[netfilter-cvslog] [IPtables] annotated tag, svn_t_iptables_1_2_1, created. svn_t_iptables_1_2_1
Patrick McHardy
netfilter-cvslog-bounces at lists.netfilter.org
Wed May 14 19:11:15 CEST 2008
Gitweb: http://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commit;h=f4509dc94f48c286be95882ea621ac790f881e9c
Commit: f4509dc94f48c286be95882ea621ac790f881e9c
Parent: 0000000000000000000000000000000000000000
The annotated tag, svn_t_iptables_1_2_1 has been created
at f4509dc94f48c286be95882ea621ac790f881e9c (tag)
tagging e59ad3554de6a9d3f036938fb393b221446b35c1 (commit)
replaces svn_t_rel-1-1-0
tagged by Patrick McHardy
on Wed May 14 18:58:01 2008 +0200
- Log -----------------------------------------------------------------
Tag svn_t_iptables_1_2_1
jamesm (9):
M.P.Anand Babu's fix for iptables rename chain without new chain bug.
doco was very out of date and basically useless
updated port range specification to match existing code
Include ip6tables in installation
More stuff
minor fix
added ipq_errstr() to API
Initial commit of libipq man pages.
added install-devel target
laforge (50):
minor output bug in save()
two libiptc bugs fixed, including the 'segv while doing more than one
small fixes in the save() function of the ULOG and tcp extension
new revision of TTL and ttl patch. Match bugfixed, supports now == !+ < >
ICMPv4 over IPv6 is no good idea :(
shlib plugin foer ip6tables MARK added
added shlib plugin for ipv6 mark match
make iptables-restore and iptables-save work again!
make iptables-restore and iptables-save work again
preprocessor macro syntax
adding --noflush option for iptables-restore
patch-test8-ipv6-fixes removes one item from TODO
Added iptbles-restore and iptables-save manpages
o serveral changes / additions to libiptc:
Added save/restore manpages to Makefile
libiptc counter functions
libiptc counter function
fixes segfault in iptables-save
added 'iptables --set-counters' and fixed counter-restore in iptables-restore
added iptables --set-counters
new, more detailed TODO list
fix another iptables-save segfault when match doesn't provide save function (bug detected by Emmanuel Roger, fix by HW)
--log-prefix and --ulog-prefix problem when not quoted in save function (reported and fixed by Bart Theunissen)
todo item about bridge added
Fixes bug with inverted destination IP (report+fix by Bart Theunissen)
new ULOG revision: supports in-kernel batching of packets and netlink multipart messages
new ULOG revision: supports in-kernel batching of packets and netlink multipart
new extension for new ULOG target (in-kernel queuing, netlink multipart msg)
yes... someone is actually working on TODO items :)
rusty is working on some items
added seqoffset and irc patch to pending
psd match fix. Due to a typo in the pathname not all files have been applied.
Yon Uriarte working on u32 classifier
LOG Target for IPv6 (Jan Rekorajski)
Port of IPv6 owner match, fixes for IPv6 limit mac and multiport matches (Jan Rekorajski)
TODO update
iptables.8 spelling fixes + scoreboard update
New SAME nat target added. (contrib by Martin Josefsson)
included rusty's TOS checksum fix, as it didn't make it into 2.4.1
todo updates (ip_nat_ident, cvs snapshots)
iptables.8 --modprobe fix by Chapman Brad
ip6tables-save/-restore by Kis-Szabo Andras
forgot to add those two...
fixed problems with multiple do_command() calls and match ordering (Sven Koch)
added (10.1.2.3.4 is accepted as a valid IP address by iptables)
fix the match-loading at protocol specification time (Sven Koch)
1.2.1 release is upcoming
fixing a lot of bugs / cleaning up
fixed makefile bug, include ipv6 stuff in experimental only if DO_IPV6 is set
release-diff for 1.2.1
marc (3):
Test for TCPMSS target.
Fixed small typo.
Added support for --clamp-mss-to-pmtu option.
rusty (108):
Philip Blundell's IPv6 fixes.
Added explicit mention of make install.
port-unreachable, not net-unreachable mistake in REJECT doco.
