Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 14 Mar 2003 17:13:00 -0800 (PST)
From:      "Crist J. Clark" <cjc@FreeBSD.org>
To:        src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c src/sys/netinet ip_fw.h ip_fw2.c
Message-ID:  <200303150113.h2F1D0s3073311@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
cjc         2003/03/14 17:13:00 PST

  FreeBSD src repository

  Modified files:
    sbin/ipfw            ipfw2.c ipfw.8 
    sys/netinet          ip_fw.h ip_fw2.c 
  Log:
  Add a 'verrevpath' option that verifies the interface that a packet
  comes in on is the same interface that we would route out of to get to
  the packet's source address. Essentially automates an anti-spoofing
  check using the information in the routing table.
  
  Experimental. The usage and rule format for the feature may still be
  subject to change.
  
  Revision  Changes    Path
  1.122     +28 -0     src/sbin/ipfw/ipfw.8
  1.23      +10 -0     src/sbin/ipfw/ipfw2.c
  1.76      +2 -0      src/sys/netinet/ip_fw.h
  1.28      +50 -0     src/sys/netinet/ip_fw2.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200303150113.h2F1D0s3073311>