0c1232dc1b
Close the ip-fragment hole. Waste less memory. Rewrite to contemporary more readable style. Kill separate IPACCT facility, use "accept" rules in IPFIREWALL. Filter incoming >and< outgoing packets. Replace "policy" by sticky "deny all" rule. Rules have numbers used for ordering and deletion. Remove "rerorder" code entirely. Count packet & bytecount matches for rules. Code in -current & -stable is now the same. |
||
---|---|---|
.. | ||
defines | ||
files | ||
files.i386 | ||
files.newconf | ||
kmod.mk | ||
majors | ||
Makefile.i386 | ||
Makefile.powerpc | ||
newvers.sh | ||
nfsswapkernel.c | ||
NOTES | ||
options | ||
options.i386 | ||
param.c | ||
systags.sh |