Tag 'v1.2.9' created by Harald Welte <[email protected]> at 2003-11-02 17:01
-0800
iptables 1.2.9
Changes since v1.2.8:
Bart De Schuymer (1):
ipt_physdev update (--physdev-is-{in,out,bridged}) by Bart de Schuymer
Cedric Blancher (1):
INVALID state incorrectly explained (Cedric Blancher, Maciej Soltysiak)
Cédric de Launois (2):
Updated version with new option to continue rule-traversal (Cedric de
Launois)
IPv6 'port' of ROUTE target (Cedric de Launois)
Dave Zambonini (1):
Fix save-invert printout (David Zambonini, me)
Evgeniy Polyakov (2):
add passive OS fingerprinting (Evgeniy Polyakov)
further updates to the 'osf' module (Evgeniy Polyakov). now supports
reading fingerprint data at runtime via /proc.
Grzegorz Janoszka (1):
add new IPMARK target (Grzegorz Janoszka)
Harald Welte (29):
add a few notes about how to deal with CVS COMMIT access
version 1.2.8 upcoming
Fix typo in libipt_string (Nancy Fudd). (Closes: #89)
rename iplimit to connlimit
add (untested) sctp userspace support for even more untested kernel part
(in pom soon)
fix trivial typo
finally commit the overly delayed RFC1812 admin prohibited option
Fix '-L format bug' (Edward J. Huff) (Closes: #93)
fix saving of inverted parameters (same as in ipv4 libipt_owner.c)
implement chain cache ussing relative offsets instead of absolute entry
Add my recent performance optimization work, might destabilize iptables.
Fix printing of odd ip6tables netmasks (Closes: #103)
fix ipv6_prefix_length endianness bugs (Closes: #103)
add include files for soon-to-be-submitted patches (and build them
unconditionally by putting thme in the extensions/Makefile)
remove obsolete tests. the respective extensions are now built
unconditionally
add support for matching the IPS_CONFIRMED bit (Harald Welte)
1- Fix preprocessor directive usage,
1- printf() simplifications, 2- indentation fixes, 3- C99 initializers.
(Stephane Ouellette)
remove .NETMAP-test - build plugin unconditionally
CLASSIFY is now built unconditionally, thus we need the kernel header
remove KNOWN_BUGS, since it is obsoleted by bugzilla
add support for the raw table to userspace
unconditionally build TRACE and NOTRACK plugins
increment version number to 1.2.9rc1
old version is 1.2.8, not 1.2.7a
sorry, this one didn't make it in 1.2.9rc1 :(
unconditionally build libipt_connmark.so (Carlo Pires)
update ipt_physdev.h (test8 change, make parisc work, alignment issues)
final 1.2.9 release
Hervé Eychenne (1):
Various fixes (Herve Eychenne)
Hime Junior (1):
Fix save function (Hime Aguiar e Oliveira Jr.)
Joszef Kadlecsik (3):
iprange match support added (Jozsef Kadlecsik)
Martin added as Core Team Member (Jozsef)
Userspace files of the raw patch (JK).
Maciej Soltysiak (2):
add random6 patch (Maciej Soltysiak)
add nth match for ipv6 (Maciej Soltysiak)
Martin Devera (1):
Add new connbytes match, include a warning (Martin Devera <[email protected]>)
Martin Josefsson (5):
fix memory leak(s) in libiptc. Reverts the previous (wrong) patch.
(Martin Josefsson)
fix saving of inverted owner match parameters (Martin Josefsson)
Fix the previous fix
Fix possible doubleclose of sockfd.
fix rule deletion in modified libiptc (Martin Josefsson)
Michael Rash (1):
add fix to string match (Michael Rash)
Oliver Fudd (1):
fix NETFILTER_VERSION -> IPTABLES_VERSION (Oliver Fudd
[email protected])
Patrick McHardy (2):
apply ipv6 port of ownercmd patch (Patrick McHardy)
Add addrtype match (Patrick McHardy)
Ryan Veety (1):
fix ipq_id_t on 'real' kernel+userspace 64bit archs (Ryan Veety)
Stephane Ouellette (5):
- Remove unneeded fputc() in help().
