Date: Fri, 14 Mar 2003 17:13:00 -0800 (PST) From: "Crist J. Clark" <cjc@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c src/sys/netinet ip_fw.h ip_fw2.c Message-ID: <200303150113.h2F1D0s3073311@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
cjc 2003/03/14 17:13:00 PST
FreeBSD src repository
Modified files:
sbin/ipfw ipfw2.c ipfw.8
sys/netinet ip_fw.h ip_fw2.c
Log:
Add a 'verrevpath' option that verifies the interface that a packet
comes in on is the same interface that we would route out of to get to
the packet's source address. Essentially automates an anti-spoofing
check using the information in the routing table.
Experimental. The usage and rule format for the feature may still be
subject to change.
Revision Changes Path
1.122 +28 -0 src/sbin/ipfw/ipfw.8
1.23 +10 -0 src/sbin/ipfw/ipfw2.c
1.76 +2 -0 src/sys/netinet/ip_fw.h
1.28 +50 -0 src/sys/netinet/ip_fw2.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200303150113.h2F1D0s3073311>