"Fossies" - the Fresh Open Source Software Archive

Member "aif-2.1.1/share/arno-iptables-firewall/plugins/ipsec-vpn.CHANGELOG" (16 Sep 2020, 2964 Bytes) of package /linux/privat/aif-2.1.1.tar.gz:

    1 Version 0.85 (July 12, 2016)
    2 ----------------------------
    3 + Add support for NAT_IF with fallback to EXT_IF
    4 
    5 Version 0.84BETA (July 31, 2015)
    6 --------------------------------
    7 * Use modprobe_multi for newer kernels
    8 
    9 Version 0.83BETA (March 9, 2011)
   10 --------------------------------
   11 ! Removed Bash-ism
   12 
   13 Version 0.82BETA (November 2, 2010)
   14 -----------------------------------
   15 + Added IPv6 support for matching AH headers
   16 * removed unnecessary EXT_INPUT_CHAIN rule
   17 
   18 Version 0.81BETA (September 19, 2010)
   19 ----------------------------------
   20 * Changed '-t nat' calls via ip4tables
   21 
   22 Version 0.80BETA (August 23, 2009)
   23 ----------------------------------
   24 + Use 'modprobe' wrapper instead of module_probe.
   25 
   26 Version 0.71BETA (June 30, 2009)
   27 --------------------------------
   28 * Fixed IFS regression introduced in 0.70BETA.
   29 
   30 Version 0.70BETA (June 23, 2009)
   31 --------------------------------
   32 * Added policy support to SPOOF_CHK rule to allow spoofing of local addresses
   33   on VPN connections (since IPsec address pool might come out of local
   34   subnet).
   35 
   36 Version 0.61BETA (May 1, 2009)
   37 ------------------------------
   38 * Corrected some comments
   39 
   40 Version 0.60BETA (March 18, 2009)
   41 ---------------------------------
   42 + Support 1.9.0c stop
   43 + Added back support for IPSEC_VPN_NETS.
   44 
   45 Version 0.50BETA (February 26, 2009)
   46 ------------------------------------
   47 * Transitioned to use the "policy" module to detect policy being applied to
   48   IPSec traffic, as well as to detect its state at the various stages (pre-
   49   and post-encapsulation/decapsulation).
   50 + Decrepecated the IPSEC_VPN_NETS variable for now, though it might come in
   51   handy in the future for detecting routing problems and policy mismatches.
   52 
   53 Version 0.41BETA (February 14, 2009)
   54 ------------------------------------
   55 + Reintroduced NATting regression with 0.40BETA... sigh.
   56 
   57 Version 0.40BETA (February 9, 2009)
   58 -----------------------------------
   59 + Added ipt_policy module
   60 + Use -m policy to see if packet is the result of decapsulating an AH or ESP
   61   packet; if so, don't process it in the EXT_INPUT_CHAIN
   62 + Fixed NAT issue where packets that were about to be encapsulated got NATted
   63 
   64 Version 0.31BETA (August 11, 2008)
   65 ----------------------------------
   66 + Unknown
   67 
   68 Version 0.30BETA (July 20, 2008)
   69 --------------------------------
   70 * Renamed plugin to "ipsec-vpn"
   71 + Added NAT traversal
   72 + Added OPEN AH UDP port (just in case)
   73 
   74 Version 0.25BETA (February 19, 2008)
   75 ------------------------------------
   76 * Minor tweak for PLUGIN_RET_VAL
   77 
   78 Version 0.24BETA (February 13, 2008)
   79 ------------------------------------
   80 + Updated according to the new plugin template
   81 
   82 Version 0.23BETA (January 30, 2008)
   83 -----------------------------------
   84 + Updated for new config file location / detection
   85 
   86 Version 0.22BETA (May 25, 2007)
   87 -------------------------------
   88 + Added variable sanity check
   89 * Changed some variable names
   90 
   91 Version 0.21BETA (January 9, 2006)
   92 ----------------------------------
   93 + Updated for new plugin system (separate conf etc.)