netscript-2.4 (5.5.5+nmu3) unstable; urgency=medium * Non-maintainer upload. * Convert to source format 3.0. (Closes: #1072886) * Drop unnecessary Depends: lsb-base. * d/copyright: Convert to machine-readable format. * Drop old lintian overrides. * Drop old netscript-2.4-upstart files. * Use the /usr path prefix in the package scripts. -- Bastian Germann Tue, 09 Jul 2024 12:52:45 +0200 netscript-2.4 (5.5.5+nmu2) unstable; urgency=medium * Non-maintainer upload. [ Helmut Grohne ] * DEP17: Move files to /usr. (Closes: #1064237) -- Chris Hofstaedtler Sat, 25 May 2024 22:39:19 +0200 netscript-2.4 (5.5.5+nmu1) unstable; urgency=medium * Non-maintainer upload. * No source change upload to rebuild with debhelper 13.10. -- Michael Biebl Sat, 15 Oct 2022 12:26:24 +0200 netscript-2.4 (5.5.5) unstable; urgency=medium * Source only upload. -- Matthew Grant Wed, 23 Sep 2020 11:21:08 +1200 netscript-2.4 (5.5.4) unstable; urgency=medium * Depend on dhcpcd5 to allow installation with renamed DHCP server package. -- Matthew Grant Wed, 16 Sep 2020 13:04:31 +1200 netscript-2.4 (5.5.3) unstable; urgency=medium * Depend on iproute2, not iproute (Closes: #753714) * Bump standards version to 4.1.3 * Remove obsolete Build-Dep on dh-systemd -- Matthew Grant Thu, 18 Jan 2018 22:23:55 +1300 netscript-2.4 (5.5.2) unstable; urgency=medium * Fix sub-string interface name clashes. -- Matthew Grant Sat, 08 Jul 2017 10:57:38 +1200 netscript-2.4 (5.5.1) unstable; urgency=medium * Don't hotplug bridges. Works around a kernel race. * Add note to not default disable IPv6 for Openstack. -- Matthew Grant Tue, 27 Dec 2016 11:12:09 +1300 netscript-2.4 (5.5.0) unstable; urgency=medium * Add /etc/netscript/network.conf.d * Add proper systemd support, and fixes * Update changelog for 5.4.12~2.gbp2c652b release * Update gbp.conf * Convert ifupdown hotplug script for netscript * Update changelog for 5.4.12~3.gbp183f7f release * Add depends on lsb-base for init scripts * Update changelog for 5.4.12~4.gbp7a776d release * Update debhelper to v6 and deb standards to 3.9.8 * Update changelog for 5.4.12~5.gbpa05941 release * Update debhelper compat version to 10. * Update changelog for 5.4.12~6.gbpe6fab5 release * Fix network.conf.d include line in network.conf * Convert inbrdr outbrdr to use ICMP RETURN chain. * Update changelog for 5.4.12~7.gbpd5fe80 release * Update changelog for 5.4.12~8.gbp323004 release * Add IPV6 DAD wait address settle time on boot. * Fix one line type in ipf6_icmphost exec function. * Make Interface functions handle - in dev names * Fix icmpv6 protocol psecfication in outbrdr * More IPv6 CIMP filter fixes for inbrdr and outbrdr * Fix IPv6 ipf6_log() icmpv6 rule * Update changelog for 5.4.12~15.gbpc73267 release -- Matthew Grant Thu, 15 Dec 2016 23:13:59 +1300 netscript-2.4 (5.4.11) unstable; urgency=medium * Fix iptables filters not bening loaded with kernel versions 4.x - 9.x * Update standards version to 3.9.6 -- Matthew Grant Sun, 11 Oct 2015 08:06:44 +1300 netscript-2.4 (5.4.10) unstable; urgency=medium * Fix /etc/init.d dependency loop with ifupdown (Closes: #717871) * Add sysvinit/insserv back in * Add /etc/iniserv.conf.d /etc/inserv.conf.d segment to correctly set up boot dependencies for above. * Update changelog for 5.4.10 release -- Matthew Grant Wed, 28 Jan 2015 22:24:09 +1300 netscript-2.4 (5.4.8) unstable; urgency=medium * Remove sysvint/inserv support for package. (Closes: #771871) Revert totally removing ifupdown emulation/Provides