[iptstate-commit] iptstate BUGS, 1.8, 1.9 Changelog, 1.15, 1.16 README, 1.11, 1.12 WISHLIST, 1.8, 1
Brought to you by:
jaymzh
Menu
▾
▴
[iptstate-commit] iptstate BUGS, 1.8, 1.9 Changelog, 1.15, 1.16 README, 1.11, 1.12 WISHLIST, 1.8, 1.9 iptstate.8, 1.3, 1.4 iptstate.cc, 1.23, 1.24 iptstate.spec, 1.10, 1.11
|
From: Phil D. <ja...@us...> - 2011-04-04 06:00:49
|
Update of /cvsroot/iptstate/iptstate
In directory vz-cvs-4.sog:/tmp/cvs-serv9435
Modified Files:
BUGS Changelog README WISHLIST iptstate.8 iptstate.cc
iptstate.spec
Log Message:
- lots of documentation updates
- version bump
Index: iptstate.spec
===================================================================
RCS file: /cvsroot/iptstate/iptstate/iptstate.spec,v
retrieving revision 1.10
retrieving revision 1.11
diff -u -d -r1.10 -r1.11
--- iptstate.spec 19 Sep 2009 21:07:02 -0000 1.10
+++ iptstate.spec 4 Apr 2011 06:00:47 -0000 1.11
@@ -1,5 +1,5 @@
%define name iptstate
-%define version 2.2.2
+%define version 2.2.3
%define release 1
Name: %{name}
Index: iptstate.cc
===================================================================
RCS file: /cvsroot/iptstate/iptstate/iptstate.cc,v
retrieving revision 1.23
retrieving revision 1.24
diff -u -d -r1.23 -r1.24
--- iptstate.cc 4 Apr 2011 05:42:28 -0000 1.23
+++ iptstate.cc 4 Apr 2011 06:00:47 -0000 1.24
@@ -63,7 +63,7 @@
#include <unistd.h>
using namespace std;
-#define VERSION "2.2.2"
+#define VERSION "2.2.3"
/*
* MAXCONS is set to 16k, the default number of states in iptables. Generally
* speaking the ncurses pad is this many lines long, but since ncurses
Index: Changelog
===================================================================
RCS file: /cvsroot/iptstate/iptstate/Changelog,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -d -r1.15 -r1.16
--- Changelog 4 Apr 2011 05:42:28 -0000 1.15
+++ Changelog 4 Apr 2011 06:00:47 -0000 1.16
@@ -1,8 +1,12 @@
2.2.3
+- Released 04/03/11
- IPv6 support. Closes #2848930.
- Handle filters as in6_addr and uints instead of strings
- Fix loopback filtering support
- Fix formatting for ICMP states. Closes #2969917.
+- Total style overhaul: move away from tabs, use 2 spaces, various other style
+ cleanups
+- Documentation updates
2.2.2
- Released 09/19/09
Index: iptstate.8
===================================================================
RCS file: /cvsroot/iptstate/iptstate/iptstate.8,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -d -r1.3 -r1.4
--- iptstate.8 19 Sep 2009 16:49:00 -0000 1.3
+++ iptstate.8 4 Apr 2011 06:00:47 -0000 1.4
@@ -1,7 +1,7 @@
.\" Process this file with
.\" groff -man -Tascii iptstate.8
.\"
-.TH IPTSTATE 8 "SEPTEMBER 2009" "" ""
+.TH IPTSTATE 8 "APRIL 2011" "" ""
.\"
.\" Man page written by Phil Dibowitz <phil AT ipom DOT com>
.\"
@@ -161,7 +161,7 @@
Terminal too narrow
.SH BUGS
-There are no known bugs at this time.
+We don't support filtering on resolved names, and we don't support filtering on networks. IPv6 support is new and the dynamic formatting doesn't yet always handle IPv6 addresses as well as it should.
.SH BUG REPORTS
All bugs should be reported to Phil Dibowitz <phil AT ipom DOT com>. Please see the \fBREADME\fR and \fBBUGS\fR for more information on bug reports. Please read the \fBWISHLIST\fR before sending in features you hope to see.
Index: BUGS
===================================================================
RCS file: /cvsroot/iptstate/iptstate/BUGS,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -d -r1.8 -r1.9
--- BUGS 19 Sep 2009 16:49:00 -0000 1.8
+++ BUGS 4 Apr 2011 06:00:47 -0000 1.9
@@ -1,30 +1,30 @@
IPTState Bugs
KNOWN BUGS
-None*
-
-* There are no known bugs in the iptstate code at the time of this writing.
-However, there are bugs in other pieces of software that may affect your
-iptstate experience:
+We keep track of bugs in our bugtracker on our Sourceforge page. However, before
+filing bugs, be aware of bugs in these other pieces of software that may affect
+your iptstate experience:
- libnetfilter_conntrack 0.0.50 has a bug that prevents iptstate from
-deleting ICMP states. I wrote the following patch which the netfilter folks
-have already applied to their SVN tree:
- http://www.phildev.net/linux/patches/libnetfilter_conntrack-0.0.50_icmp_id.patch
-You can use it if this affects you.
+ deleting ICMP states. I wrote the following patch which the netfilter folks
+ have already applied to their SVN tree:
+ http://www.phildev.net/linux/patches/libnetfilter_conntrack-0.0.50_icmp_id.patch
+ You can use it if this affects you.
