d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
103,255 Commits 72 Branches 135 Tags 3.2 GiB
d9a8ed2dbc
Commit Graph

39 Commits

Author SHA1 Message Date
johan
d3e8d40eb0 Make this WARNS=2 clean by: 
- including <timeconv.h> to get _long_to_time prototype
	- removing an unused variable

Bump WARNS to it keep clean.

Approved by:	ume on ipfw@
 2004-03-03 20:21:15 +00:00
johan
1a1602ce7d style.Makefile(5): 
Use WARNS?= instead of WARNS=.
 2004-02-23 20:25:27 +00:00
dwmalone
75d682a700 Add a -n option that stops ip6fw making any changes to the rules 
in the kernel.

Submitted by:	Orla McGann <orly@redbrick.dcu.ie>
MFC after:	3 weeks
 2004-02-18 15:56:53 +00:00
dwmalone
aea494ddc4 When calculating the sequence number to use in an ip6fw reset, remember to 
add one if the SYN flag was set in the original packet. This seems to make
ip6fw reset work correctly for new and in-progress connections. Update
the man page to reflect the fact it now seems to work.

Glanced at by:	ume
MFC after:	2 weeks
 2003-12-25 23:39:44 +00:00
brooks
4290fbacd1 Replace the if_name and if_unit members of struct ifnet with new members 
if_xname, if_dname, and if_dunit. if_xname is the name of the interface
and if_dname/unit are the driver name and instance.

This change paves the way for interface renaming and enhanced pseudo
device creation and configuration symantics.

Approved By:	re (in principle)
Reviewed By:	njl, imp
Tested On:	i386, amd64, sparc64
Obtained From:	NetBSD (if_xname)
 2003-10-31 18:32:15 +00:00
ume
67e402109e correct unsafe use of realloc(). 
Obtained from:	KAME
 2003-10-11 10:37:43 +00:00
ru
c581c0c568 mdoc(7): Properly mark C headers. 2003-09-10 19:24:35 +00:00
imp
5dab8f4ced No need to define optind as an extern. stdlib.h does that for us. 2003-08-07 04:53:48 +00:00
ume
797654359b Make -N option work. 
Submitted by:	KONDOU Kazuhiro <kazuhiro@alib.jp>
 2003-03-25 11:27:46 +00:00
ru
4b75c65ade /modules is gone long ago, use the safe equivalents. 2003-03-03 22:46:36 +00:00
schweikh
2505bee728 english(4) police. 2002-12-27 12:15:40 +00:00
cjc
31e6f776be Check if a host argument is a IPv6 presentation format address before 
going to gethostbyname2(3).

PR:		bin/31632
MFC after:	3 days
 2002-08-25 05:44:13 +00:00
trhodes
8dde7c54b8 s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
charnier
548d38d27c The .Nm utility 2002-07-06 19:34:18 +00:00
kuriyama
d6d19b4391 Fix typos (s/IP6FILREWALL_VERBOSE/IPV6FIREWALL_VERBOSE/, s/netinet/netinet6/). 
MFC after:	1 week
 2002-05-30 07:01:58 +00:00
suz
1646c3c0d2 just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD. 
(based on freebsd4-snap-20020128)

Reviewed by:	ume
MFC after:	1 week
 2002-04-19 04:46:24 +00:00
dillon
2b4b1cef8e I've been meaning to do this for a while. Add an underscore to the 
time_to_xxx() and xxx_to_time() functions.  e.g. _time_to_xxx()
instead of time_to_xxx(), to make it more obvious that these are
stopgap functions & placemarkers and not meant to create a defacto
standard.  They will eventually be replaced when a real standard
comes out of committee.
 2002-01-19 23:20:02 +00:00
obrien
a537f22ad4 Default to WARNS=2. 
Binary builds that cannot handle this must explicitly set WARNS=0.

Reviewed by:	mike
 2001-12-04 02:19:58 +00:00
dillon
4ea3b711ef Properly convert long to time_t 2001-10-28 20:19:14 +00:00
ru
cb3283b5da mdoc(7) police: removed HISTORY info from the .Os call. 2001-07-10 11:04:34 +00:00
dd
978810079e mdoc(7) police: remove extraneous .Pp before and/or after .Sh. 2001-07-09 09:54:33 +00:00
kuriyama
43aaaddcb1 Merge from ipfw.8 (1.57). 
o Sync with netinet6/ip6_fw.c (1.12).

MFC after:	10 days
 2001-06-24 23:40:09 +00:00
ru
c766348156 Update comment to match ipfw/ipfw.c,v 1.95. 2001-04-13 06:49:47 +00:00
gshapiro
def2c6a383 Match ip6fw's command line options to those of ipfw (specifically, added 
the ability to use a preprocessor, use the -q (quiet) flag when reading
from a file).  The source used is from ipfw.

Clean up exit codes while I am here.

KAME has been informed and plans on integrating these patches into their
own source as well.
 2001-04-13 01:31:17 +00:00
ru
e7c03cd6b0 - Backout botched attempt to introduce MANSECT feature. 
- MAN[1-9] -> MAN.
 2001-03-26 14:33:27 +00:00
ru
e2a472a47a Set the default manual section for sbin/ to 8. 2001-03-20 18:13:31 +00:00
ume
cb622a6093 Correct typo in usage. 
Submitted by:	David Malone <dwmalone@maths.tcd.ie>
 2001-03-18 18:45:43 +00:00
ru
b1c3961564 mdoc(7) police: split punctuation characters + misc fixes. 2001-02-01 16:38:02 +00:00
kris
216b15914c Fix the vulnerability with TCP ECE packets recently fixed in ipfw. 
This is untested, but believed to work.
 2001-01-23 21:11:28 +00:00
ume
eaae652dc4 avoid conflicting #define symbol (s/FW_IFNLEN/IP6&/). 
Obtained from:	KAME
 2001-01-22 19:20:06 +00:00
ume
d1b1aad4b5 Room to hold rules should be dynamically allocated. 
PR:		kern/24248
 2001-01-20 22:40:39 +00:00
ru
57f7a8db57 Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
ru
cff3f1a066 mdoc(7) police: do not split author names in the AUTHORS section. 2000-11-22 09:35:58 +00:00
ru
d16dd614f6 mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
phantom
256125970e mdoc(7) style fixes and cleanup 2000-05-04 17:34:31 +00:00
phantom
020e251b07 Fix path to ip6fw 2000-05-04 17:33:27 +00:00
sheldonh
ad4c77c29e Remove single-space hard sentence breaks. These degrade the quality 
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.
 2000-03-01 11:27:47 +00:00
chris
e82c11f7d5 Repair incorrect ``first appeared in'' reference, which originally stated 
that we supported an IPv6 firewall since version 2.0.  It now correctly
says `4.0'.
 2000-02-09 19:54:14 +00:00
shin
f1bf15ce6f Add ip6fw. 
Yes it is almost code freeze, but as the result of many thought, now I
think this should be added before 4.0...

make world check, kernel build check is done.

Reviewed by: green
Obtained from: KAME project
 2000-01-29 13:54:44 +00:00