as this breaks too many things. This just removes the dependency loop in /etc/init.d files which is unfixable. -- Matthew Grant Tue, 23 Dec 2014 17:50:04 +1300 netscript-2.4 (5.4.7) unstable; urgency=medium * Convert '-' in interface names to '_' (Closes: #773772) -- Matthew Grant Mon, 22 Dec 2014 21:10:30 +1300 netscript-2.4 (5.4.6) unstable; urgency=medium * Remove ifupdown emulation -- Matthew Grant Mon, 22 Dec 2014 19:48:20 +1300 netscript-2.4 (5.4.5) unstable; urgency=medium * Add dependency for iproute2|iproute (for backport) (Closes: #705169) -- Matthew Grant Sat, 19 Jul 2014 16:27:58 +1200 netscript-2.4 (5.4.4) unstable; urgency=medium * Fix netscript ifrestart * Add ability to restart radvd/dnsmasq on ifup -- Matthew Grant Sun, 18 May 2014 12:58:13 +1200 netscript-2.4 (5.4.3) unstable; urgency=medium * Change back to Architecture: all (Closes: #745597) * Add missing conflicts netscript-ipfilter -- Matthew Grant Sun, 11 May 2014 08:42:01 +1200 netscript-2.4 (5.4.2) unstable; urgency=medium * Fix netscript-2.4 systemd service file * Fix netscript-ipfilter systemd service file - start up order -- Matthew Grant Sun, 13 Apr 2014 13:42:52 +1200 netscript-2.4 (5.4.0) unstable; urgency=medium * Remove filters after interface down. * Add better support for pppoe and IPv6 sit tunnels * Add systemd support - debian rules stuff * Change description for netscript-ipfilter * Fix dangling manpage symlink in netscript-ipfilter * Depend on isc-dhcp-client (Closes: #681252) * Fix email address on latest changes. * Fix dh_systemd_enable command line switch * Add gitignore file * Fix effective RUNLVL under systemd * Removed kernel module loading code as locked kernel -- Matthew Grant Sat, 12 Apr 2014 12:57:23 +1200 netscript-2.4 (5.3.2) unstable; urgency=medium * Updated documentation - copyright, rm stale stuff * Initial complete netscript-ipfilter package. -- Matthew Grant Thu, 16 Jan 2014 11:06:07 +1300 netscript-2.4 (5.3.1) unstable; urgency=medium * Add NEWS file advising of removal og netscript-compile -- Matthew Grant Tue, 07 Jan 2014 17:58:40 +1300 netscript-2.4 (5.3.0) unstable; urgency=medium * Add full IPv6 filter helper function support * Properly update ipfilter.conf * Remove netscript-compile functionality and docs. * Fix module loading/unloading on restart * Commit changelog for 5.3.0 * Update debian/control with new email address * Really update debain/control maintainer * Fix lintian warnings. -- Matthew Grant Mon, 06 Jan 2014 13:12:28 +1300 netscript-2.4 (5.2.12) unstable; urgency=low * Fix missing quotes in brg_iface up call (Closes: #681641) -- Matthew Grant Sun, 15 Jul 2012 12:27:10 +1200 netscript-2.4 (5.2.11) unstable; urgency=low * Update module loading for kernel 3.2+ * Add device to IPv6 default route command. * Add ability to not set IPv6 address from SLAC. * resolvconf option + unsetting new IPv6 RPrefix option * Removed netscript-2.4-upstart package as upstart is a moving target. * Removed netscript-2.4-upstart from debian/rules. -- Matthew Grant Wed, 23 May 2012 13:21:28 +1200 netscript-2.4 (5.2.10) unstable; urgency=low * Fix IPv6 MTU override and add IPv6 icmp-host chain. -- Matthew Grant Sun, 19 Feb 2012 10:05:01 +1300 netscript-2.4 (5.2.9) unstable; urgency=low * Made netscript depend on /bin/bash as it needs the ability to list shell script functions. Dash does not provide this. -- Matthew Grant Sun, 25 Sep 2011 20:53:28 +1300 netscript-2.4 (5.2.8) unstable; urgency=low * Fix issue with