1#
2# NOTE: Quite a few patches and suggestions come from other sources, to whom
3# I'm greatly indebted, even if no names are mentioned.
4#
5# Thanks to the Coombs Computing Unit at the ANU for their continued support
6# in providing a very available location for the IP Filter home page and
7# distribution center.
8#
9# Thanks also to all those who have contributed patches and other code,
10# and especially those who have found the time to port IP Filter to new
11# platforms.
12#
| 1#
2# NOTE: Quite a few patches and suggestions come from other sources, to whom
3# I'm greatly indebted, even if no names are mentioned.
4#
5# Thanks to the Coombs Computing Unit at the ANU for their continued support
6# in providing a very available location for the IP Filter home page and
7# distribution center.
8#
9# Thanks also to all those who have contributed patches and other code,
10# and especially those who have found the time to port IP Filter to new
11# platforms.
12#
|
| 134.1.10 - Released 6 December 2005
14
15Expand regression testing to cover more features
16
17Add "coverage" build target for BSD
18
19Fix building 64bit sparc target for Solaris
20
21Add IPv6 mobility header to list of accepted keywords for V6 headers
22
23Resolve locking problems on Solaris when sending RST/icmp packets
24
25#ifdef's for IPFILTER_BPF need to check if words are defined before
26using them in comparisons
27
28Add checking for SACK permitted option in TCP SYN packets
29
30Fix loading anonymous pools from inline rule configuration groups
31
32Add -C command line option to ipftest
33
34Include extra "const" from NetBSD
35
36Don't require SIOCKSTLCK for SIOCSTPUT
37
38Fix some use of "sticky" on NAT rules
39
40Fix statistical counting of deleting state for TCP connections
41
42Fix compile problems caused by changes to is_opt/is_optmsk in ip_sync.c
43
44Fix TCP out-of-window (OOW) problems:
45- window scaling turned off if one chose for its scale factor
46- Microsoft Windows TCP sends the "next packet" to the right of the window
47 when using SACK and filling in a hole
48
494.1.9 - Released 13 August 2005
50
51make ipfilter fix IPv4 header checksums for outgoing packets if BRIDGE_IPF
52is defined when compiled.
53
54move the definition of SIOCPROXY from ip_nat.h to ip_proxy.h
55
56make the BSD/upgrade script more instructive about the requiements for
57ip_rules.[ch] when it is run
58
59register for interface events on FreeBSD (>5.2.1) and NetBSD so that
60"ipf -y" is not not requried to tell ipfilter about interface changes.
61
62for "quick" rules that do "keep state", move the state adding into the rule
63evaluation so that we can detect it failing as rules are evaluated and
64continue on to the next rather than wait until we're done and it's too late
65to recover for more rule processing.
66
67mark ICMP packets advertising an MTU that's too small as being bad
68
69rework ipv6 header parsing to get better code reuse and fix logic errors
70in dealing with ipv6 packets containing fragment headers. Also, where a
71protocol handler was doing both v4 & v6, make a seperate function for each.
72
73build for both amd64 and i86pc (32bit) on Solaris10 and later, if possible
74
75include start of work to get IPFilter working on AIX 5.3
76
77Use FI_ICMPERR flag rather than try to compute its equivalent all the time
78
79Rewrork IPv6 extension header parsing to get better code reuse
80
81Add missing timeout on Linux
82
83Fix for locking when reading from ipsync (Frank Volf)
84
85Fix insertion/appending of rules that use a collection number
86
87Somehow turning up the spl knob to splnet disappeared on platforms that still
88use the spl interface.
89
90fix problems with "ipf -T" not listing multiple variables properly
91
|
134.1.8 - Released 29 March 2005
14
15include path from Phil Dibowitz for sorting ipfstat -t output by source or
16destination port.
17
18fix a bug in printing rules where interface names could not be printed,
19even if they're in the rule structure.
20
--- 1865 unchanged lines hidden --- | 924.1.8 - Released 29 March 2005
93
94include path from Phil Dibowitz for sorting ipfstat -t output by source or
95destination port.
96
97fix a bug in printing rules where interface names could not be printed,
98even if they're in the rule structure.
99
--- 1865 unchanged lines hidden --- |