Project

General

Profile

Actions

Feature #3017

open

Upgrade IPFilter to 5.1.2

Added by Darren Reed over 9 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Start date:
2012-07-22
Due date:
% Done:

50%

Estimated time:
Difficulty:
Medium
Tags:
needs-triage
Gerrit CR:

Description

Import IP Filter 5.1.2 to replace "4.1.9"

New features:
- separate ipf6.conf is no longer required, ipf.conf can hold both IPv4 and IPv6 addresses
- decapsulate keyword introduced to ipf.conf, allowing filtering on inner headers that are in plain text
- stateful filtering allows for a limit to the number of hosts per netmask
- introduction of a tftp proxy for IPv4 and IPv6
- FTP proxy supports IPv6 through both EPSV and EPRT
- rcmd proxy support for IPv6
- filtering of ICMP errors in response to normal packets possible with stateful filtering
- divert keyword introduced to ipnat.conf
- man pages for ipf.conf and ipnat.conf rewritten to be more user friendly
- filter rules can have an expiration time set

No data to display

Actions

Also available in: Atom PDF