| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Don't use an apostrophe in a possesive pronoun.
|
|
|
|
| |
Improve the wording of a comment describing why EAGAIN is the error code.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Keep state incorrectly assumes keep frags. This is counter to the
ipfilter man pages. This also currently restricts keep frags to only when
keep state is used, which is redundant because keep state currently
assumes keep frags. This commit fixes this.
To the user this change means that to maintain the current behaviour
one must add keep frags to any ipfilter keep state rule (as documented
in the man pages).
This patch also allows the flexability to specify and use keep frags
separate from keep state, as documented in an example in ipf.conf.5,
instead of the currently broken behaviour.
MFC suggested by: rgrimes
Relnotes: yes
|
|
|
|
| |
Obtained from: ipfilter cvs repo r1.48.2.25, r1.72 and NetBSD repo r1.4
|
|
|
|
| |
Obtained from: ipfilter cvs repo r1.48.2.25
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix mutex errors, fixup typos in comments.
Obtained from: NetBSD r1.4.
-This lie, anr those below, will be ignored--
> Description of fields to fill in above: 76 columns --|
> PR: If a GNATS PR is affected by the change.
> Submitted by: If someone else sent in the change.
> Reviewed by: If someone else reviewed your modification.
> Approved by: If you needed approval for this commit.
> Obtained from: If the change is from a third party.
> MFC after: N [day[s]|week[s]|month[s]]. Request a reminder email.
> MFH: Ports tree branch name. Request approval for merge.
> Relnotes: Set to 'yes' for mention in release notes.
> Security: Vulnerability reference (one per line) or description.
> Sponsored by: If the change was sponsored by an organization.
> Differential Revision: https://reviews.freebsd.org/D### (*full* phabric URL needed).
> Empty fields above will be automatically removed.
_M .
M sys/contrib/ipfilter/netinet/ip_state.c
|
|\
| |
| |
| |
| | |
Approved by: glebius (mentor)
BSD Licensed by: Darren Reed <darrenr@reed.wattle.id.au> (author)
|
| |
| |
| |
| |
| |
| |
| |
| | |
import of new ipfilter vendor sources by flattening them.
To keep the tags consistent with dist, the tags are also flattened.
Approved by: glebius (Mentor)
|
| | |
|
| |
| |
| |
| | |
See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
Include the licence file for both IPFilter and the H.323 proxy (from QNX),
for convienence.
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
Approved by: darrenr
MFC after: 1 week
Security: CERT VU#521769
|
| |
| |
| |
| |
| |
| |
| |
| | |
* Do not hold any locks over calls to copyin/copyout.
* Clean up some #ifdefs
* fix a possible mbuf leak when NAT fails on policy routed packets
PR: 117216
|
| |
| |
| |
| | |
MFC after: 7 days
|
| |
| |
| |
| | |
See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13
|
| |
| |
| |
| |
| |
| | |
clobbered and thus effectively disabled.
MFC after: 7 days
|
| |
| |
| |
| | |
MFC after: 2 weeks
|
| | |
|
| | |
|
| |
| |
| |
| | |
the the "needs giant" flag to be removed from the driver.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* block packets that fail to create state table entries
* only allow non-fragmented packets to influence whether or not a logged
packet is the same as the one logged before.
* correct the ICMP packet checksum fixing up when processing ICMP errors for NAT
* implement a maximum for the number of entries in the NAT table (NAT_TABLE_MAX
and ipf_nattable_max)
* frsynclist() wasn't paying attention to all the places where interface
names are, like it should.
* fix comparing ICMP packets with established TCP state where only 8 bytes
of header are returned in the ICMP error.
MFC after: 1 week
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
Main changes here are related to the ftp proxy and making that work better.
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
included in the right order.
|
| |
| |
| |
| | |
Requested by: jhb
|
| | |
|
| | |
|