1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
|
3.5.0
Luigi Genoni
Tested and updated to compile cleanly with KDE 3.5, QT 3.3.4 and gcc 4.0
3.4.0
Luigi Genoni
Tested and updated to compile cleanly with KDE 3.4.0, QT 3.3.4 and gcc 4.0.0
Icons have been renamed to avoid name collisions
3.3.1
Luigi Genoni
Since netfilter modules are autoloaded now, initial check was updated
3.3.0
Luigi Genoni
Added SAME target support in NAT window
3.2.0
Luigi Genoni
Updated automake to conform to KDE 3.2 standard
Converted icons to png format
Compiles and installs with KDE 3.2
Updated README.first
3.1.4
Luigi Genoni
fix compile option to compile with gcc 3.3.2
3.1.3
Luigi Genoni
Fix an old bug about script installation
Change the show Masq rules button in show Nat rules button
3.1.2
Luigi Genoni
added ECN matches support in mangle window (just to add rules, not to
delete them, so you have to use the "short way" to delete them).
knat.moc is deleted when make clean is runned.
updated configure/automake scripts to recend KDE-common.
3.1.1
Luigi Genoni
added ECN matches support in main window.
added 2nd fragment(s) flag choiche win TCP packets flags.
3.1.0
Luigi Genoni:
added DSCP support (will obsolete TOS) in mangle window.
3.0.3
Luigi Genoni:
interface to ip, route, ifconfig now should work, just for fun.
3.0.2
Luigi Genoni:
added interface to ip, route and ifconfig, just for fun.
cosmetic updates.
3.0.1
Luigi Genoni:
some small update to save function, mostly cosmetic.
Makefile.in updates.
3.0.0
Luigi Genoni:
switched to KDE3
2.2.5
Luigi Genoni:
mangle update to include the new chains.
ULOG support for mangle chains.
2.2.4
Luigi Genoni:
reverse resolution for rules monitor is now disabled by default,
but can be enabled.
some missoell has been fixed.
2.2.3
Luigi Genoni:
minor changes (bugfixes) in knat_functions.cpp to avoid every line of video
output to be displayed three times.
configure system has been updated.
2.2.2
Luigi Genoni:
moved from KTMainWindow to KMainWindow, as it should be for kde2 and kde3.
2.2.1
Luigi Genoni:
iptables 1.2.3 has a noisy bug with TOS mangling, so I insered a workaround
added a monitor for traffic shaper's rules
added the delete option to traffic shaper support (need tests)
2.2.0
Luigi Genoni:
added basical support to traffic shaping using QoS with cbq and
fw based classifier
some secondary bugs have been corrected
2.1.4
Luigi Genoni:
save function now saves also procfs set up (requested because of
distributions bugs)
2.1.3
Luigi Genoni:
added support to clam TcpMSS to MTU
2.1.2
Luigi Genoni:
packet tracking enabled also for mark based rules
2.1.1
Luigi Genoni:
destination ip address and netmask, if unspecified, will be 0/0
check for malformed packets can be enabled inside un regular chains rules
configure script updates
if present use iptables native save binaries, otherway use my save function
warn users to upgrade to new iptables to have use native save
2.1.0
Luigi Genoni:
added packet state check for regular chains
updated save script
Marc Jauvin:
some spec file cleans up
2.0.4
Luigi Genoni:
added stop button to tcpdump and nmap interfaces (very usefull)
starting to plan mark based chain rules...
some additional procfs tuning to maximize perforamnces and security
2.0.3
Luigi Genoni:
added new iptables paths
better interface to nmap, options are naged (STILL not perfect)
2.0.2
Luigi Genoni:
added interface to aggressive nmap
fixed a little bug in save function
some cosmetical changes
2.0.1
Luigi Genoni:
a more rationale main window face
fixed a bug with saveing SNAT and DNAT with udp
support for lec and atm interfaces
Michele Baldessari:
libtool integration
2.0.0
Luigi Genoni:
KDE2 port
1.2.2
Luigi Genoni:
fixed a little bug with selecting interfaces for masqurating
1.2.1
Luigi Genoni:
better save function for mangle, LOG is still not included.
some minor typos fixes
1.2.0
Luigi Genoni:
save function for mangle, LOG is not included, at less for now.
1.1.4
Luigi Genoni:
new full (semi-full) mangle support
some indentation fix
minor issues bug fixes
merged Sheer's 1.1.2 tree with 1.1.3 patches
Sheer El-Showk (000827):
Moved all initialization code to knat_initialize.cpp.
Created knf_functions.h as a header for non-associated functions (initialize())
1.1.3
Luigi Genoni:
fixed a nasty bug, causing a sig 11 when getting some error messages from command line in general policy set-up windows
deleted REJECT policy for a full chain (meaningless being fairly the same of DROP)
1.1.2
Luigi Genoni:
support for bonded interfaces
support for Token Ring interfaces
a little masq change
some makefile patches to compile on mandrake
Sheer El-Showk:
New Makefile
Better debugging now possilbe through knat_debug.h
Changed implementation of pop-up windows (polList, natList, natpolList,
masqList, dumpList, masqWin) to use KNFWidget (in new knat_gui.h).
Fixed memory leak and implementation problem (window state tracking) with
old pop-up window system.
1.1.1
Makefile more clean, fixed a little problem that prevented to compile on Red Hat
operate a better performance and security tuning inside of procfs
require Intranet data for masquerating (to save "from 0.0.0.0/0 to 0.0.0.0/0" is meaningless)
some bug fix in kiptables-save
1.1
serious masquerade managment (with a proper setting window)
save masquerading rules
1.0.2
it is possible to insert a rule in a specific position inside of a chain
it is possible to delete a rule just giveing the position inside of a chain
kiptables-save now saves all rules
some code cleanup
1.0.1
save iptables rules and global chain policies
implemented MIRROR policy for INPUT FORWARD OUTPUT chains
1.0.0
noisy seg fault on exit eliminated
better check on iptables installed
beta 4
added full nat management
beta 3
added nat chains management
beta 2
added load and save capabilities, using scripts executing
iptables-save
iptables-restore
iptables-restore from netfilter 0.1.17 has been discovered to be buggy,
if i have time i will fix it, otherway let's wait a running one.
anyway in princip load capability does Work.
some buggy fix.
beta 1
I star from here!
|
