X-Git-Url: http://git.sameswireless.fr/l2tpns.git/blobdiff_plain/b70e7cef2052f24b49229a7974be484a0cecb362..refs/heads/infinite-loop-protection:/Changes diff --git a/Changes b/Changes index 9253ee3..9e6e05b 100644 --- a/Changes +++ b/Changes @@ -1,6 +1,168 @@ -* Wed Aug 31 2005 Brendan O'Dea 2.1.5 +* 2014 Fernando Alves 2.2.1-2fdn x +- new feature: If the user attribute "Framed-IPv6-Address" is defined then the ICMPv6_RA advertise this IPv6 address. +- Fix: Incorrect delegation of IPv6 prefixes when multiple of 4 bits (nibble) (eg: /44, /52 ...). +- Added ability to define up to 5 IPv6 prefix delegation by user. +- Fix: IPv6 prefix routing on slave cluster +- Add of the RDNSS option to ICMPv6 Router Advertisement (RA). +- Add of the ppp_keepalive option. + +* 2013 Fernando Alves 2.2.1-2fdn x +- Add tundevicename configuration option +- Fix: last_packet no updated in cluster mode +- Authorize to change the source IP of the tunnels l2tp +- Add pppoe server functionality +- Add parameter to disable the send of the L2TP HELLO message (Apple compatibility) +- Fix: Tunnel creation does not work when the length of the hostname is odd +- Adding the possibility to listening multiple IP L2TP Tunnels +- Removing LAC flag +- Fix: send SCCCN requested challenge response +- add accounting parameter account_all_origin +- Fix service_name management and add pppoe_only_equal_svc_name parameter +- Adding the possibility to set multiple hostname +- Fix: authentication success was sent 2 times +- Fix: throttle ipv6 out. +- Fix: remove old IPV6 routes on slave +- Fix: compiling Warning, dpkg-buildflags ... +- Enabled hardened build flags, thanks Moritz Muehlenhoff (closes: #657846) +- Packaging updates +- Move to 3.0 (native) source format +- Bump DH compat level to 8 +- Fix ordering of stdio.h/syslog.h includes (closes: #707385) +- Create accounting_dir in init script if necessary (closes: #418156) +- Bump Standards-Version to 3.9.4.0 +- Add build-arch/build-indep targets to debian/rules +- Fix: compiling Warning +- Fix: remove old IPV6 routes on master +- Add DHCPv6 functionality +- Fix cluster slave; no add the ipv6 route address (/128) if included in the delegated prefix. +- Fix cluster slave; reset to 0, the end of the session when the master version < slave version. + +* 2012 Fernando Alves 2.2.1-2fdn x +- Fix MLPPP functionality. +- Fix the inverted "delete/add" of the routes, in cluster mode. +- Add a echo_timeout configuration option. +- Add a idle_echo_timeout configuration option. +- Add LAC functionality, possibility to forward ppp to Remote LNS. + +* Sun Sep 11 2011 Brendan O'Dea 2.2.x +- Apply MLPPP patch from Muhammad Tayseer Alquoatli. +- Apply patch from Michael O to avoid sending multiple CDNs. +- Apply patch from Cyril Elkaim to fix an issue with MacOS. +- Apply patch from Geoffrey D. Bennett to fix retry of control packets. +- Apply patch from Geoffrey D. Bennett to handle RADIUS Class attribute. +- Bump heartbeat version to handle Class entry in session (v6). +- Re-arrange session struct to remove padding. +- Update cluster code to handle v6 packets. Drop compatability for pre-v5. +- Clean up some compiler errors. + +* Mon Dec 18 2006 Brendan O'Dea 2.2.0 +- Only poll clifd if successfully bound. +- Add "Practical VPNs" document from Liran Tal as Docs/vpn . +- Add Multilink support from Khaled Al Hamwi. +- Remove non-working setuid option. +- Convert manual.html to Docbook. +- Kludge around problem with Netgear DM602 authentication. +- Add session/idle timeouts (Graham Maltby). +- Use result code AVP to set Acct-Terminate-Cause is disconnect cause + AVP is not present. +- Add radius_bind_{min,max} to simplify firewalling of RADIUS ports. +- Fix sign problem with reporting of unknown RADIUS VSAs. +- Allow DNS servers to be specified either using the old or new + vendor-specific Ascend formats. +- Security [CVE-2006-5873]: Rhys Kidd identified a vulnerability in the + handling of heartbeat packets. Drop oversize heartbeat packets. +- Don't