1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
<META NAME="GENERATOR" CONTENT="SGML-Tools 1.0.9">
<TITLE>The Mason HOWTO: Version summary (out of date, sorry)</TITLE>
<LINK HREF="mason-8.html" REL=next>
<LINK HREF="mason-6.html" REL=previous>
<LINK HREF="mason.html#toc7" REL=contents>
</HEAD>
<BODY>
<A HREF="mason-8.html"><IMG SRC="next.gif" ALT="Next"></A>
<A HREF="mason-6.html"><IMG SRC="prev.gif" ALT="Previous"></A>
<A HREF="mason.html#toc7"><IMG SRC="toc.gif" ALT="Contents"></A>
<HR>
<H2><A NAME="s7">7. Version summary (out of date, sorry)</A></H2>
<P>
<UL>
<LI>0.9.0
<P> _Lots_ of good new stuff. Mason handles log entries from
ipchains or ipfwadm automatically. The command it runs can be either
an ipchain or ipfwadm command, and it can output either an ipchain or
ipfwadm command. All independently. See the ECHCOMMAND=... and
DOCOMMAND=... parameters, above.
<P>_Major_ speedup! Keep reading lines until the 7th-13th fields
are different from the previous line; this probably quadruples Mason's
throughput or better. Bonus points to the readers who can read morse
code from the heartbeat output... Oh, and I added heartbeat output to
show that Mason hasn't just crashed. :-)
<P>Mason handles interfaces whose IP address changes automatically;
see the DYNIF=... parameter, above.
<P>Note: additional ipchains fields are:
<PRE>
L=Total length
S=TOS
I=ip->id?
F=Fragment offset
T=TTL
</PRE>
<P>
</LI>
<LI>0.8.0
<P> -k added to control the direction in which connections are made.
Unfortunately, the ftp-data port doesn't honor the simple rule for -k; I
suspect this is a consequence of PASV vs. "active?" ftp opening the data
connection in one direction of the other. Hmmm... This was released to
the world as 0.7.9.
<P>
</LI>
<LI>0.7.0
<P> (6/21/98) 20% speed improvement by changing read command. Local
name cache added. On the fly policy changing. Comments. Major
documentation updates. Another 20% performance improvement by replacing
some sed's with bash internal pattern deletion. 6% more by using ${#..}
instead of wc --bytes to size strings. Cut time necessary to process
non-firewall lines in third by using && instead of -a.
<P>
</LI>
<LI>0.6.0
<P> (6/4/98) Documentation added
<P>
</LI>
<LI>0.5.0
<P> (6/2/98) Bare code, almost no documentation, ipfwadm support only.
</LI>
</UL>
<P>
<P>
<HR>
<A HREF="mason-8.html"><IMG SRC="next.gif" ALT="Next"></A>
<A HREF="mason-6.html"><IMG SRC="prev.gif" ALT="Previous"></A>
<A HREF="mason.html#toc7"><IMG SRC="toc.gif" ALT="Contents"></A>
</BODY>
</HTML>
|