From owner-cvs-all@FreeBSD.ORG  Mon Jun 21 22:46:36 2004
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id E519116A4CE; Mon, 21 Jun 2004 22:46:36 +0000 (GMT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id C74E943D46; Mon, 21 Jun 2004 22:46:36 +0000 (GMT)
	(envelope-from darrenr@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.11/8.12.11) with ESMTP id i5LMkaxq053362;
	Mon, 21 Jun 2004 22:46:36 GMT
	(envelope-from darrenr@repoman.freebsd.org)
Received: (from darrenr@localhost)
	by repoman.freebsd.org (8.12.11/8.12.11/Submit) id i5LMkaZ4053361;
	Mon, 21 Jun 2004 22:46:36 GMT
	(envelope-from darrenr)
Message-Id: <200406212246.i5LMkaZ4053361@repoman.freebsd.org>
From: Darren Reed <darrenr@FreeBSD.org>
Date: Mon, 21 Jun 2004 22:46:36 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/contrib/ipfilter/netinet fil.c ip_auth.c
 ip_compat.h ip_fil.c ip_fil.h ip_frag.c ip_frag.h ip_ftp_pxy.c
 ip_log.c ip_nat.c ip_nat.h ip_raudio_pxy.c ip_rcmd_pxy.c
 ip_state.c ip_state.h ipl.h
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Jun 2004 22:46:37 -0000

darrenr     2004-06-21 22:46:36 UTC

  FreeBSD src repository

  Modified files:
    sys/contrib/ipfilter/netinet fil.c ip_auth.c ip_compat.h 
                                 ip_fil.c ip_fil.h ip_frag.c 
                                 ip_frag.h ip_ftp_pxy.c ip_log.c 
                                 ip_nat.c ip_nat.h ip_raudio_pxy.c 
                                 ip_rcmd_pxy.c ip_state.c 
                                 ip_state.h ipl.h 
  Log:
  Update ipfilter from 3.4.31 -> 3.4.35.  Some important changes:
  * block packets that fail to create state table entries
  * only allow non-fragmented packets to influence whether or not a logged
    packet is the same as the one logged before.
  * correct the ICMP packet checksum fixing up when processing ICMP errors for NAT
  * implement a maximum for the number of entries in the NAT table (NAT_TABLE_MAX
    and ipf_nattable_max)
  * frsynclist() wasn't paying attention to all the places where interface
    names are, like it should.
  * fix comparing ICMP packets with established TCP state where only 8 bytes
    of header are returned in the ICMP error.
  
  MFC after:      1 week
  
  Revision  Changes    Path
  1.38      +251 -41   src/sys/contrib/ipfilter/netinet/fil.c
  1.34      +20 -4     src/sys/contrib/ipfilter/netinet/ip_auth.c
  1.23      +8 -5      src/sys/contrib/ipfilter/netinet/ip_compat.h
  1.45      +72 -32    src/sys/contrib/ipfilter/netinet/ip_fil.c
  1.26      +2 -2      src/sys/contrib/ipfilter/netinet/ip_fil.h
  1.25      +22 -3     src/sys/contrib/ipfilter/netinet/ip_frag.c
  1.16      +1 -0      src/sys/contrib/ipfilter/netinet/ip_frag.h
  1.24      +21 -15    src/sys/contrib/ipfilter/netinet/ip_ftp_pxy.c
  1.27      +6 -6      src/sys/contrib/ipfilter/netinet/ip_log.c
  1.34      +176 -208  src/sys/contrib/ipfilter/netinet/ip_nat.c
  1.21      +27 -14    src/sys/contrib/ipfilter/netinet/ip_nat.h
  1.10      +0 -6      src/sys/contrib/ipfilter/netinet/ip_raudio_pxy.c
  1.11      +1 -4      src/sys/contrib/ipfilter/netinet/ip_rcmd_pxy.c
  1.33      +83 -51    src/sys/contrib/ipfilter/netinet/ip_state.c
  1.15      +1 -0      src/sys/contrib/ipfilter/netinet/ip_state.h
  1.22      +1 -1      src/sys/contrib/ipfilter/netinet/ipl.h