aboutsummaryrefslogtreecommitdiff
path: root/sys/contrib/ipfilter/netinet/ip_state.c
Commit message (Collapse)AuthorAgeFilesLines
* 2020447 IPFilter's NAT can undo name server random port selectionDarren Reed2008-07-241-2/+16
| | | | | | | | | Approved by: darrenr MFC after: 1 week Security: CERT VU#521769 Notes: svn path=/head/; revision=180778
* Apply a few changes from ipfilter-current:Darren Reed2007-10-301-1/+6
| | | | | | | | | | | * Do not hold any locks over calls to copyin/copyout. * Clean up some #ifdefs * fix a possible mbuf leak when NAT fails on policy routed packets PR: 117216 Notes: svn path=/head/; revision=173181
* Pullup IPFilter 4.1.28 from the vendor branch into HEAD.Darren Reed2007-10-181-64/+108
| | | | | | | MFC after: 7 days Notes: svn path=/head/; revision=172776
* Merge IPFilter 4.1.23 back to HEADDarren Reed2007-06-041-230/+503
| | | | | | | See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13 Notes: svn path=/head/; revision=170268
* TCP Window scaling was being recognised but the recorded settings were beingDarren Reed2006-12-241-19/+7
| | | | | | | | | clobbered and thus effectively disabled. MFC after: 7 days Notes: svn path=/head/; revision=165515
* Resolve conflictsGuido van Rooij2006-08-161-48/+72
| | | | | | | MFC after: 2 weeks Notes: svn path=/head/; revision=161356
* Resolve conflictsGuido van Rooij2005-12-301-93/+161
| | | | Notes: svn path=/head/; revision=153876
* Merge the changes from 3.4.35 to 4.1.8 into the kernel source treeDarren Reed2005-04-251-1181/+2673
| | | | Notes: svn path=/head/; revision=145522
* Enable fine grained locking within IPFilter, using mtx(9) and sx(9) allowingDarren Reed2004-12-241-1/+1
| | | | | | | the the "needs giant" flag to be removed from the driver. Notes: svn path=/head/; revision=139255
* Update ipfilter from 3.4.31 -> 3.4.35. Some important changes:Darren Reed2004-06-211-51/+83
| | | | | | | | | | | | | | | | | | * block packets that fail to create state table entries * only allow non-fragmented packets to influence whether or not a logged packet is the same as the one logged before. * correct the ICMP packet checksum fixing up when processing ICMP errors for NAT * implement a maximum for the number of entries in the NAT table (NAT_TABLE_MAX and ipf_nattable_max) * frsynclist() wasn't paying attention to all the places where interface names are, like it should. * fix comparing ICMP packets with established TCP state where only 8 bytes of header are returned in the ICMP error. MFC after: 1 week Notes: svn path=/head/; revision=130886
* Explicitly declare 'int' parameters.David E. O'Brien2003-04-211-0/+1
| | | | Notes: svn path=/head/; revision=113799
* fix bug in updating of interface pointers when resyncing stateDarren Reed2003-02-151-6/+30
| | | | Notes: svn path=/head/; revision=110921
* Commit import changed from vendor branch of ipfilter to -current headDarren Reed2003-02-151-15/+32
| | | | Notes: svn path=/head/; revision=110916
* Finally merge in the changes from ipfilter 3.4.29 to freebsd-current.Darren Reed2002-08-281-5/+9
| | | | | | | Main changes here are related to the ftp proxy and making that work better. Notes: svn path=/head/; revision=102520
* Commit changes that happened in IPFilter versions 3.4.27 - 3.4.28Darren Reed2002-06-071-6/+11
| | | | Notes: svn path=/head/; revision=98004
* Merge updates from 3.4.26 - 3.4.27.Darren Reed2002-04-271-30/+36
| | | | Notes: svn path=/head/; revision=95563
* bring in changes from 3.4.26.Darren Reed2002-04-251-59/+157
| | | | Notes: svn path=/head/; revision=95418
* fix conflicts (mostly damn rcs id's) generated by importDarren Reed2002-03-191-199/+408
| | | | Notes: svn path=/head/; revision=92685
* Backout inclusion of queue.h since rev 1.38 sys/file.h now has itAlfred Perlstein2002-01-141-3/+0
| | | | | | | included in the right order. Notes: svn path=/head/; revision=89336
* Include sys/_lock.h and sys/_mutex.h to reduce namespace pollution.Alfred Perlstein2002-01-131-0/+3
| | | | | | | Requested by: jhb Notes: svn path=/head/; revision=89316
* fix conflicts created by importDarren Reed2001-07-281-30/+43
| | | | Notes: svn path=/head/; revision=80482
* Move IPFilter into contrib.Jonathan Lemon2001-06-071-0/+1901
Notes: svn path=/head/; revision=77859