Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Dec 2009 00:43:44 +0000 (UTC)
From:      Xin LI <delphij@FreeBSD.org>
To:        cvs-src-old@freebsd.org
Subject:   cvs commit: src/contrib/pf/man pf.conf.5 src/contrib/pf/pfctl parse.y pf_print_state.c pfctl_parser.c src/sys/contrib/pf/net if_pfsync.c if_pfsync.h pf.c pfvar.h
Message-ID:  <200912240047.nBO0lfB0004872@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
delphij     2009-12-24 00:43:44 UTC

  FreeBSD src repository

  Modified files:
    contrib/pf/man       pf.conf.5 
    contrib/pf/pfctl     parse.y pf_print_state.c pfctl_parser.c 
    sys/contrib/pf/net   if_pfsync.c if_pfsync.h pf.c pfvar.h 
  Log:
  SVN rev 200930 on 2009-12-24 00:43:44Z by delphij
  
  Adapt OpenBSD pf's "sloopy" TCP state machine which is useful for Direct
  Server Return mode, where not all packets would be visible to the load
  balancer or gateway.
  
  This commit should be reverted when we merge future pf versions.  The
  benefit it would provide is that this version does not break any existing
  public interface and thus won't be a problem if we want to MFC it to
  earlier FreeBSD releases.
  
  Discussed with: mlaier
  Obtained from:  OpenBSD
  Sponsored by:   iXsystems, Inc.
  MFC after:      1 month
  
  Revision  Changes    Path
  1.16      +9 -2      src/contrib/pf/man/pf.conf.5
  1.10      +26 -2     src/contrib/pf/pfctl/parse.y
  1.5       +2 -0      src/contrib/pf/pfctl/pf_print_state.c
  1.9       +8 -0      src/contrib/pf/pfctl/pfctl_parser.c
  1.38      +2 -2      src/sys/contrib/pf/net/if_pfsync.c
  1.10      +1 -1      src/sys/contrib/pf/net/if_pfsync.h
  1.71      +290 -172  src/sys/contrib/pf/net/pf.c
  1.21      +4 -1      src/sys/contrib/pf/net/pfvar.h



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200912240047.nBO0lfB0004872>