src-test2/sys/contrib/pf/net/pf_ioctl.c, branch release/7.1.0_cvs FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=release%2F7.1.0_cvs 2008-12-31T22:57:14Z Copy releng/7.1 to release/7.1.0 for the 7.1-RELEASE. 2008-12-31T22:57:14Z Ken Smith kensmith@FreeBSD.org 2008-12-31T22:57:14Z urn:sha1:8d4eb975d2e49f56d057a19aac09bcb92b3e71f7 Approved by: re (implicit) This commit was manufactured to restore the state of the 7.1-RELEASE image. Fix spellign error in comment 2008-07-24T19:05:32Z Julian Elischer julian@FreeBSD.org 2008-07-24T19:05:32Z urn:sha1:43494e6c94518ca7a75a366cf89005b82446c559 MFC a fix for corrected comparisons. 2008-07-24T15:11:43Z Julian Elischer julian@FreeBSD.org 2008-07-24T15:11:43Z urn:sha1:174cbff88a5ff92ce964d9bb1a7748da58b224d5 MFC change 179570 MFC an ABI compatible implementation of Multiple routing tables. 2008-07-24T01:13:22Z Julian Elischer julian@FreeBSD.org 2008-07-24T01:13:22Z urn:sha1:b6f21d05a2b9797c983c21e798d00ca80952db6d See the commit message for http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/net/route.c version 1.129 (svn change # 178888) for more info. Obtained from: Ironport (Cisco Systems) MFC: 2008-04-12T18:26:48Z Max Laier mlaier@FreeBSD.org 2008-04-12T18:26:48Z urn:sha1:30f806a841c6660f64a359a6f6e2dbb9ee72957a Make ALTQ cope with disappearing interfaces (particularly common with mpd and netgraph in gernal). This also allows to add queues for an interface that is not yet existing (you have to provide the bandwidth for the interface, however). PR: kern/106400, kern/117827 Tested by: Florian Smeets, Boris S. MFC pf.c 1.51, pf_ioctl.c 1.30 and pf_if.c 1.13-1.14: 2007-11-25T19:26:46Z Max Laier mlaier@FreeBSD.org 2007-11-25T19:26:46Z urn:sha1:780c3a1b31f1776b5b7190d9a6cfc2a76efd4243 Reloop OpenBSD rev. 1.563: In pf_test_fragment(), ignore protocol-specific criteria for packets of different protocols. Cleanup pf interface mangement - esp. remove EVENTHANDLER before unloading the coresponding code. This was lost during 4.1 import. Bring back pf_if.c revs 1.8 and 1.6 also lost during last import: - Use correct time for tzero when compiled in - Don't use bogus interface addresses on ptp-interfaces with :0 Approved by: re (kensmith) Commit resolved import of OpenBSD 4.1 pf from perforce. 2007-07-03T12:16:07Z Max Laier mlaier@FreeBSD.org 2007-07-03T12:16:07Z urn:sha1:c9a03d91addf1b2da4c7edcaacd286fe357d0b01 Approved by: re (kensmith) Clean up pfr_kentry_pl2 as well. This fixes a kernel panic in the vm.zone 2007-01-01T16:51:11Z Max Laier mlaier@FreeBSD.org 2007-01-01T16:51:11Z urn:sha1:191c6e1310eb0448bd696f1254379d93ae45871b sysctl after unloading pf. Submitted by: Earl Lapus MFC after: 3 days Fix stateful filtering of loopback IPv6 traffic to an address not configured 2006-09-06T17:19:45Z Max Laier mlaier@FreeBSD.org 2006-09-06T17:19:45Z urn:sha1:a7c4fe03a8b2506199024bc2e8312db729ee972d on lo0. While here fix a comment. PR: kern/102647 Reported by: Frank Steinborn Submitted by: suz (earlier version) MFC after: 3 days Import from OpenBSD 1.168, dhartmei: 2006-07-21T09:48:13Z Max Laier mlaier@FreeBSD.org 2006-07-21T09:48:13Z urn:sha1:cff1b3389b89c1426f49b32188ab44c5bdb7b2cd fix a bug in the input sanity check of DIOCCHANGERULE (not used by pfctl, but third-party tools). a rule must have a non-empty replacement address list when it's a translation rule but not an anchor call (i.e. "nat ... ->" needs a replacement address, but "nat-anchor ..." doesn't). the check confused "rule is an anchor call" with "rule is defined within an anchor". report from Michal Mertl, Max Laier. Obtained from: OpenBSD MFC after: 2 weeks