Weblog

Tuesday November 07, 2006

IPFilter 4.1.15 released

The IPFilter steam train rolls on, with another version cut out primarily to deal with compilation issues on different platforms. As I'm writing this blog entry a few days after I uploaded it, I can already say that I'll need to stamp out a new release soon to deal with more of the same - issues with SuSE 10.1 are one problem, at least...so 4.1.16 is around the corner somewhere, so is a 5.0 not far away, now that I've successfully brainstormed over the weekend just gone.

There is one new significant change and that is the application of the state table automatic flushing algorithm to the NAT table. In the state table management, if it attempts to add more entries to the table than has been declared the maximum, it sets a flag for the flushing of the table to try a bit harder to free up some entries by cleaning out what could be considered dead wood.

4.1.15 - Released 03 November 2006

• Add in automatic flushing of NAT, like state, table if it fills up too much
• Update comments in the code for NAT checksum adjustments
• Fix compiling on FreeBSD 5.4 and 6.0
• prevent panics from read/write IOs trying to use uninitialised structures
• Newer NetBSD should use malloc() instead of MALLOC() in the kernel where the size is not staticly defined
• Some gcc warning message cleanup from NetBSD
• Missing include for on Solaris for poll work
• NetBSD now uses opt_ipfilter.h, not opt_ipfilter_log.h