src-test2/sys/contrib, branch releng/6.3

MFC:

2007-12-01T00:53:41Z

Fix 3 issues relating to the use of "auth" rules in IPFilter, from sourceforge: 1837014 Kernel panics after authentication of an outgoing packet 1836992 Potential bugs in packet auth code (w/patches) 1836967 Kernel panic when using auth rule with keep state and another reported only to FreeBSD by Andiry (see PR) PR: kern/118251 Submitted by: Andriy Syrovenko Reviewed by: darrenr Approved by: re

restrict the tcp.finwait timeout (45s) to state combinations where we have seen a FIN from both sides (whether ACKed or not) and use tcp.closing (900s) for half closed connections. otherwise half closed connections will time out within 45s.

2007-11-21T06:25:59Z

PR: kern/11854 Submitted by: Jan Srzednicki Approved by: re@ (kensmith@) Obtained from: OpenBSD (r1.494)

MFC IPFilter update from 4.1.13 to 4.1.28, including additional fixes applied

2007-11-18T11:03:29Z

post 4.1.28 for FreeBSD. See src/contrib/ipfilter/HISTORY for more details of the bugs fixed, etc.

This commit was manufactured by cvs2svn to create branch 'RELENG_6'.

2007-11-10T10:21:30Z

Fix kernel memory leakage when policy routing is used with NAT.

2007-10-27T16:54:25Z

(Already fixed in -HEAD) PR: kern/100098 Submitted by: Daniel Larsson Reviewed by: darrenr Approved by: darrenr Obtained from: Daniel Larsson

MFC: r1.46

2007-08-23T09:38:14Z

MFV:

2007-07-28T22:32:57Z

the TCP SACK option needs sequence number modulation Reported & tested by: Jordan Gordeev Obtained from: Krzysztof Pfaff via. OpenBSD

MFC, rev 1.18:

2007-07-10T10:27:12Z

Fix hardware checksum verification on fragments. Reported/tested by: Hugo Koji Kobayashi, Vadym Chepkov Reviewed/help by: yongari

MFC: v0.9.20.3 hal

2007-01-27T07:07:32Z

MFC: Change the life cycle of bpf interface objects to close attach/detach

2007-01-19T23:01:34Z

races with bpf(4). This includes shims to preserve the ABI for any old modules. For more details see the commit log for 1.166 of sys/net/bpf.c.