Tag 'v1.2.1' created by Harald Welte <[email protected]> at 2001-03-16 13:40
-0800
iptables 1.2.1
Changes since v1.1.0:
András Kis-Szabó (2):
ip6tables-save/-restore by Kis-Szabo Andras
forgot to add those two...
Chapman Brad (1):
iptables.8 --modprobe fix by Chapman Brad
Emmanuel Roger (1):
Emmanuel Roger's string matching patch.
Gerd Knorr (1):
Gerd Knorr's iplimit.
Harald Welte (49):
Harald Welte's ULOG target with tests (untested).
Harald Welte's other file (which Rusty forgot).
Harald Welte gets more ideas...
Report error when a shared target can't be opened - Hawald Welte.
Harald Welte's dynamic loading fix.
Harald Welte's ttl stuff.
minor output bug in save()
two libiptc bugs fixed, including the 'segv while doing more than one
small fixes in the save() function of the ULOG and tcp extension
new revision of TTL and ttl patch. Match bugfixed, supports now == !+ < >
ICMPv4 over IPv6 is no good idea :(
shlib plugin foer ip6tables MARK added
added shlib plugin for ipv6 mark match
make iptables-restore and iptables-save work again!
make iptables-restore and iptables-save work again
preprocessor macro syntax
Add Harald's (munged) modprobe patch.
adding --noflush option for iptables-restore
patch-test8-ipv6-fixes removes one item from TODO
Added iptbles-restore and iptables-save manpages
o serveral changes / additions to libiptc:
Added save/restore manpages to Makefile
libiptc counter functions
libiptc counter function
fixes segfault in iptables-save
added 'iptables --set-counters' and fixed counter-restore in
iptables-restore
added iptables --set-counters
new, more detailed TODO list
fix another iptables-save segfault when match doesn't provide save
function (bug detected by Emmanuel Roger, fix by HW)
--log-prefix and --ulog-prefix problem when not quoted in save function
(reported and fixed by Bart Theunissen)
todo item about bridge added
Fixes bug with inverted destination IP (report+fix by Bart Theunissen)
new ULOG revision: supports in-kernel batching of packets and netlink
multipart messages
new ULOG revision: supports in-kernel batching of packets and netlink
multipart
new extension for new ULOG target (in-kernel queuing, netlink multipart
msg)
yes... someone is actually working on TODO items :)
rusty is working on some items
added seqoffset and irc patch to pending
psd match fix. Due to a typo in the pathname not all files have been
applied.
Yon Uriarte working on u32 classifier
TODO update
iptables.8 spelling fixes + scoreboard update
included rusty's TOS checksum fix, as it didn't make it into 2.4.1
todo updates (ip_nat_ident, cvs snapshots)
added (10.1.2.3.4 is accepted as a valid IP address by iptables)
1.2.1 release is upcoming
fixing a lot of bugs / cleaning up
fixed makefile bug, include ipv6 stuff in experimental only if DO_IPV6 is
set
release-diff for 1.2.1
James Morris (8):
doco was very out of date and basically useless
updated port range specification to match existing code
Include ip6tables in installation
More stuff
minor fix
added ipq_errstr() to API
Initial commit of libipq man pages.
added install-devel target
Jan Echternach (3):
Jan Echternach's patch for bignums
Jan Echternach's const tweak.
Jan Echternach's string_to_number bignum fixes.
Jan Rekorajski (2):
LOG Target for IPv6 (Jan Rekorajski)
Port of IPv6 owner match, fixes for IPv6 limit mac and multiport matches
(Jan Rekorajski)
M.P.Anand Babu (1):
M.P.Anand Babu's fix for iptables rename chain without new chain bug.
Marc Boucher (4):
Marc Boucher's TCPMSS patch.
Test for TCPMSS target.
Fixed small typo.
Added support for --clamp-mss-to-pmtu option.
Martin Josefsson (1):
New SAME nat target added. (contrib by Martin Josefsson)
Matthew G. Marsh (1):
Matthew G. Marsh's FTOS patch.
Philip Blundell (4):
Philip Blundell's IPv6 fixes.
Phil Blundell: ICMP, TCP and UDP extensions + rule deletion bug.
Phil Blundell's new ipv6 extensions.
Phil's missing file 8)
Rusty Russell (90):
Added explicit mention of make install.
port-unreachable, not net-unreachable mistake in REJECT doco.
