blob: 8ee6e4dfea30af228ebb27dd53aa3f15a7b8f4fa [file] [log] [blame]
Bart De Schuymer587fa8a2006-12-17 19:01:32 +0000120061217
2 Since last entry:
3 * fixed a few reported bugs
4 * ebt_among --among-dst-file and --among-src-file: allow
5 the list to be given in a file (circumvents command line max.
6 line length
7 * ebt_nat --snat-arp: if it's an arp packet, also change the source
8 address in the arp header
9 * ebt_mark --mark-or, --mark-xor, --mark-and
Bart De Schuymerea5364b2005-10-20 17:55:15 +00001020051020
Bart De Schuymer18f501e2005-10-20 17:47:43 +000011 Since last entry:
12 * ebtables modules are now located in /usr/lib/ebtables/
13 * added '/sbin/service ebtables' support
Bart De Schuymercaf261b2005-10-20 17:56:51 +000014 * added ebtables-save (thanks to Rok Papez <rok.papez@arnes.si>)
15 and ebtables-restore (the first one a perl script, the second
Bart De Schuymer587fa8a2006-12-17 19:01:32 +000016 one written in c (fast))
Bart De Schuymer18f501e2005-10-20 17:47:43 +000017 * optimized the code for the '-A' command, making ebtables-restore
18 very fast.
19 * ebtablesd/ebtablesu is deprecated and not compiled by default
20 the ebtables-save/ebtables-restore scheme is much better
Bart De Schuymerea5364b2005-10-20 17:55:15 +00002120050117
Bart De Schuymer6622a012005-01-19 21:09:05 +000022 Since last entry:
23 * added ulog watcher
24 * made the ebtables code modular (make library functions).
25 * added the ebtablesd/ebtablesu scheme to allow faster
26 addition of rules (and to test the modular code).
27 * some small fixes
Bart De Schuymerff587202005-02-08 20:02:28 +000028 * added -c option (initialize counters)
29 * added -C option (change counters)
Bart De Schuymer519ebb72003-11-02 16:37:07 +00003020031102
31 Since last entry:
32 * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules
33 * <tommy_at_home.tig-grr.com> added limit match
Bart De Schuymer60c20092003-07-23 21:34:21 +00003420030724
Bart De Schuymer083ac212003-07-26 10:15:21 +000035 * added (automatic) Sparc64 support, thanks to Michael Bellion and
36 Thomas Heinz from hipac.org for providing a test-box.
Bart De Schuymer60c20092003-07-23 21:34:21 +00003720030717
38 * added stp frames match type
3920030713
40 * added support for deleting all user-defined chains (-X option
41 without specified chain)
Bart De Schuymer5fd425b2003-06-01 16:41:01 +00004220030601
43 * added --Lmac2
44 * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering
45 (experimental, kernel files are in the CVS)
46
4720030503
48 * added negative rule counter support
49 * bugfix: bcnt was not updated correctly
50 * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC
51 matching support
52 * added pkttype match
Bart De Schuymer36aee752003-04-01 16:59:57 +00005320030402
54 * fixed check bug in ebt_ip.c (report from
55 joe_judge_at_guardium.com).
5620030111
57 * fixed problem when removing a chain (report from
58 ykphuah_at_greenpacket.com).
59 * Added --help list_extensions which, well, lists the extensions
Bart De Schuymer27b121c2002-12-03 20:53:19 +00006020021203
61 * changed the way to use the atomic operations. It's now possible
62 to use the EBTABLES_ATOMIC_FILE environment variable, so it's no
63 longer necessary to explicitly state the file name. See the man.
Bart De Schuymer832f09c2002-11-20 19:40:28 +00006420021120
65 * changed the way of compiling. New releases will now contain their
66 own set of kernel includes. No more copying of kernel includes to
67 /usr/include/linux
68 * added getethertype.c (Nick) and use it. Removed name_to_number()
69 and number_to_name().
7020021106
71 * added possibility to specify a rule number interval when deleting
72 rules
7320021102
74 * added ! - option possibility, which is equivalent to - ! option
7520021102
76 * since last entry: added byte counters and udp/tcp port matching
Bart De Schuymerb44c5f42002-08-30 20:33:36 +00007720020830
78 * updated the kernel files for 2.4.20-pre5 and 2.5.32
79 * last big cleanup of kernel and userspace code just finished
8020020820
81 * ARP module bugfix
82 * IP module bugfix
83 * nat module bugfix
Bart De Schuymerb2c4e372002-07-30 20:59:17 +00008420020730
85 * other things done before 2.0-rc1 that I can think of,
86 including kernel:
87 * cache align counters for better smp performance
88 * simplify snat code
89 * check for --xxxx-target RETURN on base chain
90 * cleanup code
91 * minor bugfixes
9220020724
93 * code cleanup
94 * bugfix for --atomic-commit
Bart De Schuymera501b782002-07-20 16:15:39 +00009520020720
96 * added mark target+match
Bart De Schuymer52b6fd22002-07-14 19:23:56 +00009720020714
98 * added --atomic options
9920020710
100 * some unlogged changes (due to lazyness)
101 * added --Lc, --Ln, --Lx
Bart De Schuymerfc62a342002-06-25 21:11:40 +000010220020625
103 * user defined chains support: added -N, -X, -E options.
Bart De Schuymer41e8a192002-06-23 08:03:12 +000010420020621
105 * some unlogged changes (due to lazyness)
106 * change the output for -L to make it look like it would look when
107 the user inputs the command.
108 * try to autoload modules
109 * some minor bugfixes
110 * add user defined chains support (without new commands yet,
111 deliberately)
112 * comparing rules didn't take the logical devices into account
Bart De Schuymer1abc55d2002-06-01 19:23:47 +000011320020520
114 * update help for -s and -d
115 * add VLAN in ethertypes
116 * add SYMLINK option for compiling
11720020501
118 * allow -i and --logical-in in BROUTING
119 * update the manual page
120 * rename /etc/etherproto into /etc/ethertypes (seems to be a more
121 standard name)
122 * add MAC mask for -s and -d, also added Unicast, Multicast and
123 Broadcast specification for specifying a (family of) MAC
124 addresses.
12520020427
126 * added broute table.
127 * added redirect target.
128 * added --redirect-target, --snat-target and --dnat-target options.
129 * added logical_out and logical_in
130 * snat bugfix (->size)
13120020414
132 * fixed some things in the manual.
133 * fixed -P problem.
13420020411
135 * -j standard no longer works, is this cryptic? good :)
136 * lots of beautification.
137 - made some code smaller
138 - made everything fit within 80 columns
139 * fix problems with -i and -o option
140 * print_memory now prints useful info
141 * trying to see the tables when ebtables is not loaded in kernel
142 no longer makes this be seen as a bug.
14320020403
144 ebtables v2.0 released, changes:
145 * A complete rewrite, made everything modular.
146 * Fixed a one year old bug in br_db.c. A similar bug was present
147 in ebtables.c. It was visible when the number of rules got
148 bigger (around 90).
149 * Removed the option to allow/disallow counters. Frames passing
150 by are always counted now.
151 * Didn't really add any new functionality. However, it will be
152 _alot_ easier and prettier to do so now. Feel free to add an
153 extension yourself.
154 * There are 4 types of extensions:
155 - Tables.
156 - Matches: like iptables has.
157 - Watchers: these only watch frames that passed all the matches
158 of the rule. They don't change the frame, nor give a verdict.
159 The log extension is a watcher.
160 - Targets.
161 * user32/kernel64 architectures like the Sparc64 are unsupported.
162 If you want me to change this, give me access to such a box,
163 and don't pressure me.