wtorek, 15 stycznia 2008

MikroTik RouterOS 3.0 !!!

No nareszcie :) stabilna wersja 3.0 ujrzała światło dzienne.

changelog:

What's new in 3.0:

* fix for rb100 - can change ethernet settings when interface in bridge/bond;
* fixed auto upgrade on RB333 & RB600;
* made RB411 bootup more stable;
* made DNS & WINS setting work again in PPP;
* fixed bug - dhcp client did not update NTP server list;

What's new in 3.0rc14:

* fixed locking up in PPPoE server;
* fixed bridging in PPTP, L2TP an PPPoE;
* fixed bug - MPPE encryption keys received from RADIUS server were decoded improperly on RB333;
* added support for BGP signalled VPLS;
* fixed bug in port remote-access - it was inserting random data, mostly nulls, in data sent to serial port and to tcp connection;
* fixed bug in console error propagation, code like the example below caused console to enter busy loop:
:do { badcommandname; } while=(true);
* fixed hotspot https walled-garden;
* fixed bug - dhcp server failed to give out options with code > 127;
* console - fixed numeric parameters that accept negative values, were broken in rc12;
* fixed port line-state values on MIPS RouterBoards;
* fixed bug - idle-timeout & session-timeout were not disabled if they were unset in ppp profiles;
* fixed OSPF compatibility bug with v2.9 (and some other vendor implementations): LS Acknowledgments were sent to wrong address;
* fixed Broadcast flag for DHCP on RB300/RB600;
* fix wireless nstreme packing problem;
* improved layer7 firewall matcher memory usage;
* console - do not add input to history if it is the same as previous line;
* fixed bridge to forward (R)STP frames as regular if (R)STP not enabled;
* fixed bug - configuration for missing serial ports was not tagged inactive;
* console - fixed safe mode, it was causing wery high cpu usage and terminal traffic;
* console - added login parameters, passed as part of login name, after '+'; can be used to disable colors (+c) and terminal autodetection (+t), e.g. "admin+ct";
* fixed problem - bandwidth shaping on ARES traffic was not working properly;
* user manager - fixed security bug in user page;
* dns resolver has configurable max UDP packet size;
* fixed dns resolver - tcp queries were broken without ipv6 package;
* added ingress priority matcher to firewall rules;
* added number of active pcq queues to queue stats;
* made advanced mode for wireless interface configuration in WinBox;

What's new in 3.0rc13:

* fixed problem - clean install on x86 & adding new ethernet interfaces on x86 did not work (introduced in 3.0rc12);

What's new in 3.0rc12:

* added support for MPLS & VPLS;
* added ability to specify & disable winbox port under "/ip services";
* fixed bug - DFS was not taking into account channel usage when selecting channel;
* fixed bug - simultaneously monitoring wireless interface and changing settings could cause crash;
* improved memory usage under RB133C;
* fixed bug - MAC Winbox connection was not very stable;
* fixed bug in graphing;
* fixed problem - routerboard sometimes did not upgrade & reboot if serial cable was not plugged in;
* interface routing now works with PPPoE 'dial-on-demand' interfaces;
* fixed dial-on-demand;
* routing - fixed 'set-in-nexthop' filter (broken in 3.0rc7);
* implemented more registered client flushing on access-list and connect-list changes - now connect-list changes disconnect affected APs, wildcard mac address entry changes disconnect all clients;
* fixed bug - Windows could not synchronize to NTP server if local clock was used as time source (changed stratum from 6 to 4);

What's new in 3.0rc11:

* added filters to WinBox lists, and added ability to filter routes without downloading all of them to the client;
* updated WinBox Loader to v2.2.12 - clicking on IP address in router discovery list selects ip address not mac address;
* added '/tool sms send' in advanced-tools package;
* fixed problem - PPPoE, PPTP, L2TP could restart if user disconnected at wrong time;
* fixed problem - PPPoE, PPTP, L2TP static server interfaces disappeared after disconnect;
* added support for adding OVPN interfaces to bridge through specifying bridge in ppp profile;
* multicast - fixed IGMP Leave message handling;
* nand improvement for RB532A;
* fixed user-manager database restore from backup for RB500;
* fixed bonding - when bonding iface was put in bridge arp link monitoring did not work properly;

What's new in 3.0rc10:

* fixed problem - sometimes PPTP, L2TP, PPPoE and OpenVPN connections were not accounted properly, and no new connections could be established;
* fixed problem - L2TP sometimes could not establish connections through firewall or with Windows;
* bgp - fixed TCP MD5 authentication on RB300;
* fixed bug - route did not work with Level 1 license and routing package enabled;
* api - '/quit' command now immediately terminates session;
* console: 'and' operator in expressions that follow 'find' and 'print where' now is optional, pre-rc9 syntax 'find mtu=1480 type=ether' works as it used to; added back filters to firewall print commands, filtering by chain now is 'print chain=input' instead of 'print input'; fixed 'print count-only', it was ignoring any additional 'print' arguments that selected only part of items;

wtorek, 1 stycznia 2008

iptables v1.4.0

22 grudnia pojawiła się nowa wersja iptables. Dla nie zaznajomych w temacie:

iptables is built on top of netfilter, the packet alteration framework for Linux 2.4.x and 2.6.x. It is a major rewrite of its predecessor ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects such as packet mangling.

Changes from 1.4.0rc1:

- Don't use dlfcn.h if NO_SHARED_LIBS is defined
[ Mike Frysinger ]

- Fix showing help text for matches/targets with revision as user
[ Patrick McHardy ]

- Print warnings to stderr
[ Max Kellermann ]

- Fix sscanf type errors
[ Patrick McHardy ]

- Always print mask in iptables-save
[ Jan Engelhardt ]

- Don't silenty exit on failure to open /proc/net/{ip,ip6}_tables_names
[ Victor Stinner ]

- Adds --table to iptables-restore
[ Peter Warasin ]

- Make DO_MULTI=1 work for ip6tables* binaries
[ Hann-huei Chiou ]

- Add ip6tables-{save,restore} to non-experimental target, fix strict aliasing
warnings
[ Patrick McHardy ]

- Introducing libxt_*.man files. Sorted matches and modules
[ Laszlo Attila Toth ]

- Install ip6tables-{save,restore} manpages
[ Patrick McHardy ]

- Performance optimization in sorting chain during pull-out
[ Jesper Dangaard Brouer ]

- Fix sockfd use accounting for kernels without autoloading
[ Patrick McHardy ]

- use
[ Jan Engelhardt ]

- Fix make/compile error for iptables-1.4.0rc1
[ Jesper Dangaard Brouer ]

- Fix for --random option in DNAT and REDIRECT
[ Tom Eastep ]

- Document xt_statistic
[ Stefano Sabatini ]

- sctp: fix - mistake to pass a pointer where array is required
[ Li Zefan ]

- Fix connlimit output for inverted --connlimit-above: ! > is <=, not <
[ Patrick McHardy ]

- Add NFLOG manpage
[ Patrick McHardy ]

- Move libipt_DSCP.man to libxt_DSCP.man for ip6tables.8
[ Yasuyuki Kozakai ]

- Unifies libip[6]t_CONNSECMARK.man to libxt_CONNSECMARK.man
[ Yasuyuki Kozakai ]

- Moves libipt_CLASSYFY.man to libxt_CLASSYFY.man for ip6tables.8
[ Yasuyuki Kozakai ]

- fix check_inverse() call
[ Jan Engelhardt ]

- Bump version to 1.4.0 final
[ Pablo Neira Ayuso ]