blob: d06964cef95b3d3267042eadfdb8f4058ec06d5f [file] [log] [blame]
Bart De Schuymerea5364b2005-10-20 17:55:15 +0000120051020
Bart De Schuymer18f501e2005-10-20 17:47:43 +00002 Since last entry:
3 * ebtables modules are now located in /usr/lib/ebtables/
4 * added '/sbin/service ebtables' support
Bart De Schuymercaf261b2005-10-20 17:56:51 +00005 * added ebtables-save (thanks to Rok Papez <rok.papez@arnes.si>)
6 and ebtables-restore (the first one a perl script, the second
7 one written in c (fast)
Bart De Schuymer18f501e2005-10-20 17:47:43 +00008 * optimized the code for the '-A' command, making ebtables-restore
9 very fast.
10 * ebtablesd/ebtablesu is deprecated and not compiled by default
11 the ebtables-save/ebtables-restore scheme is much better
Bart De Schuymerea5364b2005-10-20 17:55:15 +00001220050117
Bart De Schuymer6622a012005-01-19 21:09:05 +000013 Since last entry:
14 * added ulog watcher
15 * made the ebtables code modular (make library functions).
16 * added the ebtablesd/ebtablesu scheme to allow faster
17 addition of rules (and to test the modular code).
18 * some small fixes
Bart De Schuymerff587202005-02-08 20:02:28 +000019 * added -c option (initialize counters)
20 * added -C option (change counters)
Bart De Schuymer519ebb72003-11-02 16:37:07 +00002120031102
22 Since last entry:
23 * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules
24 * <tommy_at_home.tig-grr.com> added limit match
Bart De Schuymer60c20092003-07-23 21:34:21 +00002520030724
Bart De Schuymer083ac212003-07-26 10:15:21 +000026 * added (automatic) Sparc64 support, thanks to Michael Bellion and
27 Thomas Heinz from hipac.org for providing a test-box.
Bart De Schuymer60c20092003-07-23 21:34:21 +00002820030717
29 * added stp frames match type
3020030713
31 * added support for deleting all user-defined chains (-X option
32 without specified chain)
Bart De Schuymer5fd425b2003-06-01 16:41:01 +00003320030601
34 * added --Lmac2
35 * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering
36 (experimental, kernel files are in the CVS)
37
3820030503
39 * added negative rule counter support
40 * bugfix: bcnt was not updated correctly
41 * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC
42 matching support
43 * added pkttype match
Bart De Schuymer36aee752003-04-01 16:59:57 +00004420030402
45 * fixed check bug in ebt_ip.c (report from
46 joe_judge_at_guardium.com).
4720030111
48 * fixed problem when removing a chain (report from
49 ykphuah_at_greenpacket.com).
50 * Added --help list_extensions which, well, lists the extensions
Bart De Schuymer27b121c2002-12-03 20:53:19 +00005120021203
52 * changed the way to use the atomic operations. It's now possible
53 to use the EBTABLES_ATOMIC_FILE environment variable, so it's no
54 longer necessary to explicitly state the file name. See the man.
Bart De Schuymer832f09c2002-11-20 19:40:28 +00005520021120
56 * changed the way of compiling. New releases will now contain their
57 own set of kernel includes. No more copying of kernel includes to
58 /usr/include/linux
59 * added getethertype.c (Nick) and use it. Removed name_to_number()
60 and number_to_name().
6120021106
62 * added possibility to specify a rule number interval when deleting
63 rules
6420021102
65 * added ! - option possibility, which is equivalent to - ! option
6620021102
67 * since last entry: added byte counters and udp/tcp port matching
Bart De Schuymerb44c5f42002-08-30 20:33:36 +00006820020830
69 * updated the kernel files for 2.4.20-pre5 and 2.5.32
70 * last big cleanup of kernel and userspace code just finished
7120020820
72 * ARP module bugfix
73 * IP module bugfix
74 * nat module bugfix
Bart De Schuymerb2c4e372002-07-30 20:59:17 +00007520020730
76 * other things done before 2.0-rc1 that I can think of,
77 including kernel:
78 * cache align counters for better smp performance
79 * simplify snat code
80 * check for --xxxx-target RETURN on base chain
81 * cleanup code
82 * minor bugfixes
8320020724
84 * code cleanup
85 * bugfix for --atomic-commit
Bart De Schuymera501b782002-07-20 16:15:39 +00008620020720
87 * added mark target+match
Bart De Schuymer52b6fd22002-07-14 19:23:56 +00008820020714
89 * added --atomic options
9020020710
91 * some unlogged changes (due to lazyness)
92 * added --Lc, --Ln, --Lx
Bart De Schuymerfc62a342002-06-25 21:11:40 +00009320020625
94 * user defined chains support: added -N, -X, -E options.
Bart De Schuymer41e8a192002-06-23 08:03:12 +00009520020621
96 * some unlogged changes (due to lazyness)
97 * change the output for -L to make it look like it would look when
98 the user inputs the command.
99 * try to autoload modules
100 * some minor bugfixes
101 * add user defined chains support (without new commands yet,
102 deliberately)
103 * comparing rules didn't take the logical devices into account
Bart De Schuymer1abc55d2002-06-01 19:23:47 +000010420020520
105 * update help for -s and -d
106 * add VLAN in ethertypes
107 * add SYMLINK option for compiling
10820020501
109 * allow -i and --logical-in in BROUTING
110 * update the manual page
111 * rename /etc/etherproto into /etc/ethertypes (seems to be a more
112 standard name)
113 * add MAC mask for -s and -d, also added Unicast, Multicast and
114 Broadcast specification for specifying a (family of) MAC
115 addresses.
11620020427
117 * added broute table.
118 * added redirect target.
119 * added --redirect-target, --snat-target and --dnat-target options.
120 * added logical_out and logical_in
121 * snat bugfix (->size)
12220020414
123 * fixed some things in the manual.
124 * fixed -P problem.
12520020411
126 * -j standard no longer works, is this cryptic? good :)
127 * lots of beautification.
128 - made some code smaller
129 - made everything fit within 80 columns
130 * fix problems with -i and -o option
131 * print_memory now prints useful info
132 * trying to see the tables when ebtables is not loaded in kernel
133 no longer makes this be seen as a bug.
13420020403
135 ebtables v2.0 released, changes:
136 * A complete rewrite, made everything modular.
137 * Fixed a one year old bug in br_db.c. A similar bug was present
138 in ebtables.c. It was visible when the number of rules got
139 bigger (around 90).
140 * Removed the option to allow/disallow counters. Frames passing
141 by are always counted now.
142 * Didn't really add any new functionality. However, it will be
143 _alot_ easier and prettier to do so now. Feel free to add an
144 extension yourself.
145 * There are 4 types of extensions:
146 - Tables.
147 - Matches: like iptables has.
148 - Watchers: these only watch frames that passed all the matches
149 of the rule. They don't change the frame, nor give a verdict.
150 The log extension is a watcher.
151 - Targets.
152 * user32/kernel64 architectures like the Sparc64 are unsupported.
153 If you want me to change this, give me access to such a box,
154 and don't pressure me.