mirror of
https://salsa.debian.org/debian/knockd
synced 2026-01-03 10:05:16 +00:00
52 lines
3.0 KiB
Plaintext
52 lines
3.0 KiB
Plaintext
VERSION DESCRIPTION
|
|
-----------------------------------------------------------------------------
|
|
0.7 - Patches from Oswald Buddenhagen:
|
|
- Document the 'target' configuration directive.
|
|
- Merging OS-specific networking code to reduce LOCs and the
|
|
sea of #ifdefs.
|
|
- Added 50ms timeout to pcap_open_live() to reduce CPU usage
|
|
on network-heavy hosts. Pcap recommends we not use zero.
|
|
0.6 - Patches from Oswald Buddenhagen:
|
|
- Cleanup: Don't null-check before free
|
|
- Cleanup: Consolidate flag-check logic
|
|
- Accept single-knock sequences
|
|
- Introduce a 'target' configuration directive, enabling
|
|
knockd to react to connect attempts to a target host.
|
|
Useful in cases where knockd is on a router and you want
|
|
to send a target a wakeup packet.
|
|
0.5 - Added ability to change the knocking protocol (TCP/UDP) on a
|
|
per-port basis using the knock client (instead of the -u
|
|
switch)
|
|
- Patches from Philippe Lovis <philippe.lovis@gmx.ch>:
|
|
- Fixed memory leaks and potential security vulnerabilities
|
|
- Added --lookup option for DNS lookups (default is off)
|
|
- Added support for one-time sequences
|
|
- Added Interface directive to select the listening interface
|
|
- Moved packet filtering to kernel space with BPF filters
|
|
- Support for excluding TCP flags with "!"
|
|
- Removed the leftover/deprecated layer-2 MAC logic
|
|
0.4 - Added support for DLT_RAW (PPPoE) interfaces
|
|
- Changed packet inspection to use the interface's IP address
|
|
to determine the flow direction, rather than the ethernet
|
|
MAC address
|
|
- Changed logging date format to ISO (yyyy-mm-dd)
|
|
- Added hostnames to logging output
|
|
0.3.1 - Fixed a segfault occurring when a hostname cannot be resolved
|
|
- Patch from Simon Matter <simon.matter@ch.sauter-bc.com>:
|
|
- fixes build errors on Fedora
|
|
- Patch from Per Cederberg <per@percederberg.net>:
|
|
- fixes TCP SYN timeouts in knock client
|
|
0.3 - Added PPP (LINUX_SLL) support
|
|
- Patches from Leo Costela:
|
|
- added Start_Command, Stop_Command, Cmd_Timeout directives,
|
|
allowing a single door to open and then close after a
|
|
timeout period
|
|
- knockd now re-reads config when a HUP is received
|
|
- multiple protocols supported on a per-port basis
|
|
0.2.1 - Bugfix for TCP flag discrimination
|
|
0.2 - Fixed the zombie process problem
|
|
- Added patch from Leo Costela:
|
|
- PidFile configuration directive
|
|
- support for specific TCP flags
|
|
0.1 - Initial release
|