conntrack-tools.git, branch conntrack-tools-0.9.14

build: bump version to 0.9.14

2009-12-28T18:20:37+00:00

This patch bumps conntrack-tools version to 0.9.14. Signed-off-by: Pablo Neira Ayuso

conntrackd: document `-B' command

2009-12-23T23:16:53+00:00

This patch documents the `-B' command in conntrackd that allows you to force a bulk send to other firewall nodes in the cluster. Reported-by: Tino Keitel Signed-off-by: Pablo Neira Ayuso

conntrack: fix manually created TCP entries with window tracking enabled

2009-12-23T22:29:06+00:00

With this patch, we allow to manually create TCP entries in the table. Basically, we disable TCP window tracking for this entry to avoid problems. Reported-by: Roman Fiedler Signed-off-by: Pablo Neira Ayuso

conntrackd: document internal cache disabling and TCP-based synchronization

2009-12-23T19:31:10+00:00

This patch documents the internal cache disabling feature that is available for the NOTRACK mode. I have also added an example on how to set up a TCP-based state-synchronization. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix flow-state filtering for TCP

2009-12-23T18:40:49+00:00

This patch fixes the clause `State' in `Filter' that allows you to filter by protocol state. This bug was introduced during the implementation of the TCP-based synchronization. Signed-off-by: Pablo Neira Ayuso

conntrackd: add ICMP support for state-synchronization

2009-12-19T14:24:20+00:00

This patch adds state-synchronization for ICMP. You SHOULD use a Linux kernel >= 2.6.31, otherwise this patch can result in tons of state-updates. Signed-off-by: Pablo Neira Ayuso

conntrackd: use indirect call to build layer 4 protocol information

2009-12-19T12:55:00+00:00

With this patch, we use an indirect call to build the layer 4 information into the synchronization message. Signed-off-by: Pablo Neira Ayuso

conntrackd: add `DisableInternalCache' clause

2009-10-20T23:43:07+00:00

This patch adds the clause `DisableInternalCache' that allows you to bypass the internal cache. This clause can only be used with the notrack synchronization mode. Signed-off-by: Pablo Neira Ayuso

conntrackd: add missing external statistics

2009-10-14T14:14:12+00:00

In 0b03f4b759e439edd2c3da0add08050276d7dc5f, I forgot to increase the stats for successful cases. This patch fixes this. Signed-off-by: Pablo Neira Ayuso

conntrackd: add statistics when the external cache is disabled

2009-10-14T13:58:18+00:00

# conntrackd -s external inject: connections created: 0 failed: 0 connections updated: 0 failed: 0 connections destroyed: 0 failed: 0 Signed-off-by: Pablo Neira Ayuso