blob: 35079244b5597d8aa416ab437318298f3615a601 [file] [log] [blame]
Bart De Schuymer6622a012005-01-19 21:09:05 +0000120051701
2 Since last entry:
3 * added ulog watcher
4 * made the ebtables code modular (make library functions).
5 * added the ebtablesd/ebtablesu scheme to allow faster
6 addition of rules (and to test the modular code).
7 * some small fixes
Bart De Schuymerff587202005-02-08 20:02:28 +00008 * added -c option (initialize counters)
9 * added -C option (change counters)
Bart De Schuymer519ebb72003-11-02 16:37:07 +00001020031102
11 Since last entry:
12 * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules
13 * <tommy_at_home.tig-grr.com> added limit match
Bart De Schuymer60c20092003-07-23 21:34:21 +00001420030724
Bart De Schuymer083ac212003-07-26 10:15:21 +000015 * added (automatic) Sparc64 support, thanks to Michael Bellion and
16 Thomas Heinz from hipac.org for providing a test-box.
Bart De Schuymer60c20092003-07-23 21:34:21 +00001720030717
18 * added stp frames match type
1920030713
20 * added support for deleting all user-defined chains (-X option
21 without specified chain)
Bart De Schuymer5fd425b2003-06-01 16:41:01 +00002220030601
23 * added --Lmac2
24 * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering
25 (experimental, kernel files are in the CVS)
26
2720030503
28 * added negative rule counter support
29 * bugfix: bcnt was not updated correctly
30 * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC
31 matching support
32 * added pkttype match
Bart De Schuymer36aee752003-04-01 16:59:57 +00003320030402
34 * fixed check bug in ebt_ip.c (report from
35 joe_judge_at_guardium.com).
3620030111
37 * fixed problem when removing a chain (report from
38 ykphuah_at_greenpacket.com).
39 * Added --help list_extensions which, well, lists the extensions
Bart De Schuymer27b121c2002-12-03 20:53:19 +00004020021203
41 * changed the way to use the atomic operations. It's now possible
42 to use the EBTABLES_ATOMIC_FILE environment variable, so it's no
43 longer necessary to explicitly state the file name. See the man.
Bart De Schuymer832f09c2002-11-20 19:40:28 +00004420021120
45 * changed the way of compiling. New releases will now contain their
46 own set of kernel includes. No more copying of kernel includes to
47 /usr/include/linux
48 * added getethertype.c (Nick) and use it. Removed name_to_number()
49 and number_to_name().
5020021106
51 * added possibility to specify a rule number interval when deleting
52 rules
5320021102
54 * added ! - option possibility, which is equivalent to - ! option
5520021102
56 * since last entry: added byte counters and udp/tcp port matching
Bart De Schuymerb44c5f42002-08-30 20:33:36 +00005720020830
58 * updated the kernel files for 2.4.20-pre5 and 2.5.32
59 * last big cleanup of kernel and userspace code just finished
6020020820
61 * ARP module bugfix
62 * IP module bugfix
63 * nat module bugfix
Bart De Schuymerb2c4e372002-07-30 20:59:17 +00006420020730
65 * other things done before 2.0-rc1 that I can think of,
66 including kernel:
67 * cache align counters for better smp performance
68 * simplify snat code
69 * check for --xxxx-target RETURN on base chain
70 * cleanup code
71 * minor bugfixes
7220020724
73 * code cleanup
74 * bugfix for --atomic-commit
Bart De Schuymera501b782002-07-20 16:15:39 +00007520020720
76 * added mark target+match
Bart De Schuymer52b6fd22002-07-14 19:23:56 +00007720020714
78 * added --atomic options
7920020710
80 * some unlogged changes (due to lazyness)
81 * added --Lc, --Ln, --Lx
Bart De Schuymerfc62a342002-06-25 21:11:40 +00008220020625
83 * user defined chains support: added -N, -X, -E options.
Bart De Schuymer41e8a192002-06-23 08:03:12 +00008420020621
85 * some unlogged changes (due to lazyness)
86 * change the output for -L to make it look like it would look when
87 the user inputs the command.
88 * try to autoload modules
89 * some minor bugfixes
90 * add user defined chains support (without new commands yet,
91 deliberately)
92 * comparing rules didn't take the logical devices into account
Bart De Schuymer1abc55d2002-06-01 19:23:47 +00009320020520
94 * update help for -s and -d
95 * add VLAN in ethertypes
96 * add SYMLINK option for compiling
9720020501
98 * allow -i and --logical-in in BROUTING
99 * update the manual page
100 * rename /etc/etherproto into /etc/ethertypes (seems to be a more
101 standard name)
102 * add MAC mask for -s and -d, also added Unicast, Multicast and
103 Broadcast specification for specifying a (family of) MAC
104 addresses.
10520020427
106 * added broute table.
107 * added redirect target.
108 * added --redirect-target, --snat-target and --dnat-target options.
109 * added logical_out and logical_in
110 * snat bugfix (->size)
11120020414
112 * fixed some things in the manual.
113 * fixed -P problem.
11420020411
115 * -j standard no longer works, is this cryptic? good :)
116 * lots of beautification.
117 - made some code smaller
118 - made everything fit within 80 columns
119 * fix problems with -i and -o option
120 * print_memory now prints useful info
121 * trying to see the tables when ebtables is not loaded in kernel
122 no longer makes this be seen as a bug.
12320020403
124 ebtables v2.0 released, changes:
125 * A complete rewrite, made everything modular.
126 * Fixed a one year old bug in br_db.c. A similar bug was present
127 in ebtables.c. It was visible when the number of rules got
128 bigger (around 90).
129 * Removed the option to allow/disallow counters. Frames passing
130 by are always counted now.
131 * Didn't really add any new functionality. However, it will be
132 _alot_ easier and prettier to do so now. Feel free to add an
133 extension yourself.
134 * There are 4 types of extensions:
135 - Tables.
136 - Matches: like iptables has.
137 - Watchers: these only watch frames that passed all the matches
138 of the rule. They don't change the frame, nor give a verdict.
139 The log extension is a watcher.
140 - Targets.
141 * user32/kernel64 architectures like the Sparc64 are unsupported.
142 If you want me to change this, give me access to such a box,
143 and don't pressure me.