1# 2# NOTE: Quite a few patches and suggestions come from other sources, to whom 3# I'm greatly indebted, even if no names are mentioned. 4# 5# Thanks to the Coombs Computing Unit at the ANU for their continued support 6# in providing a very available location for the IP Filter home page and 7# distribution center. 8# 9# Thanks also to all those who have contributed patches and other code, 10# and especially those who have found the time to port IP Filter to new 11# platforms. 12#
| 1# 2# NOTE: Quite a few patches and suggestions come from other sources, to whom 3# I'm greatly indebted, even if no names are mentioned. 4# 5# Thanks to the Coombs Computing Unit at the ANU for their continued support 6# in providing a very available location for the IP Filter home page and 7# distribution center. 8# 9# Thanks also to all those who have contributed patches and other code, 10# and especially those who have found the time to port IP Filter to new 11# platforms. 12#
|
| 134.1.10 - Released 6 December 2005 14 15Expand regression testing to cover more features 16 17Add "coverage" build target for BSD 18 19Fix building 64bit sparc target for Solaris 20 21Add IPv6 mobility header to list of accepted keywords for V6 headers 22 23Resolve locking problems on Solaris when sending RST/icmp packets 24 25#ifdef's for IPFILTER_BPF need to check if words are defined before 26using them in comparisons 27 28Add checking for SACK permitted option in TCP SYN packets 29 30Fix loading anonymous pools from inline rule configuration groups 31 32Add -C command line option to ipftest 33 34Include extra "const" from NetBSD 35 36Don't require SIOCKSTLCK for SIOCSTPUT 37 38Fix some use of "sticky" on NAT rules 39 40Fix statistical counting of deleting state for TCP connections 41 42Fix compile problems caused by changes to is_opt/is_optmsk in ip_sync.c 43 44Fix TCP out-of-window (OOW) problems: 45- window scaling turned off if one chose for its scale factor 46- Microsoft Windows TCP sends the "next packet" to the right of the window 47 when using SACK and filling in a hole 48 494.1.9 - Released 13 August 2005 50 51make ipfilter fix IPv4 header checksums for outgoing packets if BRIDGE_IPF 52is defined when compiled. 53 54move the definition of SIOCPROXY from ip_nat.h to ip_proxy.h 55 56make the BSD/upgrade script more instructive about the requiements for 57ip_rules.[ch] when it is run 58 59register for interface events on FreeBSD (>5.2.1) and NetBSD so that 60"ipf -y" is not not requried to tell ipfilter about interface changes. 61 62for "quick" rules that do "keep state", move the state adding into the rule 63evaluation so that we can detect it failing as rules are evaluated and 64continue on to the next rather than wait until we're done and it's too late 65to recover for more rule processing. 66 67mark ICMP packets advertising an MTU that's too small as being bad 68 69rework ipv6 header parsing to get better code reuse and fix logic errors 70in dealing with ipv6 packets containing fragment headers. Also, where a 71protocol handler was doing both v4 & v6, make a seperate function for each. 72 73build for both amd64 and i86pc (32bit) on Solaris10 and later, if possible 74 75include start of work to get IPFilter working on AIX 5.3 76 77Use FI_ICMPERR flag rather than try to compute its equivalent all the time 78 79Rewrork IPv6 extension header parsing to get better code reuse 80 81Add missing timeout on Linux 82 83Fix for locking when reading from ipsync (Frank Volf) 84 85Fix insertion/appending of rules that use a collection number 86 87Somehow turning up the spl knob to splnet disappeared on platforms that still 88use the spl interface. 89 90fix problems with "ipf -T" not listing multiple variables properly 91
|
134.1.8 - Released 29 March 2005 14 15include path from Phil Dibowitz for sorting ipfstat -t output by source or 16destination port. 17 18fix a bug in printing rules where interface names could not be printed, 19even if they're in the rule structure. 20
--- 1865 unchanged lines hidden --- | 924.1.8 - Released 29 March 2005 93 94include path from Phil Dibowitz for sorting ipfstat -t output by source or 95destination port. 96 97fix a bug in printing rules where interface names could not be printed, 98even if they're in the rule structure. 99
--- 1865 unchanged lines hidden --- |