src/lib/libalias/alias_db.c, branch release/4.9.0_cvs

This commit was manufactured by cvs2svn to create tag

2003-10-27T07:57:33Z

'RELENG_4_9_0_RELEASE'. This commit was manufactured to restore the state of the 4.9-RELEASE image. Releases prior to 5.3-RELEASE are omitting the secure/ and crypto/ subdirs.

MFC: Made the PacketAliasSetAddress() function call optional,

2003-06-27T09:15:16Z

added the new API function PacketAliasRedirectDynamic().

MFC: Fix for PR 24048 (first FTP command was ignored).

2003-06-27T09:06:34Z

MFC: Whitespace and other non-functional changes for diff reduction.

2003-06-27T08:37:23Z

Bring ipfw2 into the -stable tree. This will give more people a

2002-07-24T03:21:24Z

chance to test it, and hopefully accelerate the transition from the old to the new ipfw code. NOTE: THIS COMMIT WILL NOT CHANGE THE FIREWALL YOU USE, NOR A SINGLE BIT IN YOUR KERNEL AND BINARIES. YOU WILL KEEP USING YOUR OLD "ipfw" UNLESS YOU: + add "options IPFW2" (undocumented) to your kernel config file; + compile and install sbin/ipfw and lib/libalias with make -DIPFW2 in other words, you must really want it. On the other hand, i believe you do really want to use this new code. In addition to being twice as fast in processing individual rules, you can use more powerful match patterns such as ... ip from 1.2.3.0/24{50,6,27,158} to ... ... ip from { 1.2.3.4/26 or 5.6.7.8/22 } to ... ... ip from any 5-7,9-66,1020-3000,4000-5000 to ... i.e. match sparse sets of IP addresses in constant time; use "or" connectives between match patterns; have multiple port ranges; etc. which I believe will dramatically reduce your ruleset size. As an additional bonus, "keep-state" rules will now send keepalives when the rule is about to expire, so you will not have your remote login sessions die while you are idle. The syntax is backward compatible with the old ipfw. A manual page documenting the extensions has yet to be completed.

MFC: cmott@scientech.com -> cm@linktel.net

2001-11-03T11:37:13Z

MFC: Adjust copyright

2001-08-21T03:50:25Z

Approved by: jkh

MFC: Make header files conform to style(9).

2001-08-01T09:52:27Z

Add a BSD style copyright

2001-06-04T14:59:06Z

Approved by: Charles Mott

MFC: the latest PPTP and misc fixes.

2000-10-31T08:48:22Z