filters not being loaded on IPv6 due to kernel version not being detected. -- Matthew Grant Fri, 09 Sep 2011 08:50:02 +1200 netscript-2.4 (5.2.7) unstable; urgency=low * Module unloading/loading for linux kernel v 3.0. Includes ipi_set and ip_vs modules. -- Matthew Grant Sat, 20 Aug 2011 14:38:41 +1200 netscript-2.4 (5.2.6) unstable; urgency=low * Inital support for Linux 3.0 in terms of version checking. -- Matthew Grant Wed, 17 Aug 2011 07:40:49 +1200 netscript-2.4 (5.2.5) unstable; urgency=low * Add support for accept RA advertised routes based on mask length * Upgraded standards version to 3.9.2. * Overrode lintian errors and warnings about remote_fs - this package configures the network, which is needed for remote_fs! * Fixed problem with dh_installinit installing start up scripts on upstart version of the package. * Made netscript recognise upstart runlevel 'unknown'. * Fixed race condition in upstart /etc/init/*.conf files. * Introduced /etc/init/netscript-shutdown.conf for clean shutdown with upstart. -- Matthew Grant Sun, 24 Apr 2011 20:06:57 +1200 netscript-2.4 (5.2.4) unstable; urgency=low * Fix problems with upstart package not initialising correctly due to start up races. * Remove /32 and /128 from address deletion in if.conf -- Matthew Grant Thu, 27 Jan 2011 20:58:36 +1300 netscript-2.4 (5.2.3) unstable; urgency=low * Remove conflict with network-manager, as this can cause too much pain on laptops with wicd being unmaintained now. It is better to install netscript-2.4-upstart, configure it, and then tell network-manager to interfaces alone by setting [ifupdown]\nmanage = false. -- Matthew Grant Wed, 22 Dec 2010 15:41:03 +1300 netscript-2.4 (5.2.2) unstable; urgency=low * Fix missing quotes around script for activating 'chained' interfaces (Closes: #592340). * Add missing overrides for /etc/init.d/netscript-2.4 startup. * Added linitian overrides for errors about missing init dependencies on $remote-fs * Increased Standards Version to 3.9.1 -- Matthew Grant Wed, 18 Aug 2010 11:52:39 +1200 netscript-2.4 (5.2.1) unstable; urgency=low * Fix up netscript-interface.conf upstart file, make it ignore interface lo. * Add dependency on virtual package dhcp-client for initial system install. * Added or depends on dhcp3-client as well, and dhcp3-client does not also provide the dhcp-client virtual package. -- Matthew Grant Tue, 22 Dec 2009 13:02:34 +1300 netscript-2.4 (5.2) unstable; urgency=low * Add switch to disable IPv6 * Auto enable/disable IPv6 when adding/deleting an interface to a bridge. * Fix bug with deleting interfaces from bridges other than brg0 * Set up default for disabling IPv6 on dynamic interfaces. * Add switch to remove bridges from netfilter filtering. * Add ability to name bridges. * Install udev file correctly * Fix a few typos * Change IPv6 default route prefix to 'default' * Changed compatibility level to 5. * Fix lintin errors in man pages. * Remved empty maintainer script debian/prerm. * Updated to latest Debian Standards version 3.8.3 etc. * Added xt_cluster to correct insmod secion. * Split package to provide for different init environments * Added initial support for upstart initctl -- Matthew Grant Mon, 21 Dec 2009 22:28:25 +1300 netscript-2.4 (5.1.10) unstable; urgency=low * Fixed netscript to work better with 2.6.31. Doesn't load modules when IP_KERNEL_FILTER is set to NONE, and netscript reload adjusts loaded modules according to setting. * Recording adding of patches for