conntrack-tools.git/doc/sync/ftfw, branch conntrack-tools-1.0.0

conntrackd: fix wrong kernel requirements for TCPWindowTracking in example files

2010-08-04T17:02:58+00:00

This patch fixes wrong Linux kernel requirements in the example configuration files. We require a Linux kernel >= 2.6.36 instead of >= 2.6.35 as the files suggest. Signed-off-by: Pablo Neira Ayuso

conntrackd: warn on TCPWindowTracking option (it requires kernel >= 2.6.35)

2010-07-15T18:15:16+00:00

This patch adds a comment on the TCPWindowTracking option to warn that this will be supported since the Linux kernel 2.6.35. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix ICMPv6 support

2010-07-01T15:38:07+00:00

This patch fixes several minor nitpicks to support IPv6 failover: * ICMPv6 type/code/id were missing in synchronization messages. * The use of '-' as string in the configuration file was not allowed. * Include example in configuration file under doc/. Reported-by: Mohit Mehta Signed-off-by: Pablo Neira Ayuso

conntrackd: add support for TCP window scale factor synchronization

2010-02-11T11:06:37+00:00

This patch adds a new option TCPWindowTracking that allows not to disable TCP window tracking as it occurs by default. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix UDP filtering in configuration file

2010-02-11T10:56:37+00:00

UDP filtering was broken during the addition of the UDP-based synchronization protocol that was introduced in 0.9.14. This patch fixes the problem. Signed-off-by: Pablo Neira Ayuso

conntrackd: add ICMP support for state-synchronization

2009-12-19T14:24:20+00:00

This patch adds state-synchronization for ICMP. You SHOULD use a Linux kernel >= 2.6.31, otherwise this patch can result in tons of state-updates. Signed-off-by: Pablo Neira Ayuso

conntrackd: break lines at 80 characters in example config files

2009-09-23T15:10:40+00:00

In 49540362b2a25aadbaf25fd087414776aa5a67a8, we forgot to break lines at 80 characters. This patch cleans up this issue. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix bad configuration file for DisableExternalCache statement

2009-09-03T13:06:23+00:00

DisableExternalCache is supposed to be put in mode NOTRACK{} or Mode FTFW{} statement. Signed-off-by: Samuel Gauthier Signed-off-by: Pablo Neira Ayuso

conntrackd: add `DisableExternalCache' clause

2009-08-19T14:59:38+00:00

This patch adds the clause `DisableExternalCache' that allows you to disable the external cache and to directly inject the entries into the kernel conntrack table. As a result, the CPU consumption of conntrackd increases. This clause can only be used with the FT-FW and the notrack synchronization modes, but not with the alarm mode. Signed-off-by: Pablo Neira Ayuso

conntrackd: add support for IPv6 kernel-space filtering via BSF

2009-07-21T14:57:54+00:00

This patch adds the missing support to filter IPv6 from kernel-space by means of the BSF API that libnetfilter_conntrack provides. Signed-off-by: Pablo Neira Ayuso