among match on x86-64 (reported by Pavel Emelyanov)
Bart De Schuymer587fa8a2006-12-17 19:01:32 +00001020061217
11 Since last entry:
12 * fixed a few reported bugs
13 * ebt_among --among-dst-file and --among-src-file: allow
14 the list to be given in a file (circumvents command line max.
15 line length
16 * ebt_nat --snat-arp: if it's an arp packet, also change the source
17 address in the arp header
18 * ebt_mark --mark-or, --mark-xor, --mark-and
Bart De Schuymerea5364b2005-10-20 17:55:15 +00001920051020
Bart De Schuymer18f501e2005-10-20 17:47:43 +000020 Since last entry:
21 * ebtables modules are now located in /usr/lib/ebtables/
22 * added '/sbin/service ebtables' support
Bart De Schuymercaf261b2005-10-20 17:56:51 +000023 * added ebtables-save (thanks to Rok Papez <rok.papez@arnes.si>)
24 and ebtables-restore (the first one a perl script, the second
Bart De Schuymer587fa8a2006-12-17 19:01:32 +000025 one written in c (fast))
Bart De Schuymer18f501e2005-10-20 17:47:43 +000026 * optimized the code for the '-A' command, making ebtables-restore
27 very fast.
28 * ebtablesd/ebtablesu is deprecated and not compiled by default
29 the ebtables-save/ebtables-restore scheme is much better
Bart De Schuymerea5364b2005-10-20 17:55:15 +00003020050117
Bart De Schuymer6622a012005-01-19 21:09:05 +000031 Since last entry:
32 * added ulog watcher
33 * made the ebtables code modular (make library functions).
34 * added the ebtablesd/ebtablesu scheme to allow faster
35 addition of rules (and to test the modular code).
36 * some small fixes
Bart De Schuymerff587202005-02-08 20:02:28 +000037 * added -c option (initialize counters)
38 * added -C option (change counters)
Bart De Schuymer519ebb72003-11-02 16:37:07 +00003920031102
40 Since last entry:
41 * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules
42 * <tommy_at_home.tig-grr.com> added limit match
Bart De Schuymer60c20092003-07-23 21:34:21 +00004320030724
Bart De Schuymer083ac212003-07-26 10:15:21 +000044 * added (automatic) Sparc64 support, thanks to Michael Bellion and
45 Thomas Heinz from hipac.org for providing a test-box.
Bart De Schuymer60c20092003-07-23 21:34:21 +00004620030717
47 * added stp frames match type
4820030713
49 * added support for deleting all user-defined chains (-X option
50 without specified chain)
Bart De Schuymer5fd425b2003-06-01 16:41:01 +00005120030601
52 * added --Lmac2
53 * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering
54 (experimental, kernel files are in the CVS)
55
5620030503
57 * added negative rule counter support
58 * bugfix: bcnt was not updated correctly
59 * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC
60 matching support
61 * added pkttype match
Bart De Schuymer36aee752003-04-01 16:59:57 +00006220030402
63 * fixed check bug in ebt_ip.c (report from
64 joe_judge_at_guardium.com).
6520030111
66 * fixed problem when removing a chain (report from
67 ykphuah_at_greenpacket.com).
68 * Added --help list_extensions which, well, lists the extensions
Bart De Schuymer27b121c2002-12-03 20:53:19 +00006920021203
70 * changed the way to use the atomic operations. It's now possible
71 to use the EBTABLES_ATOMIC_FILE environment variable, so it's no
72 longer necessary to explicitly state the file name. See the man.
Bart De Schuymer832f09c2002-11-20 19:40:28 +00007320021120
74 * changed the way of compiling. New releases will now contain their
75 own set of kernel includes. No more copying of kernel includes to
76 /usr/include/linux
77 * added getethertype.c (Nick) and use it. Removed name_to_number()
78 and number_to_name().
7920021106
80 * added possibility to specify a rule number interval when deleting
81 rules
8220021102
83 * added ! - option possibility, which is equivalent to - ! option
8420021102
85 * since last entry: added byte counters and udp/tcp port matching
Bart De Schuymerb44c5f42002-08-30 20:33:36 +00008620020830
87 * updated the kernel files for 2.4.20-pre5 and 2.5.32
88 * last big cleanup of kernel and userspace code just finished
8920020820
90 * ARP module bugfix
91 * IP module bugfix
92 * nat module bugfix
Bart De Schuymerb2c4e372002-07-30 20:59:17 +00009320020730
94 * other things done before 2.0-rc1 that I can think of,
95 including kernel:
96 * cache align counters for better smp performance
97 * simplify snat code
98 * check for --xxxx-target RETURN on base chain
99 * cleanup code
100 * minor bugfixes
10120020724
102 * code cleanup
103 * bugfix for --atomic-commit
Bart De Schuymera501b782002-07-20 16:15:39 +000010420020720
105 * added mark target+match
Bart De Schuymer52b6fd22002-07-14 19:23:56 +000010620020714
107 * added --atomic options
10820020710
109 * some unlogged changes (due to lazyness)
110 * added --Lc, --Ln, --Lx
Bart De Schuymerfc62a342002-06-25 21:11:40 +000011120020625
112 * user defined chains support: added -N, -X, -E options.
Bart De Schuymer41e8a192002-06-23 08:03:12 +000011320020621
114 * some unlogged changes (due to lazyness)
115 * change the output for -L to make it look like it would look when
116 the user inputs the command.
117 * try to autoload modules
118 * some minor bugfixes
119 * add user defined chains support (without new commands yet,
120 deliberately)
121 * comparing rules didn't take the logical devices into account
Bart De Schuymer1abc55d2002-06-01 19:23:47 +000012220020520
123 * update help for -s and -d
124 * add VLAN in ethertypes
125 * add SYMLINK option for compiling
12620020501
127 * allow -i and --logical-in in BROUTING
128 * update the manual page
129 * rename /etc/etherproto into /etc/ethertypes (seems to be a more
130 standard name)
131 * add MAC mask for -s and -d, also added Unicast, Multicast and
132 Broadcast specification for specifying a (family of) MAC
133 addresses.
13420020427
135 * added broute table.
136 * added redirect target.
137 * added --redirect-target, --snat-target and --dnat-target options.
138 * added logical_out and logical_in
139 * snat bugfix (->size)
14020020414
141 * fixed some things in the manual.
142 * fixed -P problem.
14320020411
144 * -j standard no longer works, is this cryptic? good :)
145 * lots of beautification.
146 - made some code smaller
147 - made everything fit within 80 columns
148 * fix problems with -i and -o option
149 * print_memory now prints useful info
150 * trying to see the tables when ebtables is not loaded in kernel
151 no longer makes this be seen as a bug.
15220020403
153 ebtables v2.0 released, changes:
154 * A complete rewrite, made everything modular.
155 * Fixed a one year old bug in br_db.c. A similar bug was present
156 in ebtables.c. It was visible when the number of rules got
157 bigger (around 90).
158 * Removed the option to allow/disallow counters. Frames passing
159 by are always counted now.
160 * Didn't really add any new functionality. However, it will be
161 _alot_ easier and prettier to do so now. Feel free to add an
162 extension yourself.
163 * There are 4 types of extensions:
164 - Tables.
165 - Matches: like iptables has.
166 - Watchers: these only watch frames that passed all the matches
167 of the rule. They don't change the frame, nor give a verdict.
168 The log extension is a watcher.
169 - Targets.
170 * user32/kernel64 architectures like the Sparc64 are unsupported.
171 If you want me to change this, give me access to such a box,
172 and don't pressure me.