conntrack-tools.git/examples/sync/persistent/node1, branch conntrack-tools-0.9.7conntrack-tools i.e. conntrack and conntrackd (mirror of https://github.com/vyos/conntrack-tools.git)
https://git.amelek.net/vyos/conntrack-tools.git/atom?h=conntrack-tools-0.9.72007-12-21T18:04:49+00:00o Use more appropriate names for the existing synchronization modes:2007-12-21T18:04:49+00:00/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-12-21T18:04:49+00:00urn:sha1:5bac4f06e8ebc81ed16ec93a0db8682e6a359608
o rename `persistent' mode to `alarm'
o rename `nack' mode to `ftfw'
o Now default synchronization mode is ftfw instead of alarm
Add CacheWriteThrough clause: external cache write through policy. This feature is particularly useful for active-active setup without connection persistency, ie. you cannot know which firewall would filter a packet that belongs to a connection.2007-11-25T18:08:02+00:00/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-11-25T18:08:02+00:00urn:sha1:3c5e35974c65f4470e6543c2cc772c0f1824dc44add syslog support and bump version2007-09-12T15:23:14+00:00/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-09-12T15:23:14+00:00urn:sha1:66cd168df39bfcf581bb36250a080a66331ee5cdremove script_fault.sh script2007-07-28T14:57:17+00:00/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-07-28T14:57:17+00:00urn:sha1:cd09996fd84d7b1808faa381efc41bd11f186e63conntrackd:2007-07-18T20:04:00+00:00/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-07-18T20:04:00+00:00urn:sha1:18bbf19becaab7dc4137406928f96ad089192f69
- use buffer of MTU size
conntrack:
- better protocol argument checkings
- fix per-protocol filtering, eg. conntrack -[L|E] -p tcp now works
- show per-protocol help, ie. conntrack -h -p tcp
- add alias --src for --orig-src and alias --dst for --orig-dst
o remove useless backlog parameter in multicast sockets2007-06-04T15:19:42+00:00/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-06-04T15:19:42+00:00urn:sha1:cea33148e4ccf108f587e5796c026600aba35ab1
o remove reminiscents of delay destroy message and relax transitions
o remove confusing StripNAT parameter: NAT support enabled by default
o relax event tracking: *_update callbacks use cache_update_force
o use wraparound-aware functions after/before/between
o lots of cleanups
add script for keepalived fault state (eg. unplugged cable/link down)2007-05-15T11:53:07+00:00/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-05-15T11:53:07+00:00urn:sha1:34d1c62cd414a6d3321d9a51fc6e1d61f36da2f0- remove overkill recursive Makefile.am definition in examples/ (use EXTRA_DIST)2007-04-17T01:03:51+00:00/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-04-17T01:03:51+00:00urn:sha1:4c0d6e523ec8cdb7feb0480cd27da37f4b03394afirst step forward to merge conntrackd and conntrack into the same building chain2007-04-16T19:08:42+00:00/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-04-16T19:08:42+00:00urn:sha1:5eb3bc6d5594fccfff26329a26225f999e971652