2012-10-15 20:16:54 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 15 18:08:54 UTC 2012 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 1.47
|
|
|
|
|
* Support for IPv6 in xt_psd
|
|
|
|
|
|
2012-08-23 16:10:18 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 23 13:53:48 UTC 2012 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 1.46
|
|
|
|
|
* length2, SYSRQ, RAWNAT: preinitialize values for ipv6_find_hdr
|
|
|
|
|
* TARPIT: fix memory leak when tarpit_generic() fails
|
|
|
|
|
* Support for Linux 3.6
|
|
|
|
|
|
2012-07-15 14:02:21 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Jul 15 12:00:03 UTC 2012 - jengelh@inai.de
|
|
|
|
|
|
2012-07-16 05:48:35 +02:00
|
|
|
- Update to new upstream release 1.45
|
2012-07-15 14:02:21 +02:00
|
|
|
* SYSRQ: fix double target initialization at module load
|
|
|
|
|
* TARPIT: IPv6 support
|
|
|
|
|
|
2012-04-05 05:06:09 +02:00
|
|
|
-------------------------------------------------------------------
|
2012-06-30 19:47:20 +02:00
|
|
|
Sat Jun 30 17:45:42 UTC 2012 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 1.43
|
|
|
|
|
* xt_psd: avoid crash due to curr->next corruption
|
|
|
|
|
* xt_psd: reject invalid match options
|
|
|
|
|
* DNETMAP: new type: static binding
|
|
|
|
|
* DNETMAP: new persistent flag option for prefix
|
|
|
|
|
* DNETMAP: add write support to procfs interface
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2012-04-05 05:06:09 +02:00
|
|
|
Thu Apr 5 03:04:48 UTC 2012 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- update to new upstream release 1.42
|
|
|
|
|
* Linux 3.3/3.4 support
|
|
|
|
|
|
2012-02-13 12:59:40 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 13 10:58:00 UTC 2012 - coolo@suse.com
|
|
|
|
|
|
|
|
|
|
- patch license to follow spdx.org standard
|
|
|
|
|
|
2012-01-04 22:15:57 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 4 20:37:45 UTC 2012 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- update to new upstream release 1.41
|
|
|
|
|
* support for Linux 3.2
|
|
|
|
|
|
2011-12-31 00:37:41 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 30 23:35:33 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- We have now a few of kernel versions that ipset can be compiled
|
|
|
|
|
against, so ipset has been separated out into a new RPM package,
|
|
|
|
|
and ipset-genl from xtables-addons is hereby subsequently
|
|
|
|
|
disabled.
|
|
|
|
|
|
2011-11-30 11:49:00 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 30 10:43:07 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- update to new upstream release 1.40
|
|
|
|
|
* xt_ECHO: fix kernel warning about RTAX_HOPLIMIT being used
|
|
|
|
|
* xt_ipv4options: fix an infinite loop
|
|
|
|
|
* Provides ipset 6.10: ICMP/ICMPv6 type/code parser bug fixed;
|
|
|
|
|
fix lookup of tcp port names
|
|
|
|
|
|
2011-09-21 20:10:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 21 18:01:56 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- update to new upstream release 1.39
|
|
|
|
|
* update to ipset 6.9.1
|
|
|
|
|
* resolve compilation errors due to missing libxtables_CFLAGS
|
|
|
|
|
|
2011-08-20 17:26:04 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Aug 20 15:03:31 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- update to new upstream release 1.38
|
|
|
|
|
* Restore UDP functionality for xt_psd
|
|
|
|
|
* UDPLITE support for xt_SYSRQ, xt_ipp2p, xt_pknock, xt_psd
|
|
|
|
|
* Provides ipset 6.8
|
|
|
|
|
|
2011-06-03 17:17:16 +02:00
|
|
|
-------------------------------------------------------------------
|
2011-06-25 11:28:27 +02:00
|
|
|
Sat Jun 25 09:25:25 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- update to new upstream release 1.37
|
|
|
|
|
* xt_SYSRQ: make IPv6 trigger work again
|
|
|
|
|
* xt_SYSRQ: improve security: include host address in digest
|
|
|
|
|
* xt_TARPIT: fix a kernel oops in --reset mode
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2011-06-03 17:17:16 +02:00
|
|
|
Fri Jun 3 15:11:54 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- update to new upstream release 1.36
|
|
|
|
|
* update to ipset 6.7
|
|
|
|
|
* xt_TARPIT has gained the "honeypot" and "reset" modes
|
|
|
|
|
|
2011-04-12 00:04:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 11 21:59:02 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 1.35
|
|
|
|
|
* update to ipset 6.3
|
|
|
|
|
* ipset-genl: handle EAGAIN return value emitted from autoloader
|
|
|
|
|
* ipset-genl: resolve nfgenmsg remains and fix spurious protocol abort
|
|
|
|
|
|
2011-04-07 17:13:26 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 7 15:11:31 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 1.34
|
|
|
|
|
* xt_pknock: avoid crash when hash TFM could not be allocated
|
|
|
|
|
* xt_pknock: avoid inversion of rule lookup that led to warnings
