SafeFire Links 1.3 alpha

This is unrestricted free alpha based on the latest LGS code.
It is completely free. There is no plans for now to make commercial
release.

Support and futher development is going to be done in my spare time so there is
no guarantee for something. Nevertheless I'll attempt to make at least bugfixes
for reported problems. If you need some feature in which I'm not interested then
you have two options:
- sponsor it;
- write it yourself. In this case I'll provide all necessary info and sources.

It is worth to note that it is impossible for me to make a complete regression
testing so if something from old features is broken in the current drop please
don't hesitate to mail a bugreport. I'll try to fix this ASAP.

Slavik Gnatenko        moveton@gmail.com

====== Known problems and limitations =======
- MAC protocol doesn't support bind to several MAC adapters so it is not
  possible to use for example PPPoE and LAN firewall on the same host
- MAC protocol have to have zero logical number
- No special DHCP support for LAN firewall usage. SFLinks have to be restarted
  manually to take new interface address
- NETBEUI traps with sfmac. The reason is unknown
- no posibility in filter to disable/enable IP subprotocol by number
- NAT portmap doesn't allow routing of complete IP subprotocol (actual for
  PPtP and IPSec) to some host
- no way to bind REMOTE_PIPE plugin because it is not part of working plugins
  chain. A "services" slot support should be added
- sfcon hangs PM. Can somebody rewrite OS/2 VIO subsystem?
==============================================


=========== Changelog from 1.1 b12 ===========
2010-09-13:
- new pl_pcap library
- plugman: usage of unregistered streampack name now causes bind error
- pl_ppp:pppstack: now adds loopback route to allow packets to local address of
  a PPP interface
- major internal restructurization. Now PPP protocols are not passed to plugins
  chain. As result pl_ppp:ccp is not supported and removed from distribution.
  Its functionality will be added directly to PPP wrapper plugins sometime in
  future.
- several executables are renamed to exclude obsolete "ppp" from their names
- new pl_flt:mss plugin

2009-10-19:
- migrated to OpenWatcom 1.8
- pppoe: special handling in client if service name is empty. Any responding
  server is accepted in this case
- added new pl_null plugin library. pl_ppp:pppoe.other now directed to
  pl_null:term by default to avoid nasty 202 errors
- memory allocations are completely rewritten to make heap analysis possible.
  Testers which still experience memory leaks are encouraged to send bugreports
- pl_alias: links are now wiped out more aggressively to avoid excessive memory
  usage
- linked with the new openssl to avoid crashes on SMP systems
- shaper library is renamed to pl_shape and is documented in the Plugin Reference

2008-03-05:
- pl_lan: improved recovery on internal errors in fastmode
- pl_ppp: default route management fix
- pl_flt: icmptypes option documented. Related minor buffer overflow fixed
- pl_ppp: pptp.serverhost property is changed to pptp.serverhosts and allows
  several hosts separated by spaces
- pl_ppp: reply to PPtP echo request from PAC side is now supported

2007-11-25:
- pl_lan:Adapter: sending of existing local address is fixed. NAT works now
- doc: FAQ is cleaned up and updated
- pl_ppp: algorithm name is added to all CHAP algorithm logging
- pmppp: License page is removed
- pl_alias: incoming UDP checksum fixed

2007-08-02:
- pmppp: PPtP page added
- pmppp: traffic graph fixed. Note for config file writers: to show pppstack
  plugin in this graph it have to be in section [stackside]

2007-07-27:
- pppoe: was completely broken. Works now
- pla_XXX DLLs loading fixed

2007-07-17:
- new pl_ovpn plugin. Many internal changes to make its working possible
- pl_lan:Adapter: "lan.num" and "lan.drop" parameters are added to configuration
- pl_lan:Adapter: accepting of large packets (up to 65500 bytes) from the
  framework despite of interface MTU value
- pl_lan:Adapter: generation of randomized MAC address if it is not set for
  sfmac by MPTS
- sfcon: fixed to not fail with SYS3171
- sfmac: changed start name of subsequent instances from SFMAC1$ to SFMAC2$
  to be compatible with mpts
- sfmac: changed NIF type to NDIS to allow multiple instances
- both drivers: renamed from Firewall to Links

2006-12-22:
- PM dialer is included to the build. This was the last piece of missed 1.1
  functionality

2006-12-02:
- invalid detection of LAN adapter IP address fixed

2006-11-27:
- LAN support is added based on the latest drivers from sff

2006-10-11:
- new PPtP plugin (thanks to Vit Timchishin)
- MSCHAPv2 implemented
- engine is recompiled by Watcom C 1.5
- requires TCP/IP at least 4.1
- LAN support is not ready and not available
- PM dialer is not ready and not available
==============================================

Refer to \doc\eng\index.html for more information.
