From 4ddba1a166b3873845b32fe90d2ddd261f53608b Mon Sep 17 00:00:00 2001 From: bmah Date: Sat, 7 Oct 2006 14:49:45 +0000 Subject: [PATCH] New release notes: IPv6 link-local addresses now enabled with ipv6_enable, ng_tag(4) (+MFC) Modified release notes: Rewritten ipfw(4) tablearg note, OpenSSH 4.4p1 (+MFC), OpenSSL 0.9.8d, OpenBSM 1.0alpha12. MFCs noted: ipfw(8) tag/untag/tagged, --- .../doc/en_US.ISO8859-1/relnotes/article.sgml | 31 +++++++++++-------- .../en_US.ISO8859-1/relnotes/common/new.sgml | 31 +++++++++++-------- 2 files changed, 36 insertions(+), 26 deletions(-) diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml index e1d1baee0657..93d16e020197 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml @@ -777,17 +777,18 @@ This feature can be re-enabled by using a new sysctl variable net.inet6.ip6.mcast_pmtu. &merged; + IPv6 link-local addresses are now enabled only + if ipv6_enable is set in &man.rc.conf.5;. + &merged; + The &man.ipfw.4; IP packet filter now supports IPv6. &merged; - The &man.ipfw.4; firewall system now supports substitution of the action - argument with the value obtained from table lookup, - which allows some optimization of rulesets. - This is now applicable only to pipe, - queue, - divert, - tee, - netgraph, - and ngtee rules. &merged; + The &man.ipfw.4; firewall system now supports + a tablearg feature, which allows + values obtained from a table lookup to be used as part of a + rule. &merged; + This feature can be used to optimize some rulesets + or to implement policy-based routing inside a firewall. For example, the following rules will throw different packets to different pipes: @@ -805,7 +806,7 @@ pipe tablearg ip from table(1) to any The tag acts as an internal marker (it is not sent out over the wire) that can be used to identify these packets later on, for example, by using tagged - rule option. For more details, see &man.ipfw.8;. + rule option. For more details, see &man.ipfw.8;. &merged; The IPFIREWALL_FORWARD_EXTENDED kernel option has been removed. This option was used to permit @@ -823,6 +824,10 @@ pipe tablearg ip from table(1) to any The &man.ng.iface.4; Netgraph node now supports &man.altq.4;. &merged; + The &man.ng.tag.4; Netgraph node has been added to + support the manipulation of mbuf tags attached to data in the + kernel. &merged; + A bug has been fixed in which NFS over TCP would not reconnect when the server sent a FIN. This problem had occurred with Solaris NFS servers. &merged; @@ -1653,10 +1658,10 @@ mdconfig_md1="-t vnode -f /var/foo.img" NetBSD as of 31 August 2006. &merged; OpenSSH has been updated from - 4.2p1 to 4.3p1. + 4.2p1 to 4.4p1. &merged; OpenSSL has been updated from - 0.9.7e to 0.9.8b. + 0.9.7e to 0.9.8d. hostapd has been updated from version 0.3.9 to version 0.4.8. @@ -1676,7 +1681,7 @@ mdconfig_md1="-t vnode -f /var/foo.img" snapshot from OpenBSD as of 20060831. TrustedBSD OpenBSM, - version 1.0 alpha 10, an implementation of the documented Sun Basic + version 1.0 alpha 12, an implementation of the documented Sun Basic Security Module (BSM) Audit API and file format, as well as local extensions to support the Mac OS X and &os; operating systems has been added. This also includes command line tools for audit diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml index e1d1baee0657..93d16e020197 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml @@ -777,17 +777,18 @@ This feature can be re-enabled by using a new sysctl variable net.inet6.ip6.mcast_pmtu. &merged; + IPv6 link-local addresses are now enabled only + if ipv6_enable is set in &man.rc.conf.5;. + &merged; + The &man.ipfw.4; IP packet filter now supports IPv6. &merged; - The &man.ipfw.4; firewall system now supports substitution of the action - argument with the value obtained from table lookup, - which allows some optimization of rulesets. - This is now applicable only to pipe, - queue, - divert, - tee, - netgraph, - and ngtee rules. &merged; + The &man.ipfw.4; firewall system now supports + a tablearg feature, which allows + values obtained from a table lookup to be used as part of a + rule. &merged; + This feature can be used to optimize some rulesets + or to implement policy-based routing inside a firewall. For example, the following rules will throw different packets to different pipes: @@ -805,7 +806,7 @@ pipe tablearg ip from table(1) to any The tag acts as an internal marker (it is not sent out over the wire) that can be used to identify these packets later on, for example, by using tagged - rule option. For more details, see &man.ipfw.8;. + rule option. For more details, see &man.ipfw.8;. &merged; The IPFIREWALL_FORWARD_EXTENDED kernel option has been removed. This option was used to permit @@ -823,6 +824,10 @@ pipe tablearg ip from table(1) to any The &man.ng.iface.4; Netgraph node now supports &man.altq.4;. &merged; + The &man.ng.tag.4; Netgraph node has been added to + support the manipulation of mbuf tags attached to data in the + kernel. &merged; + A bug has been fixed in which NFS over TCP would not reconnect when the server sent a FIN. This problem had occurred with Solaris NFS servers. &merged; @@ -1653,10 +1658,10 @@ mdconfig_md1="-t vnode -f /var/foo.img" NetBSD as of 31 August 2006. &merged; OpenSSH has been updated from - 4.2p1 to 4.3p1. + 4.2p1 to 4.4p1. &merged; OpenSSL has been updated from - 0.9.7e to 0.9.8b. + 0.9.7e to 0.9.8d. hostapd has been updated from version 0.3.9 to version 0.4.8. @@ -1676,7 +1681,7 @@ mdconfig_md1="-t vnode -f /var/foo.img" snapshot from OpenBSD as of 20060831. TrustedBSD OpenBSM, - version 1.0 alpha 10, an implementation of the documented Sun Basic + version 1.0 alpha 12, an implementation of the documented Sun Basic Security Module (BSM) Audit API and file format, as well as local extensions to support the Mac OS X and &os; operating systems has been added. This also includes command line tools for audit