Minor change for debugging.
Philip Blundell's IPv6 patches.
Made error message clearer.
new TODO points
Marco Masetti's -C insists on -o and -i bug report.
REJECT enhancements.
More to do.
Document that we (now) allow mac match in FORWARD
Aligning matchsize and targetsize now responsibility of extension writers
More PPC alignment fixes.
More to do
Don't reverse matches on command line (matters for -m limit).
Modifications for new header (entries -> entrytable, for alignment
reasons)
Remove ICMP packet-filtered option (deprecated).
Yet another thing to do.
Patches and isapplied script for reducing bug reports.
Updated for new release.
Updated REJECT documentation
Always more
More intelligent `something wrong' message.
A few more fixes.
Added -m documentation.
Finally resolve dependency problems. (Olivier Baudron's report)
Better message for table does not exist.
Disable ULOG (pending patch to make it dependent on header in KERNEL_DIR).
Revert Harald's LOAD_MUST_SUCCEED to -j (may be chain name).
Applied by Linus.
Handle *really* large index values without segfaulting.
Stop shadowing parameter.
Minor compile fixes.
Required blank MIRROR target for Harald Welte's dlopen force patch.
Patch-o-matic! now included.
Updated.
No longer needed.
TCP MSS matching support (untested).
Fixed compile errors.
More to do.
Allow --tcp-flags ! A B.
Fixed ! test cases.
Fixes for targets with no print() function.
print and save can be NULL.
Missing ;
Derrik Pates's tcpflags wrong way round when -n no specified.
Start of Sparc64 fixes.
More sparc64 fixes.
More sparc64 fixes.
More sparc64 fixes
More debugging.
More debugging.
More debugging.
Finally fixed sparc64 counter bug (I hope).
Fixed length of LOG
Added DROPPING chain.
Add drop table support
Fix typo.
Fixed ultrasparc alignment define.
Fix allocation (base new alloc on current size, not original size).
Update.
Known bugs for 2.4.0
Add patch-o-matic comment.
Reorganized: added EXTRA EXTENSIONS section.
Added Harald Welte
BALANCE target alpha support.
Added <linux/in6.h> for libc5.
Allow patch-o-matic/ as a target (convenient for tab-completion)
Stop --reject-with echo-reply (won't be supported soon).
Test for record rpc.
Libc5 can't do IPv6.
Define IPPROTO_ESP and IPPROTO_AH in case of primitive headers.
Remove malloc warning.
Forgot to add this before, I think.
New INSTALL instructions.
Added experimental rule.
Addeed FIXME.
Fix compile warning about const.
Revert malloc. Why?
Spelling fix and whitespace clean.
More TODO.
New version will be 1.2.
Oops. -v, not --v.
/usr/local/sbin, not /usr/local/bin.
Fix Makefile (ldd -v doesn't work on my ldd).
Clean must delete experimental binaries as well.
=?iso-8859-1?Q?Frédéric_L_._W_.?= Meunier's `1.1.2 shipped with .so' fix.
Cleanup
pre-release target for Makefile.
Added Laurence J. Lane's CR at end of /proc/sys/modprobe removal patch.
Move some include files to be present always, so build always includes
them even if patches not applied (eg. for distributions).