|
|
|
|
|
* xt_DNETMAP: add missing module alias
|
|
|
|
|
* xt_DNETMAP: support for kernels below 2.6.34
|
|
|
|
|
- Add kmp preamble file
|
|
|
|
|
|
2011-02-02 05:49:19 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 2 04:28:55 UTC 2011 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 1.33
|
|
|
|
|
* IPv6 GeoIP support
|
|
|
|
|
* New DNETMAP extension
|
|
|
|
|
* Update to ipset 5.4-genl
|
|
|
|
|
|
2010-11-05 19:51:37 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 5 18:50:05 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- Update to new upstream release 1.31
|
|
|
|
|
* LOGMARK: print remaining lifetime of ct entries
|
|
|
|
|
* xt_iface: allow matching against incoming/outgoing interface
|
|
|
|
|
* libxt_gradm: match packets based on status of grsecurity RBAC
|
|
|
|
|
|
2010-10-09 08:59:43 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Oct 9 06:59:07 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- Do not build xt_TEE, xt_CHECKSUM; they are provided in newer
|
|
|
|
|
iptables and kernel versions already
|
|
|
|
|
|
2010-10-03 22:35:31 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Oct 3 08:17:43 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release 1.30
|
|
|
|
|
* support for Linux 2.6.36
|
|
|
|
|
* update to ipset 4.4
|
|
|
|
|
- ipport{,ip,net}hash did not work with mixed "src" and "dst"
|
|
|
|
|
destination parameters
|
|
|
|
|
* do ship ip_set_ipport{ip,net}hash
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jul 24 09:47:54 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release 1.28
|
|
|
|
|
* RAWNAT: IPv6 variants erroneously rejected masks /33-/128
|
|
|
|
|
* new target xt_CHECKSUM
|
|
|
|
|
* xt_length2: add support for IPv6 jumbograms
|
|
|
|
|
* xt_geoip: fix possible out-of-bounds access
|
|
|
|
|
* import xt_geoip database scripts
|
|
|
|
|
|
2010-07-24 11:48:27 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 29 11:51:47 UTC 2010 - lnussel@suse.de
|
|
|
|
|
|
|
|
|
|
- don't require kernel module package (bnc#618244)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 17 07:23:05 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release 1.27
|
|
|
|
|
* support for upcoming Linux 2.6.35
|
|
|
|
|
|
2010-05-03 23:21:00 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat May 1 09:15:48 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release 1.26
|
|
|
|
|
* fix compile error with kernel 2.6.34
|
|
|
|
|
|
2010-04-26 23:48:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 26 12:15:08 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release 1.25
|
|
|
|
|
* incorporated changes from upstream review into xt_TEE:
|
|
|
|
|
(rechecksumming in PREROUTING, decrease TTL on cloned packet, set
|
|
|
|
|
dont-fragment on cloned packets, free skb when route lookup
|
|
|
|
|
failed, do not limit use to mangle table, do not retain iif and
|
|
|
|
|
mark on cloned packet, new loop detection logic, use less
|
|
|
|
|
expensive pskb_copy)
|
|
|
|
|
|
2010-03-20 01:41:28 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 17 22:09:45 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release 1.24
|
|
|
|
|
* ipp2p: updated bittorent command recognition
|
|
|
|
|
|
2010-03-19 09:56:39 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 25 00:07:24 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release 1.23
|
|
|
|
|
* ipset updated to 4.2
|
|
|
|
|
* removal of obsoleted configure options;
|
|
|
|
|
compile fixes for IPV6=n and 2.6.32's skb_dst
|
|
|
|
|
* support for Linux 2.6.33 and the projected 2.6.34 net tree
|
|
|
|
|
|
2010-02-12 00:47:05 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 12 00:46:09 CET 2010 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- add KMP to specfile (to give description to kmp subpacks)
|
|
|
|
|
|
2010-02-09 22:19:46 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jan 23 02:32:52 CET 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release 1.22
|
|
|
|
|
* ipset: enable build of ip_set_setlist.ko
|
|
|
|
|
* quota2: add the --no-change mode
|
|
|
|
|
- remove merged patch geoip-dir.diff (use
|
|
|
|
|
/usr/share/xt_geoip instead of /var/geoip)
|
|
|
|
|
|
2010-01-07 11:52:44 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 31 01:50:38 CET 2009 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- initial OBS package
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 09 2009 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release: 1.21
|
|
|
|
|
* fix clashing setsockopt numbers between xt_ACCOUNT and arptables
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 19 2009 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release: 1.20
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 12 2009 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- new upstream release: 1.19
|
