github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

changes from ipv6-support-0.10 after merge

pull/1414/head
sebres 2016-05-11 16:58:13 +02:00
parent f9ea845595
commit c22ba5413d
1 changed files with 16 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
ChangeLog
View File

@ -15,10 +15,24 @@ TODO: list all the fixes/enhancements/etc which came with the PR #1346
- New Features: - New Features:
* IPv6 support:
- IP addresses are now handled as objects rather than strings capable for
handling both address types IPv4 and IPv6
- iptables related actions have been amended to support IPv6 specific actions
additionally
- hostsdeny and route actions have been tested to be aware of v4 and v6 already
- pf action for *BSD systems has been improved and supports now also v4 and v6
- name resolution is now working for either address type
- new conditional section functionality used in config resp. includes:
- [Init?family=inet4] - IPv4 qualified hosts only
- [Init?family=inet6] - IPv6 qualified hosts only
- Enhancements: - Enhancements:
* several functionality of class `DNSUtils` moved to new class `IPAddr`,
both classes moved to new module `ipdns`
* pseudo-conditional section introduced, for conditional substitution resp.
evaluation of parameters for different family qualified hosts,
syntax `[Section?family=inet6]` (currently use for IPv6-support only).
ver. 0.9.5 (2016/XX/XXX) - wanna-be-released ver. 0.9.5 (2016/XX/XXX) - wanna-be-released
----------- -----------
@ -92,14 +106,6 @@ ver. 0.9.4 (2016/03/08) - for-you-ladies
* sshd filter got new failregex to match "maximum authentication * sshd filter got new failregex to match "maximum authentication
attempts exceeded" (introduced in openssh 6.8) attempts exceeded" (introduced in openssh 6.8)
* Added filter for Mac OS screen sharing (VNC) daemon * Added filter for Mac OS screen sharing (VNC) daemon
* IPv6 support:
- IP addresses are now handled as objects rather than strings capable for
handling both address types IPv4 and IPv6
- iptables related actions have been amended to support IPv6 specific actions
additionally
- hostsdeny and route actions have been tested to be aware of v4 and v6 already
- pf action for *BSD systems has been improved and supports now also v4 and v6
- Name resolution is now working for either address type
- Enhancements: - Enhancements:
* Do not rotate empty log files * Do not rotate empty log files