the following two patches move the call to check_inverse() to a saner
Cleanups (Stephane Ouellette)
remove unused variable and move to c99 initializers (Stephane Ouellette)
various cosmetic / c99 cleanups (Stephane Ouellette)
Stephen Frost (1):
add ipt_recent version 0.3.1 to CVS
Sven Strickroth (1):
Fix libipt_recent.c save() (Sven Strickroth)
Telford Tendys (1):
add TCPLAG target (patch was lost on notebook drive)
Thomas Woerner (2):
Fix iptables-save (save everything numerically)
fix saving of udp port range in ip6tables (Thomas Woerner)
Tim Vandermeersch (1):
add XOR patch by Tim Vandermeersch
Tomáš Lejdar (1):
Fix libiptc memory hole during iptc_chain_next() (Tomas Lejdar)
Yasuyuki KOZAKAI (1):
Fix invalid port number (Yasuyuki Kozakai)
---
KNOWN_BUGS | 14
extensions/.CLASSIFY-test | 3
extensions/.CONNMARK-test | 2
extensions/.NETMAP-test | 2
extensions/.connmark-test | 2
extensions/.realm-test | 3
COMMIT_NOTES | 24 +
INCOMPATIBILITIES | 6
Makefile | 4
extensions/.IPMARK-test | 3
extensions/.ROUTE-test6 | 2
extensions/.TCPLAG-test | 2
extensions/.XOR-test | 2
extensions/.addrtype-test | 5
extensions/.connbytes-test | 2
extensions/.nth-test6 | 3
extensions/.osf-test | 3
extensions/.random-test6 | 3
extensions/Makefile | 4
extensions/libip6t_LOG.c | 67 +---
extensions/libip6t_MARK.c | 44 +-
extensions/libip6t_ROUTE.c | 209 ++++++++++++++
extensions/libip6t_TRACE.c | 63 ++++
extensions/libip6t_ah.c | 85 ++---
extensions/libip6t_condition.c | 7
extensions/libip6t_dst.c | 157 +++++-----
extensions/libip6t_esp.c | 46 +--
extensions/libip6t_frag.c | 94 +++---
extensions/libip6t_fuzzy.c | 49 +--
extensions/libip6t_hl.c | 85 ++---
extensions/libip6t_mac.c | 17 -
extensions/libip6t_multiport.c | 2
extensions/libip6t_nth.c | 238 +++++++++++++++
extensions/libip6t_owner.c | 43 ++
extensions/libip6t_random.c | 152 ++++++++++
extensions/libip6t_udp.c | 4
extensions/libipt_IPMARK.c | 170 +++++++++++
extensions/libipt_LOG.c | 67 +---
extensions/libipt_MASQUERADE.c | 2
extensions/libipt_NOTRACK.c | 63 ++++
extensions/libipt_REJECT.c | 16 +
extensions/libipt_ROUTE.c | 74 +++-
extensions/libipt_TCPLAG.c | 228 +++++++++++++++
extensions/libipt_TRACE.c | 63 ++++
extensions/libipt_XOR.c | 112 +++++++
extensions/libipt_addrtype.c | 214 ++++++++++++++
extensions/libipt_condition.c | 7
extensions/libipt_connbytes.c | 134 +++++++++
extensions/libipt_connlimit.c | 36 +-
extensions/libipt_conntrack.c | 24 +
extensions/libipt_fuzzy.c | 6
extensions/libipt_iprange.c | 195 +++++++++++++
extensions/libipt_mac.c | 17 -
extensions/libipt_mport.c | 4
extensions/libipt_multiport.c | 2
extensions/libipt_osf.c | 130 ++++++++
extensions/libipt_owner.c | 2
extensions/libipt_physdev.c | 120 +++++---
extensions/libipt_psd.c | 27 -
extensions/libipt_recent.c | 78 ++---
extensions/libipt_sctp.c | 402 +++++++++++++++++++++++++++
extensions/libipt_state.c | 12
extensions/libipt_string.c | 100 ++++--
include/libipq/libipq.h | 2
include/libiptc/libip6tc.h | 3
include/libiptc/libiptc.h | 3
include/linux/netfilter_ipv4/ipt_CLASSIFY.h | 8
include/linux/netfilter_ipv4/ipt_CONNMARK.h | 15 +
include/linux/netfilter_ipv4/ipt_connlimit.h | 12
include/linux/netfilter_ipv4/ipt_connmark.h | 9
include/linux/netfilter_ipv4/ipt_iprange.h | 23 +
include/linux/netfilter_ipv4/ipt_physdev.h | 11
include/linux/netfilter_ipv4/ipt_realm.h | 9
include/linux/netfilter_ipv4/ipt_sctp.h | 25 +
ip6tables-restore.c | 7
ip6tables-save.c | 2
ip6tables.8 | 60 ++--
ip6tables.c | 9
iptables-restore.c | 7
iptables-save.c | 2
iptables.8 | 124 +++++---
iptables.c | 6
libiptc/libip4tc.c | 14
libiptc/libip6tc.c | 16 +
libiptc/libiptc.c | 289 ++++++++++++++-----
85 files changed, 3648 insertions(+), 764 deletions(-)
---
_______________________________________________
svn mailing list
[email protected]
http://mailman.vyatta.com/mailman/listinfo/svn
