272461 |
03-Oct-2014 |
gjb |
Copy stable/10@r272459 to releng/10.1 as part of the 10.1-RELEASE process.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
268937 |
21-Jul-2014 |
cy |
MFC r268532 and r268585. When world and kernel are built without INET6 support, the userland was still built with INET6 turned on.
PR: 190964 Approved by: glebius (mentor, implicit)
|
268563 |
12-Jul-2014 |
cy |
MFC r268286: Fix compile-time errors when NO_WERROR and WITHOUT_INET6_SUPPORT (NO_INET6) are specified.
Approved by: glebius (mentor)
|
259073 |
07-Dec-2013 |
peter |
Hoist all the mergeinfo up to the root in preparation for enforcing merges to the root only. All MFC's were rerecorded to the root.
Going forward, if an MFC includes mergeinfo, it will need to be made to the root and committed from the root. Merges with --ignore-ancestry or diff | patch can go anywhere.
The mergeinfo in HEAD is in a bad state from years of neglect and manual tampering and this was branched into 10.x. This confuses the coalescing code and prevents it from doing its job.
Approved by: re (gjb, implicit)
|
256281 |
10-Oct-2013 |
gjb |
Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
255762 |
21-Sep-2013 |
cy |
Remove redundant files.
Approved by: glebius (mentor) Approved by: re (blanket)
|
255761 |
21-Sep-2013 |
cy |
Check return code from inet_pton.
Discovered by: Coverity. Approved by: glebius (mentor) Approved by: re (blanket)
|
255332 |
06-Sep-2013 |
cy |
Update ipfilter 4.1.28 --> 5.1.2.
Approved by: glebius (mentor) BSD Licensed by: Darren Reed <darrenr@reed.wattle.id.au> (author)
|
253482 |
20-Jul-2013 |
cy |
As per the developers handbook (5.3.1 step 1), bootstrap svn:mergeinfo on the ipfilter directories in the main tree to the last commit made to the ipfilter trees in the vendor branches (r253468) which flattened the ipfilter vendor trees.
Now that this step is complete, we are free to import new sources into the ipfilter vendor trees.
Approved by: glebius (Mentor)
|
246143 |
31-Jan-2013 |
glebius |
Retire struct sockaddr_inarp.
Since ARP and routing are separated, "proxy only" entries don't have any meaning, thus we don't need additional field in sockaddr to pass SIN_PROXY flag.
New kernel is binary compatible with old tools, since sizes of sockaddr_inarp and sockaddr_in match, and sa_family are filled with same value.
The structure declaration is left for compatibility with third party software, but in tree code no longer use it.
Reviewed by: ru, andre, net@
|
245952 |
26-Jan-2013 |
pfg |
Clean some 'svn:executable' properties in the tree.
Submitted by: Christoph Mallon MFC after: 3 days
|
215463 |
18-Nov-2010 |
markm |
Fix paths for example files.
|
214535 |
29-Oct-2010 |
rpaulo |
Use pcap's bpf header, not our own copy of it.
|
207945 |
12-May-2010 |
brueffer |
Comment in the BUGS section header. Matches what's in ipfilter 5.10.
PR: 144880 Submitted by: Glen Barber <glen.j.barber@gmail.com> MFC after: 1 week
|
204925 |
09-Mar-2010 |
ed |
Remove unneeded include of <sys/timeb.h>.
This header file should not be included by anything.
|
199510 |
19-Nov-2009 |
darrenr |
fix spelling mistake
|
194290 |
16-Jun-2009 |
rdivacky |
Fix a typo that causes the for loop to exit immediately. There's identical loop a few lines above.
Reviewed by: sam Approved by: ed (mentor) Silence from: darrenr (maintainer)
|
193043 |
29-May-2009 |
stas |
- Prevent buffer overflow in IPFilter's load_http function used to load ipfilter tables via http by the user-level ippool utility. Previously the 1024-byte buffer used to store a http request coudld easily overflow if the length of the hostname part of the url passes exceeded 496 bytes. [1] - Use snprintf to prevent possieble buffer overflows in future. [2] - Do not try to close the descriptor twice on failure. [2]
Reported by: Maksymilian Arciemowicz <cxib@securityreason.com> [1] Obtained from: NetBSD CVS [2] MFC after: 2 weeks
|
191490 |
25-Apr-2009 |
bz |
Remove udp and tcp includes not needed here.
