src/sys/netinet, branch release/4.9.0_cvs

This commit was manufactured by cvs2svn to create tag

2003-10-27T07:57:33Z

'RELENG_4_9_0_RELEASE'. This commit was manufactured to restore the state of the 4.9-RELEASE image. Releases prior to 5.3-RELEASE are omitting the secure/ and crypto/ subdirs.

MFC Rev 1.40 to fix use-after-free problems with dynamic rules.

2003-10-17T11:01:03Z

Submitted by: mckusick Approved by: re (murray>

MFC 1.240: add IPSEC_FILTERGIF suport for FAST_IPSEC

2003-10-06T18:25:59Z

Approved by: re (murray)

MFC: The knobs controlling ipfw2 and ip6fw were not protected when running

2003-10-01T07:07:07Z

at an elevated securelevel. Fix this behaviour and function as documented. PR: kern/39396 Approved by: re (rwatson)

Fix a logic error in the check to see if arplookup() should free the route.

2003-09-24T21:51:13Z

Noticed by: Mike Hogsett Reviewed by: ru

Fix a bug in arplookup(), whereby a hostile party on a locally

2003-09-23T16:54:39Z

attached network could exhaust kernel memory, and cause a system panic, by sending a flood of spoofed ARP requests. Approved by: security-officer, jake (mentor) Reported by: Apple Product Security

MFC rev 1.115 (check for null return from M_PREPEND)

2003-09-16T05:43:56Z

Approved by: re

MFC mbuf_stress_test Mark II.

2003-09-13T05:52:47Z

Approved by: re (murray)

MFC: Add the IP_ONESBCAST option, to enable undirected IP broadcasts to be

2003-09-09T19:09:23Z

sent on specific interfaces. This is required by aodvd, and may in future help us in getting rid of the requirement for BPF from our import of isc-dhcp. PR: kern/37486 Obtained from: BSD/OS Approved by: re, jake (mentor)

Merge from -current support for Protocol Independent Multicast.

2003-08-24T21:37:34Z

Submitted by: Pavlin Radoslavov