blob: af1fe66ff0464402213979e843fd79faf7278d41 [file] [log] [blame]
Bart De Schuymer6622a012005-01-19 21:09:05 +0000120051701
2 Since last entry:
3 * added ulog watcher
4 * made the ebtables code modular (make library functions).
5 * added the ebtablesd/ebtablesu scheme to allow faster
6 addition of rules (and to test the modular code).
7 * some small fixes
Bart De Schuymer519ebb72003-11-02 16:37:07 +0000820031102
9 Since last entry:
10 * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules
11 * <tommy_at_home.tig-grr.com> added limit match
Bart De Schuymer60c20092003-07-23 21:34:21 +00001220030724
Bart De Schuymer083ac212003-07-26 10:15:21 +000013 * added (automatic) Sparc64 support, thanks to Michael Bellion and
14 Thomas Heinz from hipac.org for providing a test-box.
Bart De Schuymer60c20092003-07-23 21:34:21 +00001520030717
16 * added stp frames match type
1720030713
18 * added support for deleting all user-defined chains (-X option
19 without specified chain)
Bart De Schuymer5fd425b2003-06-01 16:41:01 +00002020030601
21 * added --Lmac2
22 * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering
23 (experimental, kernel files are in the CVS)
24
2520030503
26 * added negative rule counter support
27 * bugfix: bcnt was not updated correctly
28 * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC
29 matching support
30 * added pkttype match
Bart De Schuymer36aee752003-04-01 16:59:57 +00003120030402
32 * fixed check bug in ebt_ip.c (report from
33 joe_judge_at_guardium.com).
3420030111
35 * fixed problem when removing a chain (report from
36 ykphuah_at_greenpacket.com).
37 * Added --help list_extensions which, well, lists the extensions
Bart De Schuymer27b121c2002-12-03 20:53:19 +00003820021203
39 * changed the way to use the atomic operations. It's now possible
40 to use the EBTABLES_ATOMIC_FILE environment variable, so it's no
41 longer necessary to explicitly state the file name. See the man.
Bart De Schuymer832f09c2002-11-20 19:40:28 +00004220021120
43 * changed the way of compiling. New releases will now contain their
44 own set of kernel includes. No more copying of kernel includes to
45 /usr/include/linux
46 * added getethertype.c (Nick) and use it. Removed name_to_number()
47 and number_to_name().
4820021106
49 * added possibility to specify a rule number interval when deleting
50 rules
5120021102
52 * added ! - option possibility, which is equivalent to - ! option
5320021102
54 * since last entry: added byte counters and udp/tcp port matching
Bart De Schuymerb44c5f42002-08-30 20:33:36 +00005520020830
56 * updated the kernel files for 2.4.20-pre5 and 2.5.32
57 * last big cleanup of kernel and userspace code just finished
5820020820
59 * ARP module bugfix
60 * IP module bugfix
61 * nat module bugfix
Bart De Schuymerb2c4e372002-07-30 20:59:17 +00006220020730
63 * other things done before 2.0-rc1 that I can think of,
64 including kernel:
65 * cache align counters for better smp performance
66 * simplify snat code
67 * check for --xxxx-target RETURN on base chain
68 * cleanup code
69 * minor bugfixes
7020020724
71 * code cleanup
72 * bugfix for --atomic-commit
Bart De Schuymera501b782002-07-20 16:15:39 +00007320020720
74 * added mark target+match
Bart De Schuymer52b6fd22002-07-14 19:23:56 +00007520020714
76 * added --atomic options
7720020710
78 * some unlogged changes (due to lazyness)
79 * added --Lc, --Ln, --Lx
Bart De Schuymerfc62a342002-06-25 21:11:40 +00008020020625
81 * user defined chains support: added -N, -X, -E options.
Bart De Schuymer41e8a192002-06-23 08:03:12 +00008220020621
83 * some unlogged changes (due to lazyness)
84 * change the output for -L to make it look like it would look when
85 the user inputs the command.
86 * try to autoload modules
87 * some minor bugfixes
88 * add user defined chains support (without new commands yet,
89 deliberately)
90 * comparing rules didn't take the logical devices into account
Bart De Schuymer1abc55d2002-06-01 19:23:47 +00009120020520
92 * update help for -s and -d
93 * add VLAN in ethertypes
94 * add SYMLINK option for compiling
9520020501
96 * allow -i and --logical-in in BROUTING
97 * update the manual page
98 * rename /etc/etherproto into /etc/ethertypes (seems to be a more
99 standard name)
100 * add MAC mask for -s and -d, also added Unicast, Multicast and
101 Broadcast specification for specifying a (family of) MAC
102 addresses.
10320020427
104 * added broute table.
105 * added redirect target.
106 * added --redirect-target, --snat-target and --dnat-target options.
107 * added logical_out and logical_in
108 * snat bugfix (->size)
10920020414
110 * fixed some things in the manual.
111 * fixed -P problem.
11220020411
113 * -j standard no longer works, is this cryptic? good :)
114 * lots of beautification.
115 - made some code smaller
116 - made everything fit within 80 columns
117 * fix problems with -i and -o option
118 * print_memory now prints useful info
119 * trying to see the tables when ebtables is not loaded in kernel
120 no longer makes this be seen as a bug.
12120020403
122 ebtables v2.0 released, changes:
123 * A complete rewrite, made everything modular.
124 * Fixed a one year old bug in br_db.c. A similar bug was present
125 in ebtables.c. It was visible when the number of rules got
126 bigger (around 90).
127 * Removed the option to allow/disallow counters. Frames passing
128 by are always counted now.
129 * Didn't really add any new functionality. However, it will be
130 _alot_ easier and prettier to do so now. Feel free to add an
131 extension yourself.
132 * There are 4 types of extensions:
133 - Tables.
134 - Matches: like iptables has.
135 - Watchers: these only watch frames that passed all the matches
136 of the rule. They don't change the frame, nor give a verdict.
137 The log extension is a watcher.
138 - Targets.
139 * user32/kernel64 architectures like the Sparc64 are unsupported.
140 If you want me to change this, give me access to such a box,
141 and don't pressure me.