Tripped over by: a compile of an upcoming change MFC after: 1 month
|
186119 |
15-Dec-2008 |
qingli |
This main goals of this project are: 1. separating L2 tables (ARP, NDP) from the L3 routing tables 2. removing as much locking dependencies among these layers as possible to allow for some parallelism in the search operations 3. simplify the logic in the routing code,
The most notable end result is the obsolescent of the route cloning (RTF_CLONING) concept, which translated into code reduction in both IPv4 ARP and IPv6 NDP related modules, and size reduction in struct rtentry{}. The change in design obsoletes the semantics of RTF_CLONING, RTF_WASCLONE and RTF_LLINFO routing flags. The userland applications such as "arp" and "ndp" have been modified to reflect those changes. The output from "netstat -r" shows only the routing entries.
Quite a few developers have contributed to this project in the past: Glebius Smirnoff, Luigi Rizzo, Alessandro Cerri, and Andre Oppermann. And most recently:
- Kip Macy revised the locking code completely, thus completing the last piece of the puzzle, Kip has also been conducting active functional testing - Sam Leffler has helped me improving/refactoring the code, and provided valuable reviews - Julian Elischer setup the perforce tree for me and has helped me maintaining that branch before the svn conversion
|
181313 |
04-Aug-2008 |
mlaier |
Fix build when WITHOUT_DYNAMICROOT is specified in src.conf(5).
|
180778 |
24-Jul-2008 |
darrenr |
2020447 IPFilter's NAT can undo name server random port selection
Approved by: darrenr MFC after: 1 week Security: CERT VU#521769
|
180761 |
23-Jul-2008 |
des |
For unfathomable reasons, ipfilter abuses kernel data structures for its own purposes. To pull this off, it defines _KERNEL before including the headers where these structures are defined. This leads to no end of trouble when some of these headers, or other headers that they include, change, as demonstrated by r180755.
The quick fix in this particular case is to define _WANT_FILE instead of _KERNEL, conditional on __FreeBSD__. A better long-term fix is left as an exercise to the reader.
|
172776 |
18-Oct-2007 |
darrenr |
Pullup IPFilter 4.1.28 from the vendor branch into HEAD.
MFC after: 7 days
|
172772 |
18-Oct-2007 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r172771, which included commits to RCS files with non-trunk default branches.
|
171017 |
24-Jun-2007 |
darrenr |
ipfstat should parse "any" when used with -D/-S command line options
PR: bin/113879 Submitted by: kabe@sra-tohoku.co.jp Reviewed by: darrenr Approved by: re
|
170269 |
04-Jun-2007 |
darrenr |
Remove files no longer required to build IPFilter
|
170268 |
04-Jun-2007 |
darrenr |
Merge IPFilter 4.1.23 back to HEAD See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13
|
170264 |
04-Jun-2007 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r170263, which included commits to RCS files with non-trunk default branches.
|
161357 |
16-Aug-2006 |
guido |
Resolve conflicts
MFC after: 1 weeks
|
161352 |
16-Aug-2006 |
guido |
This commit was generated by cvs2svn to compensate for changes in r161351, which included commits to RCS files with non-trunk default branches.
|
157836 |
18-Apr-2006 |
darrenr |
fix "ipf -Z" reporting rubbish and possibly panic'ing box
MFC after: 4 days
|
156061 |
27-Feb-2006 |
darrenr |
Add a man page for mkfilters(1) and put the corrected perl script in the ipfilter usr/share directory
PR: docs/26879
|
153881 |
30-Dec-2005 |
guido |
Resolve conflicts (and believe me...you don't want to know).
|
153878 |
30-Dec-2005 |
guido |
This commit was generated by cvs2svn to compensate for changes in r153877, which included commits to RCS files with non-trunk default branches.
|
147548 |
23-Jun-2005 |
darrenr |
Remove these files from src/contrib/ipfilter as they are already present in src/sys/contrib/ipfilter/netinet. Makefile's reachover bits find what they need so building is unaffected.