- There seems to be a small memory leak somewhere in ncurses. See
- http://www.phildev.net/iptstate/memleak.html
-for details. This won't effect most users much, but you want to be weary of
-leaving iptstate running on very busy firewalls for very long periods of time
-(a day or more). This bug has been reported to ncurses, see above URL.
+ http://www.phildev.net/iptstate/memleak.html
+ for details. This won't effect most users much, but you want to be weary of
+ leaving iptstate running on very busy firewalls for very long periods of time
+ (a day or more). This bug has been reported to ncurses, see above URL.
ABOUT BUGS
If you find a bug in IPTState you should file a bug at our bugtracker:
https://sourceforge.net/tracker/?group_id=52748&atid=467897
OR mail our -devel list:
https://lists.sourceforge.net/lists/listinfo/iptstate-devel
-OR email me at phil AT ipom DOT com.
+
+If you are unsure if it's a bug or need support, please use the -devel mailing
+list.
Sending a bug to your distro or some public forum is not going to let me know.
I can't fix things I don't know about. So make sure I know!
@@ -35,29 +35,28 @@
If it's a very minor bug, or a feature request, I'll respond as I have time.
ABOUT PATCHES
-Patches are not necessary, but if you submit one remember: PATCHES SHOULD BE
-ACCOMPANIED BY EXPLINATIONS AND/OR BUG REPORTS! Let me know what you were
-trying to fix/add and how you did it. This will save me a lot of time, and I'll
-like you more.
+Patches are welcome but not necessary. I will fix bugs, don't worry. If you
+would like to contribute code, PLEASE use consistent style to the rest of the
+code. If you send a patch, it should be accompanied with a good explanation of
+what it does and why. If it fixes a bug, it should also be accompanied by a
+bug report in our bug tracker.
ABOUT BUG REPORTS
-If you send me a bug report you MUST do the following:
- - Include "IPTSTATE" in the subject
- - Include your iptstate version
- - Include your distribution and distribution version
- - Include your kernel version
- - Include your g++ version
- - Include your make version
- - Include your glibc version
- - Include your ncurses version
- - Include your libnetfilter_conntrack version
- - Include any relevant output and/or errors
+Please be sure to include these things in bug reports:
+ - your iptstate version
+ - your distribution and distribution version
+ - your kernel version
+ - your g++ version (if you built it yourself)
+ - your make version (if you built it yourself)
+ - your glibc version (if you built it yourself)
+ - your ncurses version
+ - your libnetfilter_conntrack version
+ - any relevant output and/or errors
-Bug reports should be sent to *ME* (see above). I cannot fix your bugs if you
-don't tell *ME* about them. That's right, send your bug reports to *ME*.
+Once again, distributions don't always forward bug reports upstream, so
+please send bug reports to me if you want bugs fixed.
Thanks!
Phil Dibowitz
phil AT ipom DOT com
-
Index: README
===================================================================
RCS file: /cvsroot/iptstate/iptstate/README,v
retrieving revision 1.11
retrieving revision 1.12
diff -u -d -r1.11 -r1.12
--- README 19 Sep 2009 16:49:00 -0000 1.11
+++ README 4 Apr 2011 06:00:47 -0000 1.12
@@ -34,12 +34,8 @@
it (i.e. ncurses-dev).
Starting with version 2.2.0 you also need libnetfilter_conntrack version
- 0.0.50 or later. If you do not have libnetfilter_conntrack you can compile
- iptstate to use /proc/net/ip_conntrack (what it did prior to 2.2.0) instead.
- To do this, modify the Makefile and switch the LIBS and CPPFLAGS lines with
- the commented-out ones. Note that this backwards compatibility is temporary
- and will be removed in future versions.
-
+ 0.0.50 or later. These libraries also require nf_conntrack_netlink and
+ nfnetlink support in your kernel.
3. INSTALLATION
@@ -151,11 +147,10 @@
7. THE AUTHOR
- IPTState was written by me, Phil Dibowitz. I am a Senior UNIX
- Systems Administrator at Ticketmaster maintaining the web
- infrastructure. Additionally, I maintain the FAQ for IP Filter,
- run the MSS Initiative, document IP Filter, and do other open-source
- work. For more info on me, check out http://www.phildev.net/
+ IPTState was written by me, Phil Dibowitz. My day job is large-scale
+ system administration and automation. Outside of work I maintain several
+ open source projects. You can find out more about me at
+ http://www.phildev.net/
Phil Dibowitz
Index: WISHLIST
===================================================================
RCS file: /cvsroot/iptstate/iptstate/WISHLIST,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -d -r1.8 -r1.9
--- WISHLIST 2 Sep 2009 20:16:21 -0000 1.8
+++ WISHLIST 4 Apr 2011 06:00:47 -0000 1.9
@@ -1,11 +1,12 @@
IPTSTATE WISHLIST
-This is the wishlist. READ IT BEFORE EMAILING ME.
+Wishlist features should be filed in the Wishlist tracker on our sourceforge page.
+
+This is an overview of the common ones and where they are on the priority list.
Features coming soon:
- Filtering hostnames
- Inverse filtering
- Display NAT'd IP
-- IPV6 support
Features that may come later:
- Secondary sorting
|