send interim records before session start (Daryl Tester). +- Add "shutdown" and "reload" CLI commands (Daryl Tester). + +* Tue Apr 18 2006 Brendan O'Dea 2.1.18 +- Don't shutdown on TerminateReq, wait for CDN. +- Interpret "local" direction correctly (as LAC) in disconnect AVPs. + +* Thu Apr 13 2006 Brendan O'Dea 2.1.17 +- Fix IPCP length test to allow Terminate-Request (4 bytes). +- Send nsctl responses back using the correct source address (thanks ltd). +- Similarly set the source for DAE responses; use bind_address when + handling forwarded packets on the master. +- Add Acct-Terminate-Cause to RADIUS stop records. + +* Thu Feb 23 2006 Brendan O'Dea 2.1.16 +- Send configured magic-no in LCP EchoReq when LCP is opened. +- Correct addition of single IP to pool (Jonathan Yarden). +- Ensure session changes from LCP ConfigReq/ConfigNak are sent to cluster. +- Verify that RADIUS packets come from a configured server (Jonathan Yarden). +- Avoid endless loop in processipcp, processipv6cp. +- Additional length checks in processlcp. +- Allow peer to request a new magic-number, or to disable magic-numbers. +- Decrease ip_conntrack_tcp_timeout_established to 5hrs (table filling). + +* Mon Dec 19 2005 Brendan O'Dea 2.1.15 +- Drop backtrace. +- Reduce logging of LCP EchoReply packets. +- Break LCP configure loop with shutdown. +- Limit value of MRU of 1492 (rfc2516). +- Tun MTU should be MRU (not MRU+4). +- Add Service-Type/Framed-Protocol to RADIUS records (Paul Martin). + +* Fri Dec 9 2005 Brendan O'Dea 2.1.14 +- Run PLUGIN_RADIUS_ACCOUNT for Start records. + +* Wed Dec 7 2005 Brendan O'Dea 2.1.13 +- Add test/ping-sweep. +- Apply spec changes from Charlie Brady: use License header, change + BuildRoot to include username. +- Fix IPCP negotiation of secondary DNS server, reported by Jon Morby. +- Clean up sessiont, removing some unused fields. +- Remove unused "MAC" config type. +- Reject unknown/unconfigured protocols on the master. +- Sanity check MRU before using in ppp_code_rej, protoreject. + +* Thu Nov 17 2005 Brendan O'Dea 2.1.12 +- Set MTU on tunnel interface so the kernel will re-fragment large + packets to within MRU. +- Fix TCP checksum recalc. +- NAK silly MRU values from peer. + +* Mon Nov 14 2005 Brendan O'Dea 2.1.11 +- Fix fragment handling in ip_filter. +- Exclude counter when comparing filter rules. + +* Sat Nov 5 2005 Brendan O'Dea 2.1.10 +- Add scripts/l2tpns-capture. +- Fix LCP Echo frequency. +- Add Framed-Route entries to RADIUS records. +- Reset restart counters correctly. +- Reset timers on sending ConfigReq. +- Only send one RADIUS Start record, even if IPCP is restarted. + +* Tue Oct 11 2005 Brendan O'Dea 2.1.9 +- Fix Calling-Station-Id in RADIUS accounting records (Slobodan Tomic). +- Fix RADIUS authentication on DAE responses. +- Don't send tunnel HELLO when there are pending control messages. +- Move plugin_radius_reset from *ctl to auto* plugins. +- Add Cisco-AVPairs to RADIUS accounting records via plugin_radius_account. + +* Mon Sep 19 2005 Brendan O'Dea 2.1.8 +- Move code from signal handlers into mainloop, avoiding a race + condition when forking CLI. + +* Fri Sep 16 2005 Brendan O'Dea 2.1.7 +- This time, for sure: really fix Protocol-Reject. + +* Fri Sep 16 2005 Brendan O'Dea 2.1.6 +- Any traffic on a tunnel resets lastrec, not just control messages. +- Use a unique identifier for LCP. +- Fix Code-Reject/Protocol-Reject. +- Add l2tp_mtu configuration option, used to define MRU, MSS. +- Adjust TCP MSS options in SYN and SYN,ACK packets to avoid + fragmentation of tcp packets. + +* Sat Sep 3 2005 Brendan O'Dea 2.1.5 - Avoid Code-Reject loop. - Increase size of PPP buffers to MAXETHER. +- Bug fixes for CLI ringbuffer and tunnel HELLO from Yuri. +- Restart rather than halt BGP on receipt of CEASE (Dominique Rousseau). +- Add cluster_mcast_ttl option to allow a cluster to span multiple + subnets (suggested by Tim Devries). * Mon Aug 29 2005 Brendan O'Dea 2.1.4 - Drop level of "Unexpected CHAP message" log.