From owner-cvs-all  Fri Aug 16  3:31:53 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 1288B37B400; Fri, 16 Aug 2002 03:31:49 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id CC5EF43E65; Fri, 16 Aug 2002 03:31:48 -0700 (PDT)
	(envelope-from luigi@FreeBSD.org)
Received: from freefall.freebsd.org (luigi@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g7GAVmJU053776;
	Fri, 16 Aug 2002 03:31:48 -0700 (PDT)
	(envelope-from luigi@freefall.freebsd.org)
Received: (from luigi@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g7GAVmQ7053775;
	Fri, 16 Aug 2002 03:31:48 -0700 (PDT)
Message-Id: <200208161031.g7GAVmQ7053775@freefall.freebsd.org>
From: Luigi Rizzo <luigi@FreeBSD.org>
Date: Fri, 16 Aug 2002 03:31:48 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/netinet ip_fw2.c src/sbin/ipfw ipfw.8 ipfw2.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

luigi       2002/08/16 03:31:47 PDT

  Modified files:
    sys/netinet          ip_fw2.c 
    sbin/ipfw            ipfw.8 ipfw2.c 
  Log:
  sys/netinet/ip_fw2.c:
  
      Implement the M_SKIP_FIREWALL bit in m_flags to avoid loops
      for firewall-generated packets (the constant has to go in sys/mbuf.h).
  
      Better comments on keepalive generation, and enforce dyn_rst_lifetime
      and dyn_fin_lifetime to be less than dyn_keepalive_period.
  
      Enforce limits (up to 64k) on the number of dynamic buckets, and
      retry allocation with smaller sizes.
  
      Raise default number of dynamic rules to 4096.
  
      Improved handling of set of rules -- now you can atomically
      enable/disable multiple sets, move rules from one set to another,
      and swap sets.
  
  sbin/ipfw/ipfw2.c:
  
      userland support for "noerror" pipe attribute.
  
      userland support for sets of rules.
  
      minor improvements on rule parsing and printing.
  
  sbin/ipfw/ipfw.8:
  
      more documentation on ipfw2 extensions, differences from ipfw1
      (so we can use the same manpage for both), stateful rules,
      and some additional examples.
      Feedback and more examples needed here.
  
  Revision  Changes    Path
  1.106     +370 -67   src/sbin/ipfw/ipfw.8
  1.10      +156 -49   src/sbin/ipfw/ipfw2.c
  1.9       +116 -47   src/sys/netinet/ip_fw2.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message