Approved by: re (dwhite)
|
147547 |
23-Jun-2005 |
darrenr |
Fix some minor problems before release: (1) "ipf -T" is broken for fetching single entries and (2) loading rules with numbered collections does not order insertion right. (3) stats aren't accumulated for hash table memory failures
Approved by: re (dwhite)
|
146669 |
27-May-2005 |
eivind |
Since this is already off the vendor branch: Our kernel is now in /boot/kernel/kernel, not plain /kernel
|
146590 |
24-May-2005 |
cognet |
arm defaults to unsigned char as well.
|
146277 |
16-May-2005 |
darrenr |
Enable building /sbin/ipf (but not the rescue version) with the ability to parse bpf strings for filter rules in ipf.conf
|
145989 |
08-May-2005 |
grehan |
Fix tinderbox build on ppc.
Requested by: mlaier
|
145640 |
28-Apr-2005 |
darrenr |
Don't use quad_t on FreeBSD (deprecated) so use "long long" instead. Someday this should be converted to uint64_t and printstate.c changed to use those horrid PRiud64 things.
|
145630 |
28-Apr-2005 |
darrenr |
Patches from Ruslam Ermilov to remove NetBSD bits from Makefiles and cleanup build problems with rescue.
|
145554 |
26-Apr-2005 |
darrenr |
Fix include directives that were missing the netinet include directory, where the ipl.h file is found. Also add back in ip_fil.c, which somehow went missing in action.
|
145547 |
26-Apr-2005 |
darrenr |
Fix problems with building libipf: ipf_dontuning.c - change the include to look in netinet for ipl.h ipft_tx.c - make the private use of arrays with tcp flags info in them more not use names that can be "confusing"
|
145529 |
25-Apr-2005 |
darrenr |
this file does not belong in a freebsd distribution
|
145519 |
25-Apr-2005 |
darrenr |
* Someone imported a lot of files with the wrong CVS tag, so lots of files need that fixed in them.... * Keep unnecessary files out of the non-vendor part of this CVS repository.
|
145514 |
25-Apr-2005 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r145513, which included commits to RCS files with non-trunk default branches.
|
145511 |
25-Apr-2005 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r145510, which included commits to RCS files with non-trunk default branches.
|
130890 |
21-Jun-2004 |
darrenr |
Committ changes from 3.4.31 -> 3.4.35 * fix bug parsing port comparisons in proxy rules * make parsing errors in ipf/ipnat return an error rather than return indicating success. * make parsing errors in ipf/ipnat return an error rather than return indicating success. * make ipfstat work as a set{g,u}id thing - gave up privs before opening /dev/ipl * fix ipfstat -A * make "ipfstat -f" output more informative * various changes to ipsend for sending packets with ipv4 options * ipmon was not correctly calculating the length of the IPv6 packet (excluded ipv6 header length)
MFC: 1 week
|
130888 |
21-Jun-2004 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r130887, which included commits to RCS files with non-trunk default branches.
|
124074 |
02-Jan-2004 |
guido |
if_name and if_unit renaming to if_xname should be dealth with in ipmon as well.
|
123110 |
02-Dec-2003 |
brooks |
This commit was generated by cvs2svn to compensate for changes in r123109, which included commits to RCS files with non-trunk default branches.
|
113139 |
05-Apr-2003 |
darrenr |
update man page to reflect change in default syslog level ipmon is now compiled with
|
113109 |
05-Apr-2003 |
darrenr |
Change the default syslog facility from LOG_LOCAL0 to LOG_SECURITY after discussion on security@freebsd.org.
|
110920 |
15-Feb-2003 |
darrenr |
bring changes in IPFilter to 3.4.31 on to the head
|
110918 |
15-Feb-2003 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r110917, which included commits to RCS files with non-trunk default branches.
|
109153 |
13-Jan-2003 |
dillon |
Bow to the whining masses and change a union back into void *. Retain removal of unnecessary casts and throw in some minor cleanups to see if anyone complains, just for the hell of it.
|
109123 |
12-Jan-2003 |
dillon |
Change struct file f_data to un_data, a union of the correct struct pointer types, and remove a huge number of casts from code using it.
Change struct xfile xf_data to xun_data (ABI is still compatible).
