conntrack-tools.git/doc/sync/notrack, branch conntrack-tools-0.9.14

conntrackd: document internal cache disabling and TCP-based synchronization

2009-12-23T19:31:10+00:00

This patch documents the internal cache disabling feature that is available for the NOTRACK mode. I have also added an example on how to set up a TCP-based state-synchronization. Signed-off-by: Pablo Neira Ayuso

conntrackd: add ICMP support for state-synchronization

2009-12-19T14:24:20+00:00

This patch adds state-synchronization for ICMP. You SHOULD use a Linux kernel >= 2.6.31, otherwise this patch can result in tons of state-updates. Signed-off-by: Pablo Neira Ayuso

conntrackd: break lines at 80 characters in example config files

2009-09-23T15:10:40+00:00

In 49540362b2a25aadbaf25fd087414776aa5a67a8, we forgot to break lines at 80 characters. This patch cleans up this issue. Signed-off-by: Pablo Neira Ayuso

conntrackd: fix bad configuration file for DisableExternalCache statement

2009-09-03T13:06:23+00:00

DisableExternalCache is supposed to be put in mode NOTRACK{} or Mode FTFW{} statement. Signed-off-by: Samuel Gauthier Signed-off-by: Pablo Neira Ayuso

conntrackd: add support state-replication based on TCP

2009-08-23T10:11:20+00:00

This patch adds support for TCP as protocol to replicate state-changes between two daemons. Note that this only makes sense with the notrack mode. Signed-off-by: Pablo Neira Ayuso

conntrackd: add `DisableExternalCache' clause

2009-08-19T14:59:38+00:00

This patch adds the clause `DisableExternalCache' that allows you to disable the external cache and to directly inject the entries into the kernel conntrack table. As a result, the CPU consumption of conntrackd increases. This clause can only be used with the FT-FW and the notrack synchronization modes, but not with the alarm mode. Signed-off-by: Pablo Neira Ayuso

conntrackd: add support for IPv6 kernel-space filtering via BSF

2009-07-21T14:57:54+00:00

This patch adds the missing support to filter IPv6 from kernel-space by means of the BSF API that libnetfilter_conntrack provides. Signed-off-by: Pablo Neira Ayuso

conntrackd: add clause to enable ctnetlink reliable event delivery

2009-07-21T12:36:18+00:00

This patch adds the NetlinkEventsReliable clause, this is useful to turn on reliable Netlink event delivery. This features requires a Linux kernel >= 2.6.31. Signed-off-by: Pablo Neira Ayuso

sync: add support for DCCP state replication

2009-04-24T10:23:03+00:00

This patch adds initial support for DCCP state replication. Signed-off-by: Pablo Neira Ayuso

sync: add support for SCTP state replication

2009-04-18T17:36:38+00:00

This patch adds initial support for SCTP state replication. Signed-off-by: Pablo Neira Ayuso