blob: d7d48a70c9dc997790a0191a2fa1d5b640767ba6 [file] [log] [blame]
Bart De Schuymer18f501e2005-10-20 17:47:43 +0000120052010
2 Since last entry:
3 * ebtables modules are now located in /usr/lib/ebtables/
4 * added '/sbin/service ebtables' support
5 * added ebtables-save and ebtables-restore (the first one
6 a perl script, the second one written in c (fast)
7 * optimized the code for the '-A' command, making ebtables-restore
8 very fast.
9 * ebtablesd/ebtablesu is deprecated and not compiled by default
10 the ebtables-save/ebtables-restore scheme is much better
Bart De Schuymer6622a012005-01-19 21:09:05 +00001120051701
12 Since last entry:
13 * added ulog watcher
14 * made the ebtables code modular (make library functions).
15 * added the ebtablesd/ebtablesu scheme to allow faster
16 addition of rules (and to test the modular code).
17 * some small fixes
Bart De Schuymerff587202005-02-08 20:02:28 +000018 * added -c option (initialize counters)
19 * added -C option (change counters)
Bart De Schuymer519ebb72003-11-02 16:37:07 +00002020031102
21 Since last entry:
22 * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules
23 * <tommy_at_home.tig-grr.com> added limit match
Bart De Schuymer60c20092003-07-23 21:34:21 +00002420030724
Bart De Schuymer083ac212003-07-26 10:15:21 +000025 * added (automatic) Sparc64 support, thanks to Michael Bellion and
26 Thomas Heinz from hipac.org for providing a test-box.
Bart De Schuymer60c20092003-07-23 21:34:21 +00002720030717
28 * added stp frames match type
2920030713
30 * added support for deleting all user-defined chains (-X option
31 without specified chain)
Bart De Schuymer5fd425b2003-06-01 16:41:01 +00003220030601
33 * added --Lmac2
34 * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering
35 (experimental, kernel files are in the CVS)
36
3720030503
38 * added negative rule counter support
39 * bugfix: bcnt was not updated correctly
40 * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC
41 matching support
42 * added pkttype match
Bart De Schuymer36aee752003-04-01 16:59:57 +00004320030402
44 * fixed check bug in ebt_ip.c (report from
45 joe_judge_at_guardium.com).
4620030111
47 * fixed problem when removing a chain (report from
48 ykphuah_at_greenpacket.com).
49 * Added --help list_extensions which, well, lists the extensions
Bart De Schuymer27b121c2002-12-03 20:53:19 +00005020021203
51 * changed the way to use the atomic operations. It's now possible
52 to use the EBTABLES_ATOMIC_FILE environment variable, so it's no
53 longer necessary to explicitly state the file name. See the man.
Bart De Schuymer832f09c2002-11-20 19:40:28 +00005420021120
55 * changed the way of compiling. New releases will now contain their
56 own set of kernel includes. No more copying of kernel includes to
57 /usr/include/linux
58 * added getethertype.c (Nick) and use it. Removed name_to_number()
59 and number_to_name().
6020021106
61 * added possibility to specify a rule number interval when deleting
62 rules
6320021102
64 * added ! - option possibility, which is equivalent to - ! option
6520021102
66 * since last entry: added byte counters and udp/tcp port matching
Bart De Schuymerb44c5f42002-08-30 20:33:36 +00006720020830
68 * updated the kernel files for 2.4.20-pre5 and 2.5.32
69 * last big cleanup of kernel and userspace code just finished
7020020820
71 * ARP module bugfix
72 * IP module bugfix
73 * nat module bugfix
Bart De Schuymerb2c4e372002-07-30 20:59:17 +00007420020730
75 * other things done before 2.0-rc1 that I can think of,
76 including kernel:
77 * cache align counters for better smp performance
78 * simplify snat code
79 * check for --xxxx-target RETURN on base chain
80 * cleanup code
81 * minor bugfixes
8220020724
83 * code cleanup
84 * bugfix for --atomic-commit
Bart De Schuymera501b782002-07-20 16:15:39 +00008520020720
86 * added mark target+match
Bart De Schuymer52b6fd22002-07-14 19:23:56 +00008720020714
88 * added --atomic options
8920020710
90 * some unlogged changes (due to lazyness)
91 * added --Lc, --Ln, --Lx
Bart De Schuymerfc62a342002-06-25 21:11:40 +00009220020625
93 * user defined chains support: added -N, -X, -E options.
Bart De Schuymer41e8a192002-06-23 08:03:12 +00009420020621
95 * some unlogged changes (due to lazyness)
96 * change the output for -L to make it look like it would look when
97 the user inputs the command.
98 * try to autoload modules
99 * some minor bugfixes
100 * add user defined chains support (without new commands yet,
101 deliberately)
102 * comparing rules didn't take the logical devices into account
Bart De Schuymer1abc55d2002-06-01 19:23:47 +000010320020520
104 * update help for -s and -d
105 * add VLAN in ethertypes
106 * add SYMLINK option for compiling
10720020501
108 * allow -i and --logical-in in BROUTING
109 * update the manual page
110 * rename /etc/etherproto into /etc/ethertypes (seems to be a more
111 standard name)
112 * add MAC mask for -s and -d, also added Unicast, Multicast and
113 Broadcast specification for specifying a (family of) MAC
114 addresses.
11520020427
116 * added broute table.
117 * added redirect target.
118 * added --redirect-target, --snat-target and --dnat-target options.
119 * added logical_out and logical_in
120 * snat bugfix (->size)
12120020414
122 * fixed some things in the manual.
123 * fixed -P problem.
12420020411
125 * -j standard no longer works, is this cryptic? good :)
126 * lots of beautification.
127 - made some code smaller
128 - made everything fit within 80 columns
129 * fix problems with -i and -o option
130 * print_memory now prints useful info
131 * trying to see the tables when ebtables is not loaded in kernel
132 no longer makes this be seen as a bug.
13320020403
134 ebtables v2.0 released, changes:
135 * A complete rewrite, made everything modular.
136 * Fixed a one year old bug in br_db.c. A similar bug was present
137 in ebtables.c. It was visible when the number of rules got
138 bigger (around 90).
139 * Removed the option to allow/disallow counters. Frames passing
140 by are always counted now.
141 * Didn't really add any new functionality. However, it will be
142 _alot_ easier and prettier to do so now. Feel free to add an
143 extension yourself.
144 * There are 4 types of extensions:
145 - Tables.
146 - Matches: like iptables has.
147 - Watchers: these only watch frames that passed all the matches
148 of the rule. They don't change the frame, nor give a verdict.
149 The log extension is a watcher.
150 - Targets.
151 * user32/kernel64 architectures like the Sparc64 are unsupported.
152 If you want me to change this, give me access to such a box,
153 and don't pressure me.