Allied Telesis Patch 86261-04 Switch User Manual


 
12 SHOW IGMPSNOOPING ROUTERADDRESS Patch Release Note
Patch 86261-04 for Software Release 2.6.1
C613-10386-00 REV D
The IP version of packets was not being checked, so an IPv4 packet could
match an IPv6 IPSec policy. This issue has been resolved.
The following two issues have been resolved:
Large CRL files were not decoded correctly.
The certificate database was not validated immediately after the CRL
file was updated.
TCP Keepalive packets for FTP sessions were passing through the firewall
during the TCP setup stage with TCP Setup Proxy enabled. Keepalive
packets include sequence numbers that have already been acknowledged.
Such packets now fail stateful inspections and are dropped by the FTP
application-level gateway.
An anycast address could not be assigned when the prefix for the anycast
address had previously been assigned on that interface. This issue has been
resolved.
The ADD FIREWALL POLICY RULE and SET FIREWALL POLICY RULE
commands no longer accept the GBLREMOTEIP parameter with standard
NAT, or enhanced NAT for a private interface.
IPv6 used the same SA soft expiry timer at both ends of a link, which used
memory unnecessarily. This issue has been resolved.
When equal cost multipath routes were used, the IP option field for trace
route was not applied correctly. This issue has been resolved.
The IP filter blocked ping packets when the ACTION for these was set to
INCLUDE with the ADD IP FILTER command. This issue was caused by
the default SMASK value of 255.255.255.255, which blocked all incoming
packets. This issue has been resolved.
The SMTP proxy did not correctly filter sessions where messages were
fragmented. This had the potential to prevent the detection of third-party
relay attacks. This issue has been resolved.
Route flapping occurred if an interface went down and there was another
route to that interface’s next hop. This issue has been resolved.
PCR: 03937 Module: IPSEC Level: 2
PCR: 03940 Module: PKI Level: 1
PCR: 03941 Module: FIREWALL Level: 2
PCR: 03954 Module: IPV6 Level: 2
PCR: 03958 Module: FIREWALL Level: 2
PCR: 03965 Module: IPSEC Level: 3
PCR: 03973 Module: IPG Level: 3
PCR: 03974 Module: IPG Level: 3
PCR: 03982 Module: FIREWALL Level: 3
PCR: 03986 Module: BGP, IPG Level: 2