nmu2. (Closes: #546459) * Recording adding of patches for nmu3. (Closes: #547509) -- Matthew Grant Tue, 20 Oct 2009 21:38:39 +1300 netscript-2.4 (5.1.9) unstable; urgency=low * Bumping version to force upload. -- Matthew Grant Sun, 04 Oct 2009 14:40:47 +1300 netscript-2.4 (5.1.8) unstable; urgency=low * Fixing module loading for kernel 2.6.31. -- Matthew Grant Thu, 01 Oct 2009 09:01:32 +1300 netscript-2.4 (5.1.7+nmu3) unstable; urgency=low * Non-maintainer upload to fix release goal. * Make ifupdown init.d scrtip dependency optional, to avoid having the package depend on ifupdown. Fixes installation problem detected by piuparts. -- Petter Reinholdtsen Sun, 20 Sep 2009 14:45:23 +0200 netscript-2.4 (5.1.7+nmu2) unstable; urgency=low * Non-maintainer upload. * Patched the wrong file in the last upload. Patch netscript.init, not debian/init. Make sure to remove the debian/init copy in the clean target of debian/rules. Last NMU is obsolete (Closes: #546457). -- Petter Reinholdtsen Sun, 13 Sep 2009 12:55:24 +0200 netscript-2.4 (5.1.7+nmu1) unstable; urgency=low * Non-maintainer upload to fix release goal. * Fix init.d script dependency headers (Closes: 542246). -- Petter Reinholdtsen Sun, 13 Sep 2009 11:58:38 +0200 netscript-2.4 (5.1.7) unstable; urgency=low * Remove suggests entry in debian/control for waproamd. (Closes: #509392) -- Matthew Grant Mon, 29 Dec 2008 17:19:53 +1300 netscript-2.4 (5.1.6) unstable; urgency=low * Fix netscript so that it will run with dash as /bin/sh. * Update my maintainer address to matthewgrant5@gmail.com -- Matthew Grant Mon, 29 Dec 2008 13:17:53 +1300 netscript-2.4 (5.1.5-0.1) unstable; urgency=low * Non-maintainer upload. * Fix bashism in netscript-compile. The problems reported in netscript by checkbashisms are false positives, it has a local definition of a source function. (Closes: #465011) -- Marc 'HE' Brockschmidt Sat, 08 Mar 2008 23:54:46 +0100 netscript-2.4 (5.1.5) unstable; urgency=low * Fix lintian warnings debian-rules-sets-DH_COMPAT, out-of-date-standards-version, init.d-script-missing-lsb-section, and package-contains-empty-directory /usr/sbin * Update to Standards Version 3.7.3 -- Matthew Grant Wed, 06 Feb 2008 04:22:55 +0000 netscript-2.4 (5.1.4) unstable; urgency=low * Fixed typos in package description in debian/control (closes: #274815) * Fixed linitian warning about standards version 3.6.2 -> 3.7.6 * Replaced Build-Depends-Indep: with Build-Depends in debian/control to fix lintian warning. -- Matthew Grant Sat, 2 Feb 2008 13:18:00 +1300 netscript-2.4 (5.1.3) unstable; urgency=low * Updated to support kernel 2.6.22 * Merged IPV4_FILTER_KERNEL and IPV6_FILTER_KERNEL switches to IP_FILTER_KERNEL switch because of merging of upstream netfilter v4 and v6 modules to enable connection tracking in IPv6 -- Matthew Grant Sat, 02 Feb 2008 12:06:44 +1300 netscript-2.4 (5.1.2) unstable; urgency=low * Add support to control sending of redirects on an interface. This is useful for use with openvpn which can route packets in and out of the VPN tun device. -- Matthew Grant Tue, 30 Jan 2007 11:55:05 +1300 netscript-2.4 (5.1.1) unstable; urgency=low * Updated to support 2.6.14 and 2.6.16 kernels. * Updated debhelper compatibility to 4 from 3. Sarge support is needed. -- Matthew Grant Sat, 18 Feb 2006 20:21:57 +0000 netscript-2.4 (5.1.0) unstable; urgency=low * Added initial support for laptops and whereami. This still needs some work, but I am getting it out there as it is now usable. * Added