version 1.56, 2005/03/29 13:51:35 |
version 1.57, 2005/03/31 15:51:37 |
|
|
</ul> |
</ul> |
<p> |
<p> |
|
|
|
<li>New functionality and improvements for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4&">pf(4)</a>, the packet filter: |
|
<ul> |
|
<li>Improved <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4&">carp(4)</a>, new <i>carpdev</i> mode for IP-less interfaces. |
|
<li>Support limiting TCP connections by establishment rate, automatically |
|
adding flooding IP addresses to tables and flushing states |
|
(<i>max-src-conn-rate</i>, <i>overload <table></i>, |
|
<i>flush global</i>). |
|
<li>Improved functionality of tags (<i>tag</i> and <i>tagged</i> for |
|
translation rules, tagging of all packets matching state entries). |
|
<li>Improved diagnostics (error messages and additional counters from |
|
<i>pfctl -si</i>). |
|
<li>New keyword <i>set skip on</i> to skip filtering on arbitrary interfaces, |
|
like loopback. |
|
<li>Filtering on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8&">route(8)</a> labels. |
|
<li>Several bugfixes improving stability. |
|
</ul> |
|
<p> |
|
|
<li>New functionality and improvements for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8&">isakmpd(8)</a>, |
<li>New functionality and improvements for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8&">isakmpd(8)</a>, |
the Internet Security Association and Key Management Daemon: |
the Internet Security Association and Key Management Daemon: |
<ul> |
<ul> |