Date: Fri, 23 Feb 1996 07:48:02 -0800 (PST) From: Poul-Henning Kamp <phk> To: CVS-committers, cvs-all, cvs-sys Subject: cvs commit: src/sys/conf files src/sys/i386/conf LINT src/sys/netinet ip_fw.c ip_fw.h ip_input.c ip_output.c raw_ip.c Message-ID: <199602231548.HAA16489@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
phk 96/02/23 07:48:01
Modified: sys/conf files
sys/i386/conf LINT
sys/netinet ip_fw.c ip_fw.h ip_input.c ip_output.c raw_ip.c
Log:
Big sweep over the IPFIREWALL and IPACCT code.
Close the ip-fragment hole.
Waste less memory.
Rewrite to contemporary more readable style.
Kill separate IPACCT facility, use "accept" rules in IPFIREWALL.
Filter incoming >and< outgoing packets.
Replace "policy" by sticky "deny all" rule.
Rules have numbers used for ordering and deletion.
Remove "rerorder" code entirely.
Count packet & bytecount matches for rules.
Code in -current & -stable is now the same.
Revision Changes Path
1.61 +0 -2 src/sys/conf/files
1.240 +1 -6 src/sys/i386/conf/LINT
1.29 +290 -719 src/sys/netinet/ip_fw.c
1.15 +36 -64 src/sys/netinet/ip_fw.h
1.36 +21 -15 src/sys/netinet/ip_input.c
1.29 +9 -11 src/sys/netinet/ip_output.c
1.26 +2 -22 src/sys/netinet/raw_ip.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199602231548.HAA16489>