entries to README.Debian to document how to set above up. -- Matthew Grant Fri, 29 Oct 2004 08:38:27 +1300 netscript-2.4 (5.0.14) unstable; urgency=medium * Merge in work down for NMU. * Get rid of startup and shutdown init calls in maintainer scripts. -- Matthew Grant Wed, 13 Oct 2004 08:40:55 +1300 netscript-2.4 (5.0.13-0.1) unstable; urgency=high * Non-maintainer upload. * High-urgency upload for (trivial,) sarge-targetted RC bugfix * Replace zebra with quagga in Recommends:, since the former is no longer available (closes: #273043). -- Steve Langasek Sat, 2 Oct 2004 03:07:00 -0700 netscript-2.4 (5.0.13) unstable; urgency=low * Added fix proposed by Bart Samwel , fixing problem with saving of filters with 'netscript ipfilter save' Local vars MANGLE and FILTER were not initialised to zero in ipv4filter_check(). Also fixed ipv6filter_check(). (Closes: #267151) -- Matthew Grant Sat, 28 Aug 2004 19:12:06 +1200 netscript-2.4 (5.0.12) unstable; urgency=low * Fix prerm script by editing out #DEBHELPER# This fixes problem where netscript closes down all interfaces on package remove or purge. Leaving proper clean up for a month to allow people to get rid of the bad prerm package maintainer scripts - will go to telling debhelper to only install /etc/rc.d startup/shutdown symlinks. (Closes: #241989) -- Matthew Grant Wed, 9 Jun 2004 12:07:49 +1200 netscript-2.4 (5.0.11) unstable; urgency=low * Add support for iptables policy match module to close new ipsec packet injection hole. * Changed ipfilter-defs(5) man page for new IPSEC interface name directives. -- Matthew Grant Fri, 23 Apr 2004 14:28:40 +1200 netscript-2.4 (5.0.10) unstable; urgency=low * Initial work to netscript to work with the 2.6 kernel. * Removed configuration samples for deprecated Free S/WAN support. Free S/WAN KLIPS is a real mess in terms of interfaces, routing and confg scripts! * Added mentions of 2.6 kernel in most places needed. Man pages may need it. * Removed suggestion for vrrpd - this was a failed experiment. * Upgraded standards version to 3.6.1. -- Matthew Grant Fri, 26 Mar 2004 08:03:43 +1200 netscript-2.4 (5.0.9) unstable; urgency=low * Fix default case in init script. -- Matthew Grant Tue, 23 Dec 2003 15:48:23 +1300 netscript-2.4 (5.0.8) unstable; urgency=low * Basically a clean up to get ready to go into unstable. * Changed 'net' command to 'netscript' to stop a clash with samba-comon in sarge and sid. * Changed 'net-compile' to 'netscript-compile to match above. * Adjusted config files and other files to match above. * Removed conffile as this results in duplicate config file lintian warnings. * Fixed lintian warning about 'Upstream Author(s)'. * Updated Debian Standards version to 3.5.7 -- Matthew Grant Mon, 15 Dec 2003 22:05:30 +0000 netscript-2.4 (5.0.7) unstable; urgency=low * Added work around for kernel crash bug with psd and limit modules. -- Matthew Grant Sun, 8 Jun 2003 00:12:04 +1200 netscript-2.4 (5.0.6) unstable; urgency=low * Added support for adjusting portscan chain psd module parameters to deal with high traffic situations. -- Matthew Grant Thu, 5 Jun 2003 16:12:25 +1200 netscript-2.4 (5.0.5) unstable; urgency=low * Previous change lost chaings in 5.0.3 with ipfilter-defs.conf. Fixed. -- Matthew Grant Tue, 3 Jun 2003 15:45:20 +1200 netscript-2.4 (5.0.4) unstable; urgency=low * Fixed problem with startup getting order of chains in iplcl and ipfwd in correct. This was due to 2 ways of adding chains into these, a simple add on