File accel-ppp.changes of Package accel-ppp

-------------------------------------------------------------------
Sun Jan 25 08:27:08 UTC 2026 - Martin Hauke <mardnh@gmx.de>

- Update to version 1.14.0
  Breaking / Compatibility
  * Crypto: removed bundled tomcrypt; OpenSSL-only builds.
  * Regex: migrated from libpcre to libpcre2.
  * Build: raised minimum CMake version (3.10+).
  Features
  * CLI: new show ippool command.
  * RADIUS: Message-Authenticator blast attack protection.
  * RADIUS: Framed-Interface-Id support in radattr.
  * SSTP: load certificate chain (not just single cert).
  * PPPoE/IPoE/L2TP/SSTP: multiple protocol improvements (see fixes).
  Fixes
  * PPPoE: RFC2516 tag parsing compliance; ignore vendor-specific
    tags in PADR; missing break fix.
  * PPPoE: additional RFC2516 PADI tag parsing fixes.
  * PPP LCP: truncate echo reply when larger than client MRU.
  * L2TP: fix buffer overflow and Calling/Called Number handling;
    include calling number in Calling-Station-ID.
  * IPoE: DHCP noauth username fix; DHCP option 42 fix; kernel 6.12
    driver fixes.
  * IPoE: build fixes for newer kernels (NETIF_F_NETNS_LOCAL,
    del_timer/timer_delete, flowi4_tos).
  * IPv6: DHCPv6 Confirm support; RFC6334 AFTR-Name support.
  * Accounting: preserve last counters on disconnect.
  * RADIUS: refresh session stats in req_set_stat; restrict DM/CoA
    sources.
  * Logging: fix log_tcp memory leak.
  * Shaper: TBF leaf-qdisc support and clsact policer support; tbf
    leaf-qdisc fix.
  * Misc: GCC14/musl/big-endian build fixes;
    net-snmp 5.9.4+ compatibility; connlimit/pptp fix;
    post_msg bug fix; SSTP HTTP replay handling fix.
  Docs
  * Expanded documentation for PPPoE/IPoE/SSTP/L2TP/PPP/RADIUS,
    IPPools, certs, proxy protocol.

-------------------------------------------------------------------
Sat Mar 30 21:03:35 UTC 2024 - Martin Hauke <mardnh@gmx.de>

- Update to version 1.13.0
  * common: implemented check-ip function for all connection types
  * common: implemented max-starting (limit number of starting sessions)
  * common: added single-session-ignore-case option
  * shaper: added default rate-limit for sessions without configured rate limit
  * shaper: added support for speed suffixes (B/K/M/G)
  * shaper: fixed up/down order for Mikrotik-Rate-Limit
  * shaper: reworked leaf-qdisc config parsing
  * shaper: fixed fq_codel noecn regression
  * radius: implemented acct-interim-jitter
  * radius: fixed accounting increment id for stop packets
  * radius: added support for Access-Accept username RFC2865 5.1
  * radius: implemented Delegated-IPv6-Prefix attribute in Accounting-Start message
  * radius: added strip-realm feature
  * radius: fixed crash with l4-redirect with no ipv6
  * radius: added sanity check for vendor attribute length
  * radius: fixed buffer overflow when receiving radius packet
  * radius: implemented accounting delay option
  * radius: added IPv6 binding support
  * ippool: use gw-ip-address for ppp even if mask is set
  * pppoe: added accept-blank-service option
  * pppoe: improved pppoe code
  * ipoe: added dhcp rebind-time support
  * ipoe: improved ipoe code
  * ipoe: gracefully terminate denied sessions
  * ipoe: added option 56 to DHCP NAK packet
  * ipoe: added option 54 (server-id) to DHCPNAK
  * ipoe: fixed address range shifting
  * ipoe: fixed local-net check in arp requests
  * ipoe: fixed missing dhcp end option on dhcp notify packets
  * ipoe: added per-interface check-mac-change option
  * l2tp: fixed RCE through buffer overflow & fixed LE/BE compatibility
  * lcp: fixed one-by-one overflow
  * auth: fixed CHAP challenge
  * auth: added discard unphased PAP Authenticate-Request packets
  * sstp: implemented ssl-protocol option and added unsupported features logging
  * sstp: fixed crypto-binding attr errors logging
  * sstp: fixed compound mac validation with broken clients
  * sstp: fixed MITM without SSTP_MSG_CALL_CONNECTED being sent
  * sstp: additional fixes and improvements
  * ipv6: implemented DHCPv6 relay support
  * ipv6: implemented named ipv6 pools
  * ipv6: fixed ipv6 auto-configuration in netns
  * ipv6: additional minor fixes and improvements
  * cli: fixed crash on damaged history file
  * cli: added -V/--version support, reworked args parsing
  * vrf: implemented VRF support

-------------------------------------------------------------------
Thu Aug 29 15:03:40 UTC 2019 - Martin Hauke <mardnh@gmx.de>

- Initial package, version 1.12.0