src/sys/netinet, branch releng/4.9

Merge SA-05:14.bzip2 and SA-05:15.tcp.

2005-07-02T08:29:27Z

Approved by: so (cperciva)

Merge SA-05:06.iir, SA-05:07.ldt and SA-05:08.kmem.

2005-05-12T15:25:07Z

Approved by: so (cperciva)

MFC in part tcp_input.c 1.228, tcp_subr.c 1.182, tcp_var.h 1.98:

2004-03-02T17:27:47Z

Limit TCP segment reassembly queue size.

MFC Rev 1.40 to fix use-after-free problems with dynamic rules.

2003-10-17T11:01:03Z

Submitted by: mckusick Approved by: re (murray>

MFC 1.240: add IPSEC_FILTERGIF suport for FAST_IPSEC

2003-10-06T18:25:59Z

Approved by: re (murray)

MFC: The knobs controlling ipfw2 and ip6fw were not protected when running

2003-10-01T07:07:07Z

at an elevated securelevel. Fix this behaviour and function as documented. PR: kern/39396 Approved by: re (rwatson)

Fix a logic error in the check to see if arplookup() should free the route.

2003-09-24T21:51:13Z

Noticed by: Mike Hogsett Reviewed by: ru

Fix a bug in arplookup(), whereby a hostile party on a locally

2003-09-23T16:54:39Z

attached network could exhaust kernel memory, and cause a system panic, by sending a flood of spoofed ARP requests. Approved by: security-officer, jake (mentor) Reported by: Apple Product Security

MFC rev 1.115 (check for null return from M_PREPEND)

2003-09-16T05:43:56Z

Approved by: re

MFC mbuf_stress_test Mark II.

2003-09-13T05:52:47Z

Approved by: re (murray)