diff options
author | Gaurav <gaurav.sinha@vyatta.com> | 2012-03-20 18:49:18 -0700 |
---|---|---|
committer | Gaurav <gaurav.sinha@vyatta.com> | 2012-03-20 18:49:18 -0700 |
commit | 9e6dec7e0fbf269074a15b0fcfa0aee2e4cc43fb (patch) | |
tree | 0f7173f254e9958a39eb5b2908a5060d16cfc759 /debian | |
parent | 7330d01fd5ac752e265cf868b3a7f9ef30af9a93 (diff) | |
download | vyatta-conntrack-9e6dec7e0fbf269074a15b0fcfa0aee2e4cc43fb.tar.gz vyatta-conntrack-9e6dec7e0fbf269074a15b0fcfa0aee2e4cc43fb.zip |
0.28+oxnard3debian/0.28+oxnard3
Diffstat (limited to 'debian')
-rw-r--r-- | debian/changelog | 55 |
1 files changed, 55 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index a2dc273..30d76f1 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,58 @@ +vyatta-conntrack (0.28+oxnard3) unstable; urgency=low + + [ Deepti Kulkarni ] + * new branch + * 0.28+oxnard1 + + [ Gaurav Sinha ] + * fixing 7866 + * 0.28+oxnard2 + * Initial commit for per-flow timeout CLI + * Removed unwanted address-group/network group etc. from CLI + * adding an initial version of conntrack-timeouts script + * timeouts script, and new nodes + + [ Gaurav ] + * timeout script, similar to firewall one, with a few differences. + * Adding rule and address setup/parsing libraries + * Removing newly added file AddressFilterCT.pm. + * removing AddressFilterCT.pm + * modified to use AddressFilter from IpTables + * adding various timers in custom rule template + * changing structure of hashes kept for timeouts + * Add function to create nfct-timeout policy + * Fixing templates to avoid defaults since these rules override the + global defaults + * Fixing nfct-command string:only modified timer is included in the + command + * Removed default timeouts for override udp/icmp/other, fixed minor + bugs + * Error checks for ports with other/icmp, as not allowed + * Adding deletion, error handling etc. + * adding apply/remove policy function, still dummy + * add run_cmd function with error checking + * re-factored + * handle modification, disabled error handling for now as iptables + does not support timeout target yet + * do_protocol_check function, mandates one protocol subtree per rule + max + * Updated help strings to avoid confusion with global timeouts + * check presence of protocol config subtree + * Using connection instead of flow to refer to 5 tuple in help strings + * changing nfct-timeout to nfct timeout + * use right path of the nfct executable + + [ Gaurav Sinha ] + * use add instead of create, use inet, pre-pend protocol to iptables + rule + * fixed generic timeout, udp stream->replied and other->unreplied, + fixed bug with protocol string comparision + * delete nfct fixed, use only policy name, modified deletion function + + [ Gaurav ] + + -- Gaurav <gaurav.sinha@vyatta.com> Tue, 20 Mar 2012 18:49:18 -0700 + vyatta-conntrack (0.28+oxnard2) unstable; urgency=low * fixing 7866 |