FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F4.6.2_cvs 2002-08-14T06:57:09Z 2002-08-14T06:57:09Z cvs2svn cvs2svn@FreeBSD.org 2002-08-14T06:57:09Z urn:sha1:72b7f92e6edf4375820f765b41697b3208ce7fe7 'RELENG_4_6_2_RELEASE'. This commit was manufactured to restore the state of the 4.6.2-RELEASE image. Releases prior to 5.3-RELEASE are omitting the secure/ and crypto/ subdirs. 2002-03-02T22:43:06Z Chris D. Faulhaber jedgar@FreeBSD.org 2002-03-02T22:43:06Z urn:sha1:6220fcbb27ca4168005cee59ee912b8817d7271a 2002-02-19T22:24:35Z Julian Elischer julian@FreeBSD.org 2002-02-19T22:24:35Z urn:sha1:98b3ee5bae78f6c9711757075b2d7997552c1970 2002-02-14T11:19:57Z Yaroslav Tykhiy ytykhiy@gmail.com 2002-02-14T11:19:57Z urn:sha1:0af59fe84d252233766b0f33d7dbec41687fb9a8 2002-02-09T10:48:24Z Crist J. Clark cjc@FreeBSD.org 2002-02-09T10:48:24Z urn:sha1:a3e0c49e5b98bc5c86c0b4fa218706d3d76d234a packets for some time. _All_ packets, regardless of destination, were accepted by the machine as if addressed to it. Jump back to 'pass' processing for a teed packet instead of falling through as if it was ours. PR: kern/31130 2001-12-15T01:06:28Z Brooks Davis brooks@FreeBSD.org 2001-12-15T01:06:28Z urn:sha1:22d091ea9eb9e033d3bbd935d2a15ee6f6f63aae 2001-12-14T20:08:22Z Jonathan Lemon jlemon@FreeBSD.org 2001-12-14T20:08:22Z urn:sha1:140a2f5914920ee6398dda2fcc65a64ea55512b2 2001-12-07T09:23:15Z Ruslan Ermilov ru@FreeBSD.org 2001-12-07T09:23:15Z urn:sha1:e89b1ee705800dc5ed2973a2a0456deead99d838 sys/netinet icmp_var.h 1.19, ip_icmp.c 1.64, ip_input.c 1.185, ip_mroute.c 1.69, ip_output.c 1.143, ip_var.h 1.59 usr.bin netstat/inet.c 1.52 - Make ip_rtaddr() global, and use it to look up the correct source address in icmp_reflect(). - Two new "struct icmpstat" members: icps_badaddr and icps_noroute. - Allow for ip_output() to be called with a NULL route pointer. PR: kern/31575, kern/29337, kern/30524 2001-11-03T00:36:11Z Luigi Rizzo luigi@FreeBSD.org 2001-11-03T00:36:11Z urn:sha1:441475c178898b8c3da2379e8474465623e2fe40 past couple of months: * merge of ipfw rule descriptor and chain pointer. No functional change, but the internal data structures and code are way more readable; * BillF code to make ipfw/dummynet/bridge KLD'able. NOTA BENE: this still has some rough edges, which are mostly due to bugs in kldload() rather than in this code. * add a new type of dynamic rule that lets you limit the number of simultaneous connections matching certain criteria (with the usual aggregation based on port/address masks) * fix spl*() protection in same parts of the code; This code also includes some minor bugfixes and code cleanup that I will port to CURRENT as soon as i have a chance. I have tested the code as much as i could, but there is really a million combinations so I might have missed some corner case. Please report if you have problem building things. The only thing known not to work is bridge.ko -- it does forward correctly, but packets directed to the bridge itself are only received from one interface (i suspect some missing initialization), and there are some other issues at unloading time. Please use the statically compiled code for the time being. NOTE ON KLD: It appears that kldload/unload is unable to handle the case of (erroneously) loading/unloading a module which is already compiled in. What happens is that load fails, but the module is listed as loaded, and then the system panics if you attempt an unloading of the module. This problem need fixing in the module loading/unloading code, which is not in my area of competence. 2001-11-02T16:40:49Z Jonathan Lemon jlemon@FreeBSD.org 2001-11-02T16:40:49Z urn:sha1:a13664c482e3c50e628c650edac1c470eccacca7 PR: alpha/30982