d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
fe33e45a80
freebsd-dev/sbin
History
Robert Watson 65450f2f77 o IPFW incorrectly handled filtering in the presence of previously 
reserved and now allocated TCP flags in incoming packets.  This patch
  stops overloading those bits in the IP firewall rules, and moves
  colliding flags to a seperate field, ipflg.  The IPFW userland
  management tool, ipfw(8), is updated to reflect this change.  New TCP
  flags related to ECN are now included in tcp.h for reference, although
  we don't currently implement TCP+ECN.

o To use this fix without completely rebuilding, it is sufficient to copy
  ip_fw.h and tcp.h into your appropriate include directory, then rebuild
  the ipfw kernel module, and ipfw tool, and install both.  Note that a
  mismatch between module and userland tool will result in incorrect
  installation of firewall rules that may have unexpected effects.  This
  is an MFC candidate, following shakedown.  This bug does not appear
  to affect ipfilter.

Reviewed by:	security-officer, billf
Reported by:	Aragon Gouveia <aragon@phat.za.net>
2001-01-09 03:10:30 +00:00
..
adjkerntz Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
atm Add `_PATH_DEVZERO'. 2000-12-09 09:35:55 +00:00
badsect Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
bsdlabel typo: modifes -> modifies 2000-12-28 16:44:47 +00:00
camcontrol Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
ccdconfig Prepare for mdoc(7)NG. 2000-12-27 14:40:52 +00:00
clri mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
comcontrol Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
cxconfig Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
dhclient Add nsswitch support. By creating an /etc/nsswitch.conf file, you can 2000-09-06 18:16:48 +00:00
disklabel typo: modifes -> modifies 2000-12-28 16:44:47 +00:00
dmesg Fix hard sentence break introduced in previous commit. 2000-