IP Sentinel

This version adds an "--action" option to execute a program when a disallowed ARP packet is detected. Sorting of IP addresses happens in an endian-neutral manner, and support for the old, deprecated logging format was physically removed from the source.

This version made it possible to block hosts with a certain MAC address regardless of their IP. This feature could help to isolate hosts infected by worms or viruses. The default options were changed.

Code cleanups are the main change in this version.
Compilation issues with dietlibc 0.26 were fixed,
and the tai64n format is now used for timestamps.

This release fixes the handling of MAC-annotated IPs when there exists a more general rule. It provides workarounds for gcc and dietlibc bugs also, and the behavior on duplicate networks with MAC-annotation is now predictable so that e.g. MAC pools for networks can be configured.

This version fixes a bug in the FROM-mode in
combination with 0.0.0.0 IPs, which are used by
DHCP or DAD. It is now permissible to specify MACs
of source-addresses, and to poison an intruders IP
when he has sent a request. In combination with
MAC-tagged IP addresses, the correct MAC can be
propagated when an intruder uses the IP of
temporarily turned off machines. Some other parts
of the code were made more RFC826 compliant.