If we need to add a #define for f_data and xf_data we can, but I don't think it will be necessary. There are no operational changes in this commit.
|
102524 |
28-Aug-2002 |
darrenr |
merge the changes from 3.4.29 that didn't go cleanly due to conflicts
|
102522 |
28-Aug-2002 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r102521, which included commits to RCS files with non-trunk default branches.
|
98011 |
07-Jun-2002 |
darrenr |
Commit changes that happened in IPFilter versions 3.4.27 - 3.4.28
|
98009 |
07-Jun-2002 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r98008, which included commits to RCS files with non-trunk default branches.
|
98006 |
07-Jun-2002 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r98005, which included commits to RCS files with non-trunk default branches.
|
95568 |
27-Apr-2002 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r95567, which included commits to RCS files with non-trunk default branches.
|
95566 |
27-Apr-2002 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r95565, which included commits to RCS files with non-trunk default branches.
|
95424 |
25-Apr-2002 |
darrenr |
resolve conflicts from import
|
95422 |
25-Apr-2002 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r95421, which included commits to RCS files with non-trunk default branches.
|
95420 |
25-Apr-2002 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r95419, which included commits to RCS files with non-trunk default branches.
|
93225 |
26-Mar-2002 |
ru |
Removed (new in 3.4.25 import) duplicate copies of files already present in sys/contrib/ipfilter.
|
92704 |
19-Mar-2002 |
darrenr |
For this regression test to pass, you must run ipmon in the Australia/Victoria (EST-10) timezone to generate the correct timestamps in output.
|
92702 |
19-Mar-2002 |
darrenr |
remove because of licence reasons
|
92691 |
19-Mar-2002 |
darrenr |
fix conflicts generated by import, completing import of ipf3.4.25
|
92689 |
19-Mar-2002 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r92688, which included commits to RCS files with non-trunk default branches.
|
92687 |
19-Mar-2002 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r92686, which included commits to RCS files with non-trunk default branches.
|
89338 |
14-Jan-2002 |
alfred |
Backout inclusion of sys/queue.h
|
89331 |
14-Jan-2002 |
alfred |
add queue.h, now needed for file.h
|
84843 |
12-Oct-2001 |
bde |
Fixed corruption of the vendor $Id$ to $FreeBSD$. Put $FreeBSD$ in __FBSDID() and ifdefed away all vendor id stuff.
This file should never have left the vendor branch; it is now identical with the vendor's version except for id fiddling.
|
84768 |
10-Oct-2001 |
bde |
Compensate for "Compensate for header dethreading" by backing it out.
|
80490 |
28-Jul-2001 |
darrenr |
fix conflicts created by import
|
80487 |
28-Jul-2001 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r80486, which included commits to RCS files with non-trunk default branches.
|
80485 |
28-Jul-2001 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r80484, which included commits to RCS files with non-trunk default branches.
|
78415 |
18-Jun-2001 |
ru |
Removed duplicate copies of files already present in sys/contrib/ipfilter.
Not objected to by: -arch
|
76170 |
01-May-2001 |
markm |
Compensate for dethreaded headers. (I have no religion about how this was done. Follow-up commits welcome)
|
72006 |
04-Feb-2001 |
darrenr |
fix conflicts
|
72004 |
04-Feb-2001 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r72003, which included commits to RCS files with non-trunk default branches.
|
70033 |
14-Dec-2000 |
alfred |
Adapt to new struct kinfo_proc and unbreak world. Apologies to: darrenr who is maintainer
|
67858 |
29-Oct-2000 |
darrenr |
fix conflicts created by import
|
67856 |
29-Oct-2000 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r67855, which included commits to RCS files with non-trunk default branches.
|
67618 |
26-Oct-2000 |
darrenr |
fix conflicts from rcsids
|
67616 |
26-Oct-2000 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r67615, which included commits to RCS files with non-trunk default branches.
|
64591 |
13-Aug-2000 |
darrenr |
resolve conflicts
|
64589 |
13-Aug-2000 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r64588, which included commits to RCS files with non-trunk default branches.
|
63564 |
19-Jul-2000 |
darrenr |
actually commit merged diffs to the trunk
|
63537 |
19-Jul-2000 |
archie |
Fix breakage caused by ether_aton() prototype change.
PR: bin/20033
|
63520 |
19-Jul-2000 |
darrenr |
fix conflicts
|
63517 |
19-Jul-2000 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r63516, which included commits to RCS files with non-trunk default branches.
|
60944 |
26-May-2000 |
darrenr |
define CSUM_DELAY_DATA to match merge
|
60925 |
25-May-2000 |
darrenr |
fix up #ifdef jungle for FreeBSD
|
60923 |
25-May-2000 |
darrenr |
remove duplicate prototypes
|
60845 |
24-May-2000 |
darrenr |
fix conflicts
|
60842 |
24-May-2000 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r60841, which included commits to RCS files with non-trunk default branches.
|
57110 |
10-Feb-2000 |
peter |
Remove files not in the v3_3_8 import.
|
57109 |
10-Feb-2000 |
peter |
Not in this commit: Many spammed deltas have been removed to restore back to the vendor branch.
