Tag 'v1.3.2' created by Harald Welte <[email protected]> at 2005-07-10 16:06
-0700
iptables 1.3.2
Changes since v1.3.1:
Charlie Brady (1):
Flush chain with noflush when it is redefined (Charlie Brady
<[email protected]>)
Evgeniy Polyakov (1):
OSF: lib_ipt.c changes to support connector notifications (Evgeniy
Polyakov <[email protected]>)
Florian Lohoff (1):
add REJECT with icmp-frag-needed (Florian Lohoff)
Harald Welte (9):
pull out pmtu changes to fix compilation issues
include FIN bit in mask of "--syn" bits
we don't have any counter issues in sparc64
add pointer to bugzilla
attempt to fix save/restore of '! --uid-owner squid' problem as reported
by Costa Tsaousis (backport from ipv4 owner)
add note to https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id34
bump version number to 1.3.2
we need to have this header file included, since old kernels don't define
IP6T_LOG_UID.
fix various missing header file / #define issues on old kernels. I've
now tested compilation with kernels starting 2.4.17
Harald WeltePablo Neira (2):
omeone forgot to update ipt_conntrack.h header in user space. So, update
it to use ip_conntrack_old_tuple. (Pablo Neira)
poll goto specific changes out of trunk
Jonas Berlin (5):
improve REDIRECT manpage (Jonas Berlin <[email protected]>)
the optflags array contains a '3' for the OPT_LINENUMBERS entry while
everywhere else '0' is used (Jonas Berlin)
add lots of man pages (Jonas Berlin)
re-sync ip6tables with iptables (check for init functions) (Jonas Berlin)
fix iptables-save/restore of goto (Jonas Berlin)
Michal Pokrywka (1):
SET target bugfix by Michal Pokrywka applied
Pablo Neira (2):
Release previously merged options from merge_opts(), reduces memory-usage
of iptables-restore dramatically (Pablo Neira)
fix deletion of targets where kernel size != userspace size (Pablo Neira)
Patrick McHardy (2):
Ignore unknown arguments in libipt_ULOG (Patrick McHardy
<[email protected]>)
Add --log-uid support to libip6t_LOG (Patrick McHardy <[email protected]>)
Phil Oester (2):
don't allow newlines in LOG prefix (Phil Oester) (Closes: #312)
update multiport manpage (Phil Oester <[email protected]>)
Piotrek Kaczmarek (1):
Fix connbytes command line parsing bug (Piotrek Kaczmarek
<[email protected]>)
Rusty Russell (1):
While adding testing for inversion of multiport, noticed that
documentation about --ports is *wrong*. Ports do not have to be equal: either
dest or src being in list is enough for match.
Tom Eastep (1):
Fix CONNMARK save/restore (Tom Eastep <[email protected]>, Pawel
Sikora <[email protected]>)
Torsten Lüttgert (1):
Fix TCPLAG version (Torsten Lüttgert <[email protected]>)
Yasuyuki KOZAKAI (3):
Chain name should not start with '!' (Yasuyuki Kozakai
<[email protected]>)
This patch prevents user to set negative port value of SNAT/DNAT.
reduce code replication of parse_interface() (Yasuyuki Kozakai)
---
INCOMPATIBILITIES | 6 +
Makefile | 4 -
extensions/libip6t_LOG.c | 28 +++++++-
extensions/libip6t_LOG.man | 3
extensions/libip6t_multiport.man | 9 +-
extensions/libip6t_owner.c | 4 -
extensions/libip6t_physdev.c | 39 -----------
extensions/libipt_CONNMARK.c | 4 -
extensions/libipt_DNAT.c | 4 -
extensions/libipt_IPMARK.man | 45 +++++++++++++
extensions/libipt_IPV4OPTSSTRIP.man | 5 +
extensions/libipt_LOG.c | 4 +
extensions/libipt_REDIRECT.man | 7 +-
extensions/libipt_SAME.man | 11 +++
extensions/libipt_SET.c | 4 -
extensions/libipt_SNAT.c | 4 -
extensions/libipt_TARPIT.man | 34 +++++++++
extensions/libipt_TCPLAG.c | 2
extensions/libipt_ULOG.c | 2
extensions/libipt_XOR.man | 7 ++
extensions/libipt_account.man | 47 +++++++++++++
extensions/libipt_comment.man | 6 +
extensions/libipt_connbytes.c | 1
extensions/libipt_connbytes.man | 30 ++++++++
extensions/libipt_connlimit.man | 21 ++++++
extensions/libipt_hashlimit.man | 35 ++++++++++
extensions/libipt_ipv4options.man | 32 +++++++++
extensions/libipt_multiport.man | 13 ++-
extensions/libipt_osf.c | 14 +++-
extensions/libipt_osf.man | 47 +++++++++++++
extensions/libipt_physdev.c | 39 -----------
extensions/libipt_psd.man | 18 +++++
extensions/libipt_quota.man | 7 ++
extensions/libipt_recent.man | 93 +++++++++++++++++++++++++++
extensions/libipt_sctp.man | 28 ++++++++
extensions/libipt_tcp.c | 2
extensions/libipt_tcp.man | 4 -
extensions/libipt_u32.man | 8 ++
include/ip6tables.h | 2
include/iptables.h | 1
include/linux/netfilter_ipv4/ipt_conntrack.h | 40 +++++++++++
ip6tables-restore.c | 21 ++++--
ip6tables.c | 51 +++++++++-----
iptables-restore.c | 21 ++++--
iptables.8.in | 2
iptables.c | 32 ++++++---
libiptc/libip4tc.c | 1
libiptc/libip6tc.c | 1
48 files changed, 690 insertions(+), 153 deletions(-)
---
_______________________________________________
svn mailing list
[email protected]
http://mailman.vyatta.com/mailman/listinfo/svn
