20111215 Changelog for v2.0.10-4 * really fix counter setting bug (thanks to James' persistence) 20111204 Changelog for v2.0.10-3 * fix counter setting bug (reported by James Sinclair) 20110710 Changelog for v2.0.10-2 * enable compiler optimizations (-O3) * small changes to remove the compiler warnings due to optimization being turned on (thanks to Peter Volkov) * respect LDFLAGS in Makefiles (Peter Volkov) 20110710 Changelog for v2.0.10-1 * fix --among-dst-file, which translated to --among-src (reported by Thierry Watelet) * fix bug in test_ulog.c example * Makefile: respect LDFLAGS during ebtables build (Peter Volkov) * Makefile: create directories to avoid build failure when DESTDIR is supplied (Peter Volkov) * incorporate fixes for possible issues found by Coverity analysis (thanks to Jiri Popelka) * define __EXPORTED_HEADERS__ to get access to the Linux kernel headers * extend ebt_ip6 to allow matching on ipv6-icmp types/codes (by Florian Westphal) * Print a more useful error message when an update of the kernel table failed. * Add --concurrent option, which enables using a file lock to support concurrent scripts updating the ebtables kernel tables 20100203 Changelog for v2.0.9-2 * fix unwanted zeroing of counters in the last user-defined chain (reported by Jon Lewis) * fix hidden symbol compilation error when using ld directly * fix return value checking of creat to give a correct error message if the atomic file couldn't be created * correct info in INSTALL about compilation of ulog 20090621 Changelog for v2.0.9 vs v2.0.8-2 * added ip6 module for filtering IPv6 traffic (Kuo-Lang Tseng, Manohar Castelino) * added --log-ip6 option for logging IPv6 traffic (Kuo-Lang Tseng, Manohar Castelino) * added nflog watcher for logging packets to userspace (Peter Warasin) * bugfix in ebtables.sysv (Michal Soltys) * bugfix for among match on x86-64 (reported by Pavel Emelyanov) 20061217 Since last entry: * fixed a few reported bugs * ebt_among --among-dst-file and --among-src-file: allow the list to be given in a file (circumvents command line max. line length * ebt_nat --snat-arp: if it's an arp packet, also change the source address in the arp header * ebt_mark --mark-or, --mark-xor, --mark-and 20051020 Since last entry: * ebtables modules are now located in /usr/lib/ebtables/ * added '/sbin/service ebtables' support * added ebtables-save (thanks to Rok Papez <rok.papez@arnes.si>) and ebtables-restore (the first one a perl script, the second one written in c (fast)) * optimized the code for the '-A' command, making ebtables-restore very fast. * ebtablesd/ebtablesu is deprecated and not compiled by default the ebtables-save/ebtables-restore scheme is much better 20050117 Since last entry: * added ulog watcher * made the ebtables code modular (make library functions). * added the ebtablesd/ebtablesu scheme to allow faster addition of rules (and to test the modular code). * some small fixes * added -c option (initialize counters) * added -C option (change counters) 20031102 Since last entry: * <grzes_at_gnu.univ.gda.pl> added arpreply and among modules * <tommy_at_home.tig-grr.com> added limit match 20030724 * added (automatic) Sparc64 support, thanks to Michael Bellion and Thomas Heinz from hipac.org for providing a test-box. 20030717 * added stp frames match type 20030713 * added support for deleting all user-defined chains (-X option without specified chain) 20030601 * added --Lmac2 * <csv_at_bluetail.com> Chris Vitale: basic 802.3/802.2 filtering (experimental, kernel files are in the CVS) 20030503 * added negative rule counter support * bugfix: bcnt was not updated correctly * <blancher_at_cartel-securite.fr> Cedric Blancher: add ARP MAC matching support * added pkttype match 20030402 * fixed check bug in ebt_ip.c (report from joe_judge_at_guardium.com). 20030111 * fixed problem when removing a chain (report from ykphuah_at_greenpacket.com). * Added --help list_extensions which, well, lists the extensions 20021203 * changed the way to use the atomic operations. It's now possible to use the EBTABLES_ATOMIC_FILE environment variable, so it's no longer necessary to explicitly state the file name. See the man. 20021120 * changed the way of compiling. New releases will now contain their own set of kernel includes. No more copying of kernel includes to /usr/include/linux * added getethertype.c (Nick) and use it. Removed name_to_number() and number_to_name(). 20021106 * added possibility to specify a rule number interval when deleting rules 20021102 * added ! - option possibility, which is equivalent to - ! option 20021102 * since last entry: added byte counters and udp/tcp port matching 20020830 * updated the kernel files for 2.4.20-pre5 and 2.5.32 * last big cleanup of kernel and userspace code just finished 20020820 * ARP module bugfix * IP module bugfix * nat module bugfix 20020730 * other things done before 2.0-rc1 that I can think of, including kernel: * cache align counters for better smp performance * simplify snat code * check for --xxxx-target RETURN on base chain * cleanup code * minor bugfixes 20020724 * code cleanup * bugfix for --atomic-commit 20020720 * added mark target+match 20020714 * added --atomic options 20020710 * some unlogged changes (due to lazyness) * added --Lc, --Ln, --Lx 20020625 * user defined chains support: added -N, -X, -E options. 20020621 * some unlogged changes (due to lazyness) * change the output for -L to make it look like it would look when the user inputs the command. * try to autoload modules * some minor bugfixes * add user defined chains support (without new commands yet, deliberately) * comparing rules didn't take the logical devices into account 20020520 * update help for -s and -d * add VLAN in ethertypes * add SYMLINK option for compiling 20020501 * allow -i and --logical-in in BROUTING * update the manual page * rename /etc/etherproto into /etc/ethertypes (seems to be a more standard name) * add MAC mask for -s and -d, also added Unicast, Multicast and Broadcast specification for specifying a (family of) MAC addresses. 20020427 * added broute table. * added redirect target. * added --redirect-target, --snat-target and --dnat-target options. * added logical_out and logical_in * snat bugfix (->size) 20020414 * fixed some things in the manual. * fixed -P problem. 20020411 * -j standard no longer works, is this cryptic? good :) * lots of beautification. - made some code smaller - made everything fit within 80 columns * fix problems with -i and -o option * print_memory now prints useful info * trying to see the tables when ebtables is not loaded in kernel no longer makes this be seen as a bug. 20020403 ebtables v2.0 released, changes: * A complete rewrite, made everything modular. * Fixed a one year old bug in br_db.c. A similar bug was present in ebtables.c. It was visible when the number of rules got bigger (around 90). * Removed the option to allow/disallow counters. Frames passing by are always counted now. * Didn't really add any new functionality. However, it will be _alot_ easier and prettier to do so now. Feel free to add an extension yourself. * There are 4 types of extensions: - Tables. - Matches: like iptables has. - Watchers: these only watch frames that passed all the matches of the rule. They don't change the frame, nor give a verdict. The log extension is a watcher. - Targets. * user32/kernel64 architectures like the Sparc64 are unsupported. If you want me to change this, give me access to such a box, and don't pressure me.
