%PDF- %PDF-
Direktori : /proc/thread-self/root/usr/share/doc/knock/ |
Current File : //proc/thread-self/root/usr/share/doc/knock/ChangeLog |
VERSION DESCRIPTION ----------------------------------------------------------------------------- 0.8 - Multiple fixes (#67, #77) - IPv6 support (Sebastien Valat) 0.7.8 - Fix for Issue #33, #34 and #35 contributed by Alexander Rumyanstev. 0.7.7 - Fix for Issue #7 & #17 contributed by Michael G�hler. All IPs assigned to a single interface are now listened on. - Fix for compile warning on OSX where daemon() is deprecated. - Fix for Issue #15 - list.c OpenBSD segfault: change malloc to calloc. 0.7.6 - Fix for Issue #13 where similar sequences are not detected correctly. 0.7.5 - Added Greg Kuchyt's knock_add script but updated to be a generic IPTables helper that also deletes rules 0.7.4 - Patches from Michael Göhler - Updated gitignore to include additional autoconf files. - Updated Makefile to fix deprecated warning on CPPFLAG -D_BSD_SOURCE. 0.7.3 - Patches from Jonathon Reinhart - Fixed PCAP filter for PSH flag detection. - Patches from Christos Triantafyllidis - Updated FSF address. 0.7.2 - Patches from Paul Rogers - Applied missing fixes from issue #16 - OpenBSD build issues, reordering of headers, scoping DLT_LINUX_SLL for Linux only, for -> while loop in sniff() cleanup. 0.7.1 - Patches from Paul Rogers - Fixed issue #2 - SIGHUP (reload) now listens for new sequences in the config file. - Fixed issue #26 - knockd now fails if a malformed config file is read during SIGHUP (reload). 0.7 - Patches from Oswald Buddenhagen: - Document the 'target' configuration directive. - Merging OS-specific networking code to reduce LOCs and the sea of #ifdefs. - Added 50ms timeout to pcap_open_live() to reduce CPU usage on network-heavy hosts. Pcap recommends we not use zero. 0.6 - Patches from Oswald Buddenhagen: - Cleanup: Don't null-check before free - Cleanup: Consolidate flag-check logic - Accept single-knock sequences - Introduce a 'target' configuration directive, enabling knockd to react to connect attempts to a target host. Useful in cases where knockd is on a router and you want to send a target a wakeup packet. 0.5 - Added ability to change the knocking protocol (TCP/UDP) on a per-port basis using the knock client (instead of the -u switch) - Patches from Philippe Lovis <philippe.lovis@gmx.ch>: - Fixed memory leaks and potential security vulnerabilities - Added --lookup option for DNS lookups (default is off) - Added support for one-time sequences - Added Interface directive to select the listening interface - Moved packet filtering to kernel space with BPF filters - Support for excluding TCP flags with "!" - Removed the leftover/deprecated layer-2 MAC logic 0.4 - Added support for DLT_RAW (PPPoE) interfaces - Changed packet inspection to use the interface's IP address to determine the flow direction, rather than the ethernet MAC address - Changed logging date format to ISO (yyyy-mm-dd) - Added hostnames to logging output 0.3.1 - Fixed a segfault occurring when a hostname cannot be resolved - Patch from Simon Matter <simon.matter@ch.sauter-bc.com>: - fixes build errors on Fedora - Patch from Per Cederberg <per@percederberg.net>: - fixes TCP SYN timeouts in knock client 0.3 - Added PPP (LINUX_SLL) support - Patches from Leo Costela: - added Start_Command, Stop_Command, Cmd_Timeout directives, allowing a single door to open and then close after a timeout period - knockd now re-reads config when a HUP is received - multiple protocols supported on a per-port basis 0.2.1 - Bugfix for TCP flag discrimination 0.2 - Fixed the zombie process problem - Added patch from Leo Costela: - PidFile configuration directive - support for specific TCP flags 0.1 - Initial release