Component: conntrack

7.19 Stable 2025-May-22 (8 months ago)

• improved stability on busy systems;

7.11 Stable 2023-Aug-15 (2 years ago)

• fixed "active-ipv4" property;

7.10 Stable 2023-Jun-15 (2 years ago)

• added read-only "active-ipv4" and "active-ipv6" fields to "/ip/firewall/connection/tracking" (CLI only);

7.8 Stable 2023-Feb-24 (2 years ago)

• improved system stability when changing connection tracking state;
• improved system stability when PPTP helper is used;

7.7 Stable 2023-Jan-12 (3 years ago)

• improved system stability when PPTP helper is used;
• improved system stability when processing SCTP connections on TILE;

7.3 Stable 2022-Jun-06 (3 years ago)

• limited full Connection Tracking warning to 1 message per minute;

7.2.2 Stable 2022-Apr-28 (3 years ago)

• limited full Connection Tracking warning to 1 message per minute;

7.2 Stable 2022-Mar-31 (3 years ago)

• properly detect helper status;

7.1.3 Stable 2022-Feb-11 (3 years ago)

• properly detect helper status;

6.49.1 Stable 2021-Nov-17 (4 years ago)

• limit total connection tracking table size based on installed RAM size;

6.49 Stable 2021-Oct-06 (4 years ago)

• increased total connection tracking table size based on installed RAM size;

6.48 Stable 2020-Dec-22 (5 years ago)

• automatically reduce connection tracking timeouts when table is full;

6.45.7 Stable 2019-Oct-24 (6 years ago)

• properly start manually enabled connection tracking;

6.45.6 Stable 2019-Sep-10 (6 years ago)

• improved system stability when using h323 helper (introduced in v6.45);

6.44.5 Long-term 2019-Jul-04 (6 years ago)

• fixed GRE protocol packet connection-state matching (CVE-2014-8160);

6.45.1 Stable 2019-Jun-27 (6 years ago)

• fixed GRE protocol packet connection-state matching (CVE-2014-8160);
• significant stability and performance improvements;

6.44.3 Stable 2019-Apr-23 (6 years ago)

• fixed "loose-tcp-tracking" parameter not taken in action (introduced in v6.44);

6.44 Stable 2019-Feb-25 (6 years ago)

• added new "loose-tcp-tracking" parameter (equivalent to "nf_conntrack_tcp_loose" in netfilter);

6.39.2 Stable 2017-Jun-01 (8 years ago)

• load IPv6 connection tracking independently from IPv4;

6.36.2 Stable 2016-Aug-22 (9 years ago)

• fixed ipv6 timeout display;
• fixed removing icmpv6 connections;