Date: Fri, 23 Feb 1996 07:26:16 -0800 (PST) From: Poul-Henning Kamp <phk> To: CVS-committers, cvs-all, cvs-sys Subject: cvs commit: src/sys/conf files src/sys/netinet ip_fw.c ip_fw.h ip_input.c ip_output.c raw_ip.c ip_fwdef.c src/sys/i386/conf LINT Message-ID: <199602231526.HAA14847@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
phk 96/02/23 07:26:15
Branch: sys/conf RELENG_2_1_0
sys/i386/conf RELENG_2_1_0
sys/netinet RELENG_2_1_0
Modified: sys/conf files
sys/i386/conf LINT
sys/netinet ip_fw.c ip_fw.h ip_input.c ip_output.c raw_ip.c
Removed: sys/netinet ip_fwdef.c
Log:
Big sweep over the IPFIREWALL and IPACCT code.
Close the ip-fragment hole.
Waste less memory.
Rewrite to contemporary more readable style.
Kill separate IPACCT facility, use "accept" rules in IPFIREWALL.
Filter incoming >and< outgoing packets.
Replace "policy" by sticky "deny all" rule.
Rules have numbers used for ordering and deletion.
Remove "rerorder" code entirely.
Count packet & bytecount matches for rules.
Revision Changes Path
1.41.4.4 +0 -2 src/sys/conf/files
1.184.4.12 +1 -6 src/sys/i386/conf/LINT
1.14.4.4 +381 -694 src/sys/netinet/ip_fw.c
1.11.4.2 +58 -66 src/sys/netinet/ip_fw.h
1.22.4.3 +26 -16 src/sys/netinet/ip_input.c
1.19.4.3 +9 -11 src/sys/netinet/ip_output.c
1.19.4.4 +2 -21 src/sys/netinet/raw_ip.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199602231526.HAA14847>