start up, and then indexing for manual incremental add ins. Gone to indexing mode for all additions, and made function that returns index into iplcl and ipfwd a lot faster (O(n) instead of O(n2).). The change is only in /etc/netscript/ipfilter-defs.conf, has been tested carefully, and does nto affect the rest of the netscript system. -- Matthew Grant Tue, 3 Jun 2003 14:16:41 +1200 netscript-2.4 (5.0.3) unstable; urgency=low * Fixed problem with REJECT_UDP_NET - '-m STATE' should be '-m state'. * Added new alternative FreeS/WAN start up code for multiple interfaces. network.conf needs a cleanup for next release that is backwards compatible. * Fixed --pkt-type argmuents in ipfilter-defs.conf. Fixes dropping of BROADCAST packets for INPUT and FORWARD chains. -- Matthew Grant Thu, 29 May 2003 09:47:28 +1200 netscript-2.4 (5.0.2) unstable; urgency=low * Updated ipfilter-defs.5 manpage for new compile rules below. -- Matthew Grant Wed, 23 Apr 2003 07:58:08 +1200 netscript-2.4 (5.0.1) unstable; urgency=low * Added support for more logging targets, for each type of new coonnection, so that strings can be prepended to log messages. New compile targets are LOG_BROADCAST, LOG_PROTO, LOG_UDP, LOG_TCP, LOG_UDP_NET, LOG_TCP_NET, LOG_NET, LOG_IFACE, LOG. The new LOG_MSG and LOG_MSG_RESET are used to set the log text. * Added support for network addresses for UDP, and TCP. Targets are ACCEPT_TCP_NET, ACCEPT_UDP_NET, REJECT_TCP_NET, REJECT_UDP_NET, DROP_TCP_NET, and DROP_UDP_NET, as well as above log targets. * Fixed spelling bug with the net-compile run messages. * Fixed net-compile bug where script would compile then give up with and error exit, and not complete compiling when there where no rules defined in ipfilter-defs files. * Manpages left to next minor release as this one has to get out the door... -- Matthew Grant Tue, 15 Apr 2003 11:30:46 +1200 netscript-2.4 (5.0.0) unstable; urgency=low * Changed netscript so that it can support compiling and configuring from ipfilter-defs on start up. * Added type checking as much as practical to the net-compile command. * Updated manpages for existing commands. * Created manpages for ipfilter-defs. * Moved net-compile to /sbin from /usr/sbin. * Set permissions on install to 700 for ipfilter-defs directory as it contains security information. -- Matthew Grant Mon, 24 Mar 2003 15:09:50 +1200 netscript-2.4 (4.23) unstable; urgency=low * Added MARTIAN_BYPASS to ipf4_martians so that some source addresses can be by passed in martians check. * Fixed some of the examples in ipfilter-defs configuration. -- Matthew Grant Wed, 26 Feb 2003 15:36:08 +1300 netscript-2.4 (4.22) unstable; urgency=low * Made some corrections for missing files etc. -- Matthew Grant Tue, 25 Feb 2003 14:08:57 +1300 netscript-2.4 (4.21) unstable; urgency=low * Initial packaging of net compile functionality for IPv4. Documentation will be in next one, this is a trial build an run package. -- Matthew Grant Tue, 25 Feb 2003 13:38:46 +1300 netscript-2.4 (4.20) unstable; urgency=low * Fix bug with interface type stop functions not execuiting due to missing 'type' keyword. * Made /sbin/net work with non modular kernels, in the case where lsmod is not installed, and where it is. -- Matthew Grant Sat, 1 Feb 2003 17:03:45 +1300 netscript-2.4 (4.19) unstable; urgency=low * Install missing changelog... -- Matthew Grant Thu, 16 Jan 2003 11:43:13 +1300 netscript-2.4 (4.18) unstable; urgency=low * Removed Debian sub versioning as the