

What's new in Version 0.6:
--------------------------

TCP window clamping and MSS clamping

	Maximum TCP window and TCP Maximum Segment Size Option values
	can be enforced.  Packets with either of these values too large
	are adjusted and their TCP checksum is updated.  The advantages 
	of these adjustments are explained in "infilt.doc".

Fragmentation works correctly.

	Version 0.5 did not understand fragmentation, and treated
	fragmented IP packets strangely, sometimes zapping packets.

	This has been fixed.  Strategy:  The first fragment (offset 0)
	will be subject to zapping, since it has the TCP or UDP port
	number in it.  Later fragments will pass through the filter;
	they will be impotent if their first fragment was dropped,
	because the entire packet cannot be reassembled.

Support for dynamically loaded kernel modules

	The -k option to "infilt.sh" allows infilt to be 
	dynamically loaded as part of the dp-2.3 driver.

	(Thanks to blymn@awadi.com.AU (Brett Lymn) for this option.)

Emergency Cutoff

	A variable "enable" can be set to 0 to cut off the package.

	(Thanks to blymn@awadi.com.AU (Brett Lymn) for this variable.)



