3 * fix unwanted zeroing of counters in the last user-defined chain
4 (reported by Jon Lewis)
5 * fix hidden symbol compilation error when using ld directly
6 * fix return value checking of creat to give a correct error
7 message if the atomic file couldn't be created
8 * correct info in INSTALL about compilation of ulog
10 Changelog for v2.0.9 vs v2.0.8-2
11 * added ip6 module for filtering IPv6 traffic (Kuo-Lang Tseng,
13 * added --log-ip6 option for logging IPv6 traffic (Kuo-Lang Tseng,
15 * added nflog watcher for logging packets to userspace (Peter Warasin)
16 * bugfix in ebtables.sysv (Michal Soltys)
17 * bugfix for among match on x86-64 (reported by Pavel Emelyanov)
20 * fixed a few reported bugs
21 * ebt_among --among-dst-file and --among-src-file: allow
22 the list to be given in a file (circumvents command line max.
24 * ebt_nat --snat-arp: if it's an arp packet, also change the source
25 address in the arp header
26 * ebt_mark --mark-or, --mark-xor, --mark-and
29 * ebtables modules are now located in /usr/lib/ebtables/
30 * added '/sbin/service ebtables' support
31 * added ebtables-save (thanks to Rok Papez <rok.papez@arnes.si>)
32 and ebtables-restore (the first one a perl script, the second
33 one written in c (fast))
34 * optimized the code for the '-A' command, making ebtables-restore
36 * ebtablesd/ebtablesu is deprecated and not compiled by default
37 the ebtables-save/ebtables-restore scheme is much better
41 * made the ebtables code modular (make library functions).
42 * added the ebtablesd/ebtablesu scheme to allow faster
43 addition of rules (and to test the modular code).
45 * added -c option (initialize counters)
46 * added -C option (change counters)
49 * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules
50 * <tommy_at_home.tig-grr.com> added limit match
52 * added (automatic) Sparc64 support, thanks to Michael Bellion and
53 Thomas Heinz from hipac.org for providing a test-box.
55 * added stp frames match type
57 * added support for deleting all user-defined chains (-X option
58 without specified chain)
61 * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering
62 (experimental, kernel files are in the CVS)
65 * added negative rule counter support
66 * bugfix: bcnt was not updated correctly
67 * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC
71 * fixed check bug in ebt_ip.c (report from
72 joe_judge_at_guardium.com).
74 * fixed problem when removing a chain (report from
75 ykphuah_at_greenpacket.com).
76 * Added --help list_extensions which, well, lists the extensions
78 * changed the way to use the atomic operations. It's now possible
79 to use the EBTABLES_ATOMIC_FILE environment variable, so it's no
80 longer necessary to explicitly state the file name. See the man.
82 * changed the way of compiling. New releases will now contain their
83 own set of kernel includes. No more copying of kernel includes to
85 * added getethertype.c (Nick) and use it. Removed name_to_number()
88 * added possibility to specify a rule number interval when deleting
91 * added ! - option possibility, which is equivalent to - ! option
93 * since last entry: added byte counters and udp/tcp port matching
95 * updated the kernel files for 2.4.20-pre5 and 2.5.32
96 * last big cleanup of kernel and userspace code just finished
102 * other things done before 2.0-rc1 that I can think of,
104 * cache align counters for better smp performance
106 * check for --xxxx-target RETURN on base chain
111 * bugfix for --atomic-commit
113 * added mark target+match
115 * added --atomic options
117 * some unlogged changes (due to lazyness)
118 * added --Lc, --Ln, --Lx
120 * user defined chains support: added -N, -X, -E options.
122 * some unlogged changes (due to lazyness)
123 * change the output for -L to make it look like it would look when
124 the user inputs the command.
125 * try to autoload modules
126 * some minor bugfixes
127 * add user defined chains support (without new commands yet,
129 * comparing rules didn't take the logical devices into account
131 * update help for -s and -d
132 * add VLAN in ethertypes
133 * add SYMLINK option for compiling
135 * allow -i and --logical-in in BROUTING
136 * update the manual page
137 * rename /etc/etherproto into /etc/ethertypes (seems to be a more
139 * add MAC mask for -s and -d, also added Unicast, Multicast and
140 Broadcast specification for specifying a (family of) MAC
143 * added broute table.
144 * added redirect target.
145 * added --redirect-target, --snat-target and --dnat-target options.
146 * added logical_out and logical_in
147 * snat bugfix (->size)
149 * fixed some things in the manual.
152 * -j standard no longer works, is this cryptic? good :)
153 * lots of beautification.
154 - made some code smaller
155 - made everything fit within 80 columns
156 * fix problems with -i and -o option
157 * print_memory now prints useful info
158 * trying to see the tables when ebtables is not loaded in kernel
159 no longer makes this be seen as a bug.
161 ebtables v2.0 released, changes:
162 * A complete rewrite, made everything modular.
163 * Fixed a one year old bug in br_db.c. A similar bug was present
164 in ebtables.c. It was visible when the number of rules got
166 * Removed the option to allow/disallow counters. Frames passing
167 by are always counted now.
168 * Didn't really add any new functionality. However, it will be
169 _alot_ easier and prettier to do so now. Feel free to add an
171 * There are 4 types of extensions:
173 - Matches: like iptables has.
174 - Watchers: these only watch frames that passed all the matches
175 of the rule. They don't change the frame, nor give a verdict.
176 The log extension is a watcher.
178 * user32/kernel64 architectures like the Sparc64 are unsupported.
179 If you want me to change this, give me access to such a box,
180 and don't pressure me.