Sven Koch (2):
fixed problems with multiple do_command() calls and match ordering (Sven
Koch)
fix the match-loading at protocol specification time (Sven Koch)
---
libipq/IPQ.notes.txt | 118 -
INSTALL | 48
KNOWN_BUGS | 10
Makefile | 102 +
Rules.make | 15
TODO | 66
extensions/.BALANCE-test | 2
extensions/.LOG-test6 | 2
extensions/.NETLINK-test | 2
extensions/.SAME-test | 2
extensions/.owner-test6 | 2
extensions/.pool-test | 2
extensions/.psd-test | 3
extensions/.record-rpc-test | 3
extensions/.string-test | 2
extensions/Makefile | 23
extensions/libip6t_LOG.c | 261 +++
extensions/libip6t_MARK.c | 121 +
extensions/libip6t_icmp.c | 281 +++
extensions/libip6t_limit.c | 198 ++
extensions/libip6t_mac.c | 145 +
extensions/libip6t_mark.c | 129 +
extensions/libip6t_multiport.c | 263 +++
extensions/libip6t_owner.c | 220 ++
extensions/libip6t_standard.c | 68
extensions/libip6t_tcp.c | 442 +++++
extensions/libip6t_udp.c | 253 +++
extensions/libipt_BALANCE.c | 152 ++
extensions/libipt_DNAT.c | 4
extensions/libipt_FTOS.c | 129 +
extensions/libipt_LOG.c | 6
extensions/libipt_MARK.c | 4
extensions/libipt_MASQUERADE.c | 4
extensions/libipt_MIRROR.c | 62
extensions/libipt_NETLINK.c | 158 ++
extensions/libipt_POOL.c | 151 ++
extensions/libipt_REDIRECT.c | 4
extensions/libipt_REJECT.c | 19
extensions/libipt_SAME.c | 151 ++
extensions/libipt_SNAT.c | 4
extensions/libipt_TCPMSS.c | 134 +
extensions/libipt_TOS.c | 4
extensions/libipt_TTL.c | 163 ++
extensions/libipt_ULOG.c | 207 ++
extensions/libipt_ah.c | 191 ++
extensions/libipt_connlimit.c | 133 +
extensions/libipt_esp.c | 191 ++
extensions/libipt_icmp.c | 4
extensions/libipt_limit.c | 2
extensions/libipt_mac.c | 4
extensions/libipt_mark.c | 4
extensions/libipt_multiport.c | 4
extensions/libipt_owner.c | 4
extensions/libipt_pool.c | 143 +
extensions/libipt_psd.c | 199 ++
extensions/libipt_record_rpc.c | 73
extensions/libipt_standard.c | 4
extensions/libipt_state.c | 4
extensions/libipt_string.c | 134 +
extensions/libipt_tcp.c | 23
extensions/libipt_tcpmss.c | 161 ++
extensions/libipt_tos.c | 4
extensions/libipt_ttl.c | 177 ++
extensions/libipt_udp.c | 8
extensions/libipt_unclean.c | 11
include/ip6tables.h | 23
include/iptables.h | 11
include/libippool/ip_pool_support.h | 26
include/libipq/ip_queue_64.h | 62
include/libipq/libipq.h | 9
include/libiptc/ipt_kernel_headers.h | 5
include/libiptc/libip6tc.h | 31
include/libiptc/libiptc.h | 17
include/libipulog/libipulog.h | 32
include/linux/netfilter_ipv4/ipt_FTOS.h | 16
include/linux/netfilter_ipv4/ipt_TCPMSS.h | 10
include/linux/netfilter_ipv4/ipt_TTL.h | 19
include/linux/netfilter_ipv4/ipt_ULOG.h | 42
include/linux/netfilter_ipv4/ipt_ah.h | 16
include/linux/netfilter_ipv4/ipt_connlimit.h | 12
include/linux/netfilter_ipv4/ipt_esp.h | 16
include/linux/netfilter_ipv4/ipt_tcpmss.h | 9
include/linux/netfilter_ipv4/ipt_ttl.h | 21
ip6tables-restore.c | 299 ++++
ip6tables-save.c | 341 ++++
ip6tables-standalone.c | 51
ip6tables.c | 2001 +++++++++++++++++++++++++++
ippool/Makefile | 18
ippool/ippool.c | 589 +++++++
ippool/libippool.c | 72
iptables-restore.8 | 49
iptables-restore.c | 258 ++-
iptables-save.8 | 48
iptables-save.c | 287 ++-
iptables-standalone.c | 4
iptables.8 | 245 ++-
iptables.c | 337 +++-
libipq/Makefile | 17
libipq/ipq_create_handle.3 | 78 +
libipq/ipq_destroy_handle.3 | 1
libipq/ipq_errstr.3 | 66
libipq/ipq_get_msgerr.3 | 1
libipq/ipq_get_packet.3 | 1
libipq/ipq_message_type.3 | 136 +
libipq/ipq_perror.3 | 1
libipq/ipq_read.3 | 95 +
libipq/ipq_set_mode.3 | 107 +
libipq/ipq_set_verdict.3 | 95 +
libipq/libipq.3 | 275 +++
libipq/libipq.c | 9
libiptc/Makefile | 14
libiptc/libip4tc.c | 27
libiptc/libip6tc.c | 141 +
libiptc/libiptc.c | 246 ++-
114 files changed, 11309 insertions(+), 594 deletions(-)
---
_______________________________________________
svn mailing list
[email protected]
http://mailman.vyatta.com/mailman/listinfo/svn
