Actions
Feature #3017
open
Upgrade IPFilter to 5.1.2
Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Start date:
2012-07-22
Due date:
% Done:
50%
Estimated time:
Difficulty:
Medium
Tags:
needs-triage
Gerrit CR:
External Bug:
Description
Import IP Filter 5.1.2 to replace "4.1.9"
New features:
- separate ipf6.conf is no longer required, ipf.conf can hold both IPv4 and IPv6 addresses
- decapsulate keyword introduced to ipf.conf, allowing filtering on inner headers that are in plain text
- stateful filtering allows for a limit to the number of hosts per netmask
- introduction of a tftp proxy for IPv4 and IPv6
- FTP proxy supports IPv6 through both EPSV and EPRT
- rcmd proxy support for IPv6
- filtering of ICMP errors in response to normal packets possible with stateful filtering
- divert keyword introduced to ipnat.conf
- man pages for ipf.conf and ipnat.conf rewritten to be more user friendly
- filter rules can have an expiration time set
No data to display
Actions