| blob | 9ae6f4b2d234f2c6e2b2394f9202451a86284e58 |
1 20100203
2 Changelog for v2.0.9-2
3 * fix unwanted zeroing of counters in the last user-defined chain
4 (reported by Jon Lewis)
5 * fix hidden symbol compilation error when using ld directly
6 * fix return value checking of creat to give a correct error
7 message if the atomic file couldn't be created
8 * correct info in INSTALL about compilation of ulog
9 20090621
10 Changelog for v2.0.9 vs v2.0.8-2
11 * added ip6 module for filtering IPv6 traffic (Kuo-Lang Tseng,
12 Manohar Castelino)
13 * added --log-ip6 option for logging IPv6 traffic (Kuo-Lang Tseng,
14 Manohar Castelino)
15 * added nflog watcher for logging packets to userspace (Peter Warasin)
16 * bugfix in ebtables.sysv (Michal Soltys)
17 * bugfix for among match on x86-64 (reported by Pavel Emelyanov)
18 20061217
19 Since last entry:
20 * fixed a few reported bugs
21 * ebt_among --among-dst-file and --among-src-file: allow
22 the list to be given in a file (circumvents command line max.
23 line length
24 * ebt_nat --snat-arp: if it's an arp packet, also change the source
25 address in the arp header
26 * ebt_mark --mark-or, --mark-xor, --mark-and
27 20051020
28 Since last entry:
29 * ebtables modules are now located in /usr/lib/ebtables/
30 * added '/sbin/service ebtables' support
31 * added ebtables-save (thanks to Rok Papez <rok.papez@arnes.si>)
32 and ebtables-restore (the first one a perl script, the second
33 one written in c (fast))
34 * optimized the code for the '-A' command, making ebtables-restore
35 very fast.
36 * ebtablesd/ebtablesu is deprecated and not compiled by default
37 the ebtables-save/ebtables-restore scheme is much better
38 20050117
39 Since last entry:
40 * added ulog watcher
41 * made the ebtables code modular (make library functions).
42 * added the ebtablesd/ebtablesu scheme to allow faster
43 addition of rules (and to test the modular code).
44 * some small fixes
45 * added -c option (initialize counters)
46 * added -C option (change counters)
47 20031102
48 Since last entry:
49 * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules
50 * <tommy_at_home.tig-grr.com> added limit match
51 20030724
52 * added (automatic) Sparc64 support, thanks to Michael Bellion and
53 Thomas Heinz from hipac.org for providing a test-box.
54 20030717
55 * added stp frames match type
56 20030713
57 * added support for deleting all user-defined chains (-X option
58 without specified chain)
59 20030601
60 * added --Lmac2
61 * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering
62 (experimental, kernel files are in the CVS)
64 20030503
65 * added negative rule counter support
66 * bugfix: bcnt was not updated correctly
67 * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC
68 matching support
69 * added pkttype match
70 20030402
71 * fixed check bug in ebt_ip.c (report from
72 joe_judge_at_guardium.com).
73 20030111
74 * fixed problem when removing a chain (report from
75 ykphuah_at_greenpacket.com).
76 * Added --help list_extensions which, well, lists the extensions
77 20021203
78 * changed the way to use the atomic operations. It's now possible
79 to use the EBTABLES_ATOMIC_FILE environment variable, so it's no
80 longer necessary to explicitly state the file name. See the man.
81 20021120
82 * changed the way of compiling. New releases will now contain their
83 own set of kernel includes. No more copying of kernel includes to
84 /usr/include/linux
85 * added getethertype.c (Nick) and use it. Removed name_to_number()
86 and number_to_name().
87 20021106
88 * added possibility to specify a rule number interval when deleting
89 rules
90 20021102
91 * added ! - option possibility, which is equivalent to - ! option
92 20021102
93 * since last entry: added byte counters and udp/tcp port matching
94 20020830
95 * updated the kernel files for 2.4.20-pre5 and 2.5.32
96 * last big cleanup of kernel and userspace code just finished
97 20020820
98 * ARP module bugfix
99 * IP module bugfix
100 * nat module bugfix
101 20020730
102 * other things done before 2.0-rc1 that I can think of,
103 including kernel:
104 * cache align counters for better smp performance
105 * simplify snat code
106 * check for --xxxx-target RETURN on base chain
107 * cleanup code
108 * minor bugfixes
109 20020724
110 * code cleanup
111 * bugfix for --atomic-commit
112 20020720
113 * added mark target+match
114 20020714
115 * added --atomic options
116 20020710
117 * some unlogged changes (due to lazyness)
118 * added --Lc, --Ln, --Lx
119 20020625
120 * user defined chains support: added -N, -X, -E options.
121 20020621
122 * some unlogged changes (due to lazyness)
123 * change the output for -L to make it look like it would look when
124 the user inputs the command.
125 * try to autoload modules
126 * some minor bugfixes
127 * add user defined chains support (without new commands yet,
128 deliberately)
129 * comparing rules didn't take the logical devices into account
130 20020520
131 * update help for -s and -d
132 * add VLAN in ethertypes
133 * add SYMLINK option for compiling
134 20020501
135 * allow -i and --logical-in in BROUTING
136 * update the manual page
137 * rename /etc/etherproto into /etc/ethertypes (seems to be a more
138 standard name)
139 * add MAC mask for -s and -d, also added Unicast, Multicast and
140 Broadcast specification for specifying a (family of) MAC
141 addresses.
142 20020427
143 * added broute table.
144 * added redirect target.
145 * added --redirect-target, --snat-target and --dnat-target options.
146 * added logical_out and logical_in
147 * snat bugfix (->size)
148 20020414
149 * fixed some things in the manual.
150 * fixed -P problem.
151 20020411
152 * -j standard no longer works, is this cryptic? good :)
153 * lots of beautification.
154 - made some code smaller
155 - made everything fit within 80 columns
156 * fix problems with -i and -o option
157 * print_memory now prints useful info
158 * trying to see the tables when ebtables is not loaded in kernel
159 no longer makes this be seen as a bug.
160 20020403
161 ebtables v2.0 released, changes:
162 * A complete rewrite, made everything modular.
163 * Fixed a one year old bug in br_db.c. A similar bug was present
164 in ebtables.c. It was visible when the number of rules got
165 bigger (around 90).
166 * Removed the option to allow/disallow counters. Frames passing
167 by are always counted now.
168 * Didn't really add any new functionality. However, it will be
169 _alot_ easier and prettier to do so now. Feel free to add an
170 extension yourself.
171 * There are 4 types of extensions:
172 - Tables.
173 - Matches: like iptables has.
174 - Watchers: these only watch frames that passed all the matches
175 of the rule. They don't change the frame, nor give a verdict.
176 The log extension is a watcher.
177 - Targets.
178 * user32/kernel64 architectures like the Sparc64 are unsupported.
179 If you want me to change this, give me access to such a box,
180 and don't pressure me.