src-test2/sys/contrib/ipfilter, branch releng/6.3

MFC:

2007-12-01T00:53:41Z

Fix 3 issues relating to the use of "auth" rules in IPFilter, from sourceforge: 1837014 Kernel panics after authentication of an outgoing packet 1836992 Potential bugs in packet auth code (w/patches) 1836967 Kernel panic when using auth rule with keep state and another reported only to FreeBSD by Andiry (see PR) PR: kern/118251 Submitted by: Andriy Syrovenko Reviewed by: darrenr Approved by: re

MFC IPFilter update from 4.1.13 to 4.1.28, including additional fixes applied

2007-11-18T11:03:29Z

post 4.1.28 for FreeBSD. See src/contrib/ipfilter/HISTORY for more details of the bugs fixed, etc.

Fix kernel memory leakage when policy routing is used with NAT.

2007-10-27T16:54:25Z

(Already fixed in -HEAD) PR: kern/100098 Submitted by: Daniel Larsson Reviewed by: darrenr Approved by: darrenr Obtained from: Daniel Larsson

MFC rev. 1.5

2006-10-26T11:22:04Z

Workaround bad locking design: do not try to lock/unlock destroyed/non-existing mutex. PR: kern/103569 Reviewed by: guido Silence from: darrenr Approved by: re (hrs)

MFC: ipfilter 4.1.13

2006-08-24T07:37:12Z

Fix some minor problems before release:

2005-06-23T14:19:02Z

(1) "ipf -T" is broken for fetching single entries and (2) loading rules with numbered collections does not order insertion right. (3) stats aren't accumulated for hash table memory failures Approved by: re (dwhite)

locking on exit of reading from ip_sync is not correct for all instances

2005-06-14T09:18:26Z

Approved by: re (dwhite)

Enable building /sbin/ipf (but not the rescue version) with the ability to

2005-05-16T16:22:55Z

parse bpf strings for filter rules in ipf.conf

Enable IPFilter to correctly determine if BPF has been optioned into the

2005-05-15T03:34:17Z

kernel it is being compiled against and subsequently enable using BPF for packet matching in ipf rules.

Fix the following warnings on amd64:

2005-04-29T05:57:17Z

/usr/src/sbin/ipf/ipftest/../../../sys/contrib/ipfilter/netinet/ip_frag.c: In function `fr_ipid_newfrag': /usr/src/sbin/ipf/ipftest/../../../sys/contrib/ipfilter/netinet/ip_frag.c:397: warning: cast to pointer from integer of different size /usr/src/sbin/ipf/ipftest/../../../sys/contrib/ipfilter/netinet/ip_frag.c: In function `fr_ipid_knownfrag': /usr/src/sbin/ipf/ipftest/../../../sys/contrib/ipfilter/netinet/ip_frag.c:582: warning: cast from pointer to integer of different size