debian package is maintained in parallel to the source. * Removed vrrpd code as the daemon is unstable. Included example of how to get package going with heartbeat. -- Matthew Grant Thu, 16 Jan 2003 10:53:45 +1300 netscript-2.4 (4.17-1) unstable; urgency=low * Fixed bug with /32 and /128 netmasks not being given in ethx_IPADDR. * Made VRRPD code work properly... - stopped new address code removing VRRPD IP addresses. -- Matthew Grant Wed, 8 Jan 2003 10:13:03 +1300 netscript-2.4 (4.16-1) unstable; urgency=low * Adjusted module loading for ipt_helper module in 2.4.20 * Fixed bug with deleting extraneous bridges where interfaces on running bridges were assumed to be disused bridges. -- Matthew Grant Fri, 3 Jan 2003 12:10:38 +1300 netscript-2.4 (4.15-1) unstable; urgency=low * Add support for vrrpd daemon. * Revamp the handling of the forwarding switch, and add commands to help handle it. -- Matthew Grant Mon, 30 Dec 2002 15:38:56 +1300 netscript-2.4 (4.14-1) unstable; urgency=low * Add ingress check rule and portscan chan for psd module to ipfilter.conf * Make ipfilter.conf test for and load /etc/netscript/ipfilter-local.conf if present. -- Matthew Grant Tue, 26 Nov 2002 13:12:19 +1300 netscript-2.4 (4.13-1) unstable; urgency=low * Fix ipsec modules not unloading on 'net stop'. Function call was missing in stop_mod(). -- Matthew Grant Mon, 18 Nov 2002 15:00:34 +1300 netscript-2.4 (4.12-1) unstable; urgency=low * Fixed ipsec startup to deal with Free S/WAN .pid files if the machine went off because of power failure - ipsec0 was not starting * Fixed problem with source blocking in the IPv4 inbrdr chain creation - inbound source blocking was setting the destination instead of the source address. -- Matthew Grant Sun, 10 Nov 2002 10:03:49 +1300 netscript-2.4 (4.11-1) unstable; urgency=low * Added support to load and unload Free S/WAN ipsec module, and extension modules as found in Debian Woody, and used in the Debian Router Project. -- Matthew Grant Tue, 29 Oct 2002 22:57:36 +1300 netscript-2.4 (4.10-2) unstable; urgency=low * Fixed some of the comments in the network.conf file to make things clearer. -- Matthew Grant Tue, 29 Oct 2002 06:55:51 +1300 netscript-2.4 (4.10-1) unstable; urgency=low * New Upstream Version * Fix problem with mangling set up preventing Free S/WAN from working properly - packet mangling was causing rerouting of ESP packets back into ipsec0 tunnel device... * Added support for adding static routes/static ARPs on interface start/reload. * Added support for subordinate interfaces (for controlling tunnels etc). -- Matthew Grant Mon, 28 Oct 2002 23:22:56 +1300 netscript-2.4 (4.04-2) unstable; urgency=low * Fix up Free S/WAN start up so that rp_filter can be used... -- Matthew Grant Fri, 18 Oct 2002 10:24:24 +1300 netscript-2.4 (4.04-1) unstable; urgency=low * Fix IPv4 icmp chain creation barfing because of conflict with protocol name... go figure. * Add support for Free S/WAN ipsec on one interface. * Add support for interface shutdown to chain shutdown of tunnel interfaces with manual manipulation... -- Matthew Grant Wed, 16 Oct 2002 11:28:30 +1300 netscript-2.4 (4.03-1) unstable; urgency=low * New upstream release with fix for dynamic interfaces that don't exist at boot, otherwise you cannot manually start them. * Fix minor problem with hlp output and long interface lists. -- Matthew Grant Fri, 4 Oct 2002 11:26:08 +1200 netscript-2.4 (4.02-1) unstable; urgency=low * New upstream release with tweaks and