shorewall_code/Shorewall/changelog.txt
2003-09-18 22:49:34 +00:00

83 lines
2.1 KiB
Plaintext
Executable File

Changes since 1.4.6
1) Added Smart Blacklisting.
2) Move determine_capabilities call to do_initialize to ensure that
MANGLE_ENABLED is set before it is tested.
3) Fixed MAC address handling in the SOURCE column of tcrules.
4) Merged and corrected Steve Herber's command-specific help patch.
5) Removed some undocumented/braindead code from setup_masq()
6) Don't allow 'stop' when startup is disabled
7) Added ADMINISABSENTMINDED option.
8) Fixed adding addresses to ppp interfaces.
9) Added generic tunnel support.
10) Added support for Address Range Lists in /etc/shorewall/masq.
11) Simplify ip_broadcast()
12) Add 'arp_filter' interface option.
13) Added accounting file support
14) Fixed bug where an interface name alone appears in the DESTINATION
column of the accounting file.
15) Add ACTION column to accounting file.
16) Add CHAIN declarations to accounting file.
17) Replace calls to chain_exists with calls to havechain in
accounting code.
18) Allow degenerate DONE and COUNT rules.
19) Interface-specific dynamic blacklisting chains are now displayed by
"shorewall monitor".
20) Bridge interfaces (br[0-9]) can now be used in /etc/shorewall/maclist.
21) Rate-limited rules added.
22) Make burst optional in rate limited rules and policies.
23) Allow display of multiple chains in one "shorewall show" command.
24) Add "RATE LIMIT" column for those who prefer their config files to
be wide but normalized.
25) Redesign the accounting facility to make it simpler and more
flexible.
26) Add Henry Wang's fix for LOGRATE/LOGBURST and enhance to resolve
conflict between that facility and rate-limited logging rules.
27) Add User Set capability.
28) Deimplement Smart Blacklisting and fix problem with multiple
'drop'/'reject' commands for the same address.
29) Update for 1.4.7 Beta 1.
30) Fix ADD_SNAT_ALIASES interaction with ip ranges used for
load-balancing.
31) Fix IPV6 address confusion.
32) Add "o.gz" to the list of module extensions.
33) Replace existing route to PROXY ARP host rather than adding another
one.
34) Update of rfc1918 file.
35) Correct rules file comment.