Re-merge changes from the vendor branch.
Undo the local spammed changes that I could find. There are probably more local fixes that were clobbered that I've missed.
|
57094 |
09-Feb-2000 |
guido |
This commit was generated by cvs2svn to compensate for changes in r57093, which included commits to RCS files with non-trunk default branches.
|
55925 |
13-Jan-2000 |
guido |
This commit was generated by cvs2svn to compensate for changes in r55924, which included commits to RCS files with non-trunk default branches.
|
53025 |
08-Nov-1999 |
guido |
This commit was generated by cvs2svn to compensate for changes in r53024, which included commits to RCS files with non-trunk default branches.
|
45557 |
10-Apr-1999 |
nik |
ipfstat is now in section 8 of the manual.
PR: 7791 Submitted by: Stefan Eggers <seggers@semyam.dinoco.de>
|
42156 |
30-Dec-1998 |
billf |
remove non-existant references, correct spelling errors.
PR: docs/7963, docs/7790 Submitted by: Stefan Eggers seggers@semyam.dinoco.de Norihiro Kumagai kuma@jp.freebsd.org
|
42140 |
29-Dec-1998 |
billf |
Remove bogus reference to mkfilters(1)
PR: docs/7790 Submitted by: Stefan Eggers seggers@semyam.dinoco.de
|
41640 |
10-Dec-1998 |
steve |
Comment out empty "BUGS" section.
PR: 8121 Submitted by: Norihiro Kumagai <kuma@jp.freebsd.org>
|
41639 |
10-Dec-1998 |
steve |
Remove duplicate entries for -N and -S commandline switches.
PR: 8120 Submitted by: Horihiro Kumagaio <kuma@jp.freebsd.org>
|
41634 |
10-Dec-1998 |
steve |
Typo fix: "whether on not" -> "whether or not".
PR: 8102 Submitted by: Kazuo Horikawa <horikawa@jp.freebsd.org>
|
41197 |
16-Nov-1998 |
nectar |
vmunix -> kernel PR: port/8543 Submitted by: jkb@best.com
|
40494 |
17-Oct-1998 |
bde |
Fixed the type of a signal handler.
|
37078 |
20-Jun-1998 |
peter |
Merge 3.2.3 -> 3.2.7 changes into mainline.
|
37075 |
20-Jun-1998 |
peter |
This commit was generated by cvs2svn to compensate for changes in r37074, which included commits to RCS files with non-trunk default branches.
|
36753 |
08-Jun-1998 |
jkoshy |
Spelling fixes.
Submitted by: Josh Gilliam <josh@quick.net> PR: 6880
|
36649 |
04-Jun-1998 |
steve |
Fix a bunch of spelling errors.
PR: 6856 Submitted by: Josh Gilliam <josh@quick.net>
|
36601 |
03-Jun-1998 |
jkoshy |
Spelling corrections.
PR: 6829 Submitted by: Josh Gilliam <josh@quick.net>
|
34752 |
21-Mar-1998 |
peter |
Some tweaks to get this to compile for the userland tools.
|
34740 |
21-Mar-1998 |
peter |
This commit was generated by cvs2svn to compensate for changes in r34739, which included commits to RCS files with non-trunk default branches.
|
32030 |
27-Dec-1997 |
steve |
Remove one last /etc/sysconfig reference.
PR: 3460 Pointed out by: hoek@FreeBSD.org
|
31184 |
16-Nov-1997 |
peter |
This commit was generated by cvs2svn to compensate for changes in r31183, which included commits to RCS files with non-trunk default branches.
|
26122 |
25-May-1997 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r26121, which included commits to RCS files with non-trunk default branches.
|
26120 |
25-May-1997 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r26119, which included commits to RCS files with non-trunk default branches.
|
24584 |
03-Apr-1997 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r24583, which included commits to RCS files with non-trunk default branches.
|
23280 |
02-Mar-1997 |
peter |
This commit was generated by cvs2svn to compensate for changes in r23279, which included commits to RCS files with non-trunk default branches.
|
22515 |
09-Feb-1997 |
darrenr |
This commit was generated by cvs2svn to compensate for changes in r22514, which included commits to RCS files with non-trunk default branches.
|