Minor change for debugging.
Philip Blundell's IPv6 patches.
Phil Blundell: ICMP, TCP and UDP extensions + rule deletion bug.
Phil Blundell's new ipv6 extensions.
Made error message clearer.
Phil's missing file 8)
new TODO points
Marco Masetti's -C insists on -o and -i bug report.
REJECT enhancements.
More to do.
Document that we (now) allow mac match in FORWARD
Aligning matchsize and targetsize now responsibility of extension writers
More PPC alignment fixes.
More to do
Don't reverse matches on command line (matters for -m limit).
Modifications for new header (entries -> entrytable, for alignment reasons)
Remove ICMP packet-filtered option (deprecated).
Yet another thing to do.
Patches and isapplied script for reducing bug reports.
Updated for new release.
Updated REJECT documentation
Always more
More intelligent `something wrong' message.
A few more fixes.
Harald Welte's ULOG target with tests (untested).
Harald Welte's other file (which Rusty forgot).
Harald Welte gets more ideas...
Added -m documentation.
Report error when a shared target can't be opened - Hawald Welte.
Finally resolve dependency problems. (Olivier Baudron's report)
Better message for table does not exist.
Disable ULOG (pending patch to make it dependent on header in KERNEL_DIR).
Revert Harald's LOAD_MUST_SUCCEED to -j (may be chain name).
Applied by Linus.
Handle *really* large index values without segfaulting.
Stop shadowing parameter.
Jan Echternach's patch for bignums
Jan Echternach's const tweak.
Jan Echternach's string_to_number bignum fixes.
Minor compile fixes.
Required blank MIRROR target for Harald Welte's dlopen force patch.
Patch-o-matic! now included.
Marc Boucher's TCPMSS patch.
Updated.
No longer needed.
Harald Welte's dynamic loading fix.
TCP MSS matching support (untested).
Fixed compile errors.
More to do.
Allow --tcp-flags ! A B.
Fixed ! test cases.
Fixes for targets with no print() function.
print and save can be NULL.
Missing ;
Derrik Pates's tcpflags wrong way round when -n no specified.
Start of Sparc64 fixes.
More sparc64 fixes.
More sparc64 fixes.
More sparc64 fixes
More debugging.
More debugging.
More debugging.
Finally fixed sparc64 counter bug (I hope).
Fixed length of LOG
Added DROPPING chain.
Add drop table support
Fix typo.
Fixed ultrasparc alignment define.
Fix allocation (base new alloc on current size, not original size).
Emmanuel Roger's string matching patch.
Harald Welte's ttl stuff.
Update.
Known bugs for 2.4.0
Add patch-o-matic comment.
Reorganized: added EXTRA EXTENSIONS section.
Added Harald Welte
BALANCE target alpha support.
Added <linux/in6.h> for libc5.
Allow patch-o-matic/ as a target (convenient for tab-completion)
Stop --reject-with echo-reply (won't be supported soon).
Test for record rpc.
Gerd Knorr's iplimit.
Matthew G. Marsh's FTOS patch.
Libc5 can't do IPv6.
Define IPPROTO_ESP and IPPROTO_AH in case of primitive headers.
Remove malloc warning.
Add Harald's (munged) modprobe patch.
Forgot to add this before, I think.
New INSTALL instructions.
Added experimental rule.
Addeed FIXME.
Fix compile warning about const.
Revert malloc. Why?
Spelling fix and whitespace clean.
More TODO.
New version will be 1.2.
Oops. -v, not --v.
/usr/local/sbin, not /usr/local/bin.
Fix Makefile (ldd -v doesn't work on my ldd).
Clean must delete experimental binaries as well.
=?iso-8859-1?Q?Fr=E9d=E9ric_L_=2E_W_=2E?= Meunier's `1.1.2 shipped with .so' fix.
Cleanup
pre-release target for Makefile.
Added Laurence J. Lane's CR at end of /proc/sys/modprobe removal patch.
Move some include files to be present always, so build always includes them even if patches not applied (eg. for distributions).
-----------------------------------------------------------------------
hooks/post-receive
--
IPtables
More information about the netfilter-cvslog
mailing list