support for new 2.4.18-ac3 router kernels. * Added support for having iptables base modules compiled into the kernel by putting test into /sbin/net load_module() to test if base module is on the file system. * Added support for the following iptables 1.2.6a modules which have special dependencies: ipt_conntrack, ipt_NETMAP, ipt_SAME, ipt_POOL, ip_pool, and ipt_pool. -- Matthew Grant Tue, 26 Mar 2002 12:17:56 +1200 netscript-2.4 (4.01-1) unstable; urgency=low * Added corrected ppp interface stuff to network.conf * Corrected some documentation in network.conf about QoS -- Matthew Grant Fri, 28 Dec 2001 14:25:27 +1300 netscript-2.4 (4.0-4) unstable; urgency=low * Changed permissions of /etc/netscript/network.conf and ipfilter.conf to 0644 from 0600 as they do not contain information that is that sensitive anymore. -- Matthew Grant Mon, 10 Dec 2001 20:52:24 +1300 netscript-2.4 (4.0-3) unstable; urgency=low * Fixed problems with build depends by switching to 'Build-Depends-Indep'. -- Matthew Grant Sat, 8 Dec 2001 11:26:46 +1300 netscript-2.4 (4.0-2) unstable; urgency=low * Fixed problem with Build-Depends being in binary section of control file, and not being in the Source section as required. -- Matthew Grant Wed, 5 Dec 2001 15:05:02 +1300 netscript-2.4 (4.0-1) unstable; urgency=low * New version 4.0 with the following major changes * Converted to kernel 2.4.x, and iptables * Added IPv6 support, ip6tables and IPv6 interface configuration. * Removed filter and masquerade listing support as people should be using the iptables commands * All the old ipchains filtering scripts have been removed and replaced with shell script fragments via the ipfilter exec command. * Configuration is now saved to disk using the iptables-restore and iptables save commands (IPv4 and IPv6). * Converted output messages to Debian format * Added code to load/unload iptables and QoS modules on start and stop. -- Matthew Grant Sat, 1 Dec 2001 14:33:21 +1300 netscript-2.2 (3.03-0potato1) unstable; urgency=low * Added ability to set/override multicast fflag and mtu of interface * Added IP source IP/network specification to DMZ_OPEN_DEST and DMZ_CLOSED_DEST lists for DMZ network access control filters -- Matthew Grant Sun, 21 Jan 2001 22:54:16 +1300 netscript-2.2 (3.02-0potato1) unstable; urgency=low * Fixed problem with OSPF multicasts being blocked by the external interface filtering. The obstruction could cause problems with Zebra ospfd and other OSPF daemons in general. -- Matthew Grant Thu, 7 Dec 2000 08:35:49 +1300 netscript-2.2 (3.01-0potato1) unstable; urgency=low * Removed unused INTERN_IF variable from network.conf * Fixed QoS reload for PPP interfaces * Reworked QoS loading for PP interfaces to make it nicer -- Matthew Grant Sun, 3 Dec 2000 17:41:22 +1300 netscript-2.2 (3.0-0.9) unstable; urgency=low * Initial Release. * first release in a tar ball format. This basically a rehash of what is in LRP Eiger. * More chains used to reduce CPU load on router filtering operations, * QoS made usable b y adding reload commands and providing facility to set aside lumps of bandwidth * More options provided to net command to make it more intiuitive to use * Added ability to list individual chains * Adapted for Debian and overhauled it to increase effeciency. * As this package will change rapidly, man pages are not available but will be written when stabilised. -- Matthew Grant Fri, 24 Nov 2000 17:07:15 +1300 Local variables: mode: debian-changelog End: