Bart De Schuymer | 0944a31 | 2010-04-22 06:59:25 +0000 | [diff] [blame] | 1 | * fix --among-dst-file, which translated to --among-src |
| 2 | (reported by Thierry Watelet) |
Bart De Schuymer | fb5ea03 | 2010-02-03 21:02:56 +0000 | [diff] [blame] | 3 | 20100203 |
| 4 | Changelog for v2.0.9-2 |
| 5 | * fix unwanted zeroing of counters in the last user-defined chain |
| 6 | (reported by Jon Lewis) |
| 7 | * fix hidden symbol compilation error when using ld directly |
| 8 | * fix return value checking of creat to give a correct error |
| 9 | message if the atomic file couldn't be created |
| 10 | * correct info in INSTALL about compilation of ulog |
Bart De Schuymer | 81994bf | 2009-06-21 12:47:34 +0000 | [diff] [blame] | 11 | 20090621 |
| 12 | Changelog for v2.0.9 vs v2.0.8-2 |
| 13 | * added ip6 module for filtering IPv6 traffic (Kuo-Lang Tseng, |
| 14 | Manohar Castelino) |
| 15 | * added --log-ip6 option for logging IPv6 traffic (Kuo-Lang Tseng, |
| 16 | Manohar Castelino) |
| 17 | * added nflog watcher for logging packets to userspace (Peter Warasin) |
| 18 | * bugfix in ebtables.sysv (Michal Soltys) |
| 19 | * bugfix for among match on x86-64 (reported by Pavel Emelyanov) |
Bart De Schuymer | 587fa8a | 2006-12-17 19:01:32 +0000 | [diff] [blame] | 20 | 20061217 |
| 21 | Since last entry: |
| 22 | * fixed a few reported bugs |
| 23 | * ebt_among --among-dst-file and --among-src-file: allow |
| 24 | the list to be given in a file (circumvents command line max. |
| 25 | line length |
| 26 | * ebt_nat --snat-arp: if it's an arp packet, also change the source |
| 27 | address in the arp header |
| 28 | * ebt_mark --mark-or, --mark-xor, --mark-and |
Bart De Schuymer | ea5364b | 2005-10-20 17:55:15 +0000 | [diff] [blame] | 29 | 20051020 |
Bart De Schuymer | 18f501e | 2005-10-20 17:47:43 +0000 | [diff] [blame] | 30 | Since last entry: |
| 31 | * ebtables modules are now located in /usr/lib/ebtables/ |
| 32 | * added '/sbin/service ebtables' support |
Bart De Schuymer | caf261b | 2005-10-20 17:56:51 +0000 | [diff] [blame] | 33 | * added ebtables-save (thanks to Rok Papez <rok.papez@arnes.si>) |
| 34 | and ebtables-restore (the first one a perl script, the second |
Bart De Schuymer | 587fa8a | 2006-12-17 19:01:32 +0000 | [diff] [blame] | 35 | one written in c (fast)) |
Bart De Schuymer | 18f501e | 2005-10-20 17:47:43 +0000 | [diff] [blame] | 36 | * optimized the code for the '-A' command, making ebtables-restore |
| 37 | very fast. |
| 38 | * ebtablesd/ebtablesu is deprecated and not compiled by default |
| 39 | the ebtables-save/ebtables-restore scheme is much better |
Bart De Schuymer | ea5364b | 2005-10-20 17:55:15 +0000 | [diff] [blame] | 40 | 20050117 |
Bart De Schuymer | 6622a01 | 2005-01-19 21:09:05 +0000 | [diff] [blame] | 41 | Since last entry: |
| 42 | * added ulog watcher |
| 43 | * made the ebtables code modular (make library functions). |
| 44 | * added the ebtablesd/ebtablesu scheme to allow faster |
| 45 | addition of rules (and to test the modular code). |
| 46 | * some small fixes |
Bart De Schuymer | ff58720 | 2005-02-08 20:02:28 +0000 | [diff] [blame] | 47 | * added -c option (initialize counters) |
| 48 | * added -C option (change counters) |
Bart De Schuymer | 519ebb7 | 2003-11-02 16:37:07 +0000 | [diff] [blame] | 49 | 20031102 |
| 50 | Since last entry: |
| 51 | * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules |
| 52 | * <tommy_at_home.tig-grr.com> added limit match |
Bart De Schuymer | 60c2009 | 2003-07-23 21:34:21 +0000 | [diff] [blame] | 53 | 20030724 |
Bart De Schuymer | 083ac21 | 2003-07-26 10:15:21 +0000 | [diff] [blame] | 54 | * added (automatic) Sparc64 support, thanks to Michael Bellion and |
| 55 | Thomas Heinz from hipac.org for providing a test-box. |
Bart De Schuymer | 60c2009 | 2003-07-23 21:34:21 +0000 | [diff] [blame] | 56 | 20030717 |
| 57 | * added stp frames match type |
| 58 | 20030713 |
| 59 | * added support for deleting all user-defined chains (-X option |
| 60 | without specified chain) |
Bart De Schuymer | 5fd425b | 2003-06-01 16:41:01 +0000 | [diff] [blame] | 61 | 20030601 |
| 62 | * added --Lmac2 |
| 63 | * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering |
| 64 | (experimental, kernel files are in the CVS) |
| 65 | |
| 66 | 20030503 |
| 67 | * added negative rule counter support |
| 68 | * bugfix: bcnt was not updated correctly |
| 69 | * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC |
| 70 | matching support |
| 71 | * added pkttype match |
Bart De Schuymer | 36aee75 | 2003-04-01 16:59:57 +0000 | [diff] [blame] | 72 | 20030402 |
| 73 | * fixed check bug in ebt_ip.c (report from |
| 74 | joe_judge_at_guardium.com). |
| 75 | 20030111 |
| 76 | * fixed problem when removing a chain (report from |
| 77 | ykphuah_at_greenpacket.com). |
| 78 | * Added --help list_extensions which, well, lists the extensions |
Bart De Schuymer | 27b121c | 2002-12-03 20:53:19 +0000 | [diff] [blame] | 79 | 20021203 |
| 80 | * changed the way to use the atomic operations. It's now possible |
| 81 | to use the EBTABLES_ATOMIC_FILE environment variable, so it's no |
| 82 | longer necessary to explicitly state the file name. See the man. |
Bart De Schuymer | 832f09c | 2002-11-20 19:40:28 +0000 | [diff] [blame] | 83 | 20021120 |
| 84 | * changed the way of compiling. New releases will now contain their |
| 85 | own set of kernel includes. No more copying of kernel includes to |
| 86 | /usr/include/linux |
| 87 | * added getethertype.c (Nick) and use it. Removed name_to_number() |
| 88 | and number_to_name(). |
| 89 | 20021106 |
| 90 | * added possibility to specify a rule number interval when deleting |
| 91 | rules |
| 92 | 20021102 |
| 93 | * added ! - option possibility, which is equivalent to - ! option |
| 94 | 20021102 |
| 95 | * since last entry: added byte counters and udp/tcp port matching |
Bart De Schuymer | b44c5f4 | 2002-08-30 20:33:36 +0000 | [diff] [blame] | 96 | 20020830 |
| 97 | * updated the kernel files for 2.4.20-pre5 and 2.5.32 |
| 98 | * last big cleanup of kernel and userspace code just finished |
| 99 | 20020820 |
| 100 | * ARP module bugfix |
| 101 | * IP module bugfix |
| 102 | * nat module bugfix |
Bart De Schuymer | b2c4e37 | 2002-07-30 20:59:17 +0000 | [diff] [blame] | 103 | 20020730 |
| 104 | * other things done before 2.0-rc1 that I can think of, |
| 105 | including kernel: |
| 106 | * cache align counters for better smp performance |
| 107 | * simplify snat code |
| 108 | * check for --xxxx-target RETURN on base chain |
| 109 | * cleanup code |
| 110 | * minor bugfixes |
| 111 | 20020724 |
| 112 | * code cleanup |
| 113 | * bugfix for --atomic-commit |
Bart De Schuymer | a501b78 | 2002-07-20 16:15:39 +0000 | [diff] [blame] | 114 | 20020720 |
| 115 | * added mark target+match |
Bart De Schuymer | 52b6fd2 | 2002-07-14 19:23:56 +0000 | [diff] [blame] | 116 | 20020714 |
| 117 | * added --atomic options |
| 118 | 20020710 |
| 119 | * some unlogged changes (due to lazyness) |
| 120 | * added --Lc, --Ln, --Lx |
Bart De Schuymer | fc62a34 | 2002-06-25 21:11:40 +0000 | [diff] [blame] | 121 | 20020625 |
| 122 | * user defined chains support: added -N, -X, -E options. |
Bart De Schuymer | 41e8a19 | 2002-06-23 08:03:12 +0000 | [diff] [blame] | 123 | 20020621 |
| 124 | * some unlogged changes (due to lazyness) |
| 125 | * change the output for -L to make it look like it would look when |
| 126 | the user inputs the command. |
| 127 | * try to autoload modules |
| 128 | * some minor bugfixes |
| 129 | * add user defined chains support (without new commands yet, |
| 130 | deliberately) |
| 131 | * comparing rules didn't take the logical devices into account |
Bart De Schuymer | 1abc55d | 2002-06-01 19:23:47 +0000 | [diff] [blame] | 132 | 20020520 |
| 133 | * update help for -s and -d |
| 134 | * add VLAN in ethertypes |
| 135 | * add SYMLINK option for compiling |
| 136 | 20020501 |
| 137 | * allow -i and --logical-in in BROUTING |
| 138 | * update the manual page |
| 139 | * rename /etc/etherproto into /etc/ethertypes (seems to be a more |
| 140 | standard name) |
| 141 | * add MAC mask for -s and -d, also added Unicast, Multicast and |
| 142 | Broadcast specification for specifying a (family of) MAC |
| 143 | addresses. |
| 144 | 20020427 |
| 145 | * added broute table. |
| 146 | * added redirect target. |
| 147 | * added --redirect-target, --snat-target and --dnat-target options. |
| 148 | * added logical_out and logical_in |
| 149 | * snat bugfix (->size) |
| 150 | 20020414 |
| 151 | * fixed some things in the manual. |
| 152 | * fixed -P problem. |
| 153 | 20020411 |
| 154 | * -j standard no longer works, is this cryptic? good :) |
| 155 | * lots of beautification. |
| 156 | - made some code smaller |
| 157 | - made everything fit within 80 columns |
| 158 | * fix problems with -i and -o option |
| 159 | * print_memory now prints useful info |
| 160 | * trying to see the tables when ebtables is not loaded in kernel |
| 161 | no longer makes this be seen as a bug. |
| 162 | 20020403 |
| 163 | ebtables v2.0 released, changes: |
| 164 | * A complete rewrite, made everything modular. |
| 165 | * Fixed a one year old bug in br_db.c. A similar bug was present |
| 166 | in ebtables.c. It was visible when the number of rules got |
| 167 | bigger (around 90). |
| 168 | * Removed the option to allow/disallow counters. Frames passing |
| 169 | by are always counted now. |
| 170 | * Didn't really add any new functionality. However, it will be |
| 171 | _alot_ easier and prettier to do so now. Feel free to add an |
| 172 | extension yourself. |
| 173 | * There are 4 types of extensions: |
| 174 | - Tables. |
| 175 | - Matches: like iptables has. |
| 176 | - Watchers: these only watch frames that passed all the matches |
| 177 | of the rule. They don't change the frame, nor give a verdict. |
| 178 | The log extension is a watcher. |
| 179 | - Targets. |
| 180 | * user32/kernel64 architectures like the Sparc64 are unsupported. |
| 181 | If you want me to change this, give me access to such a box, |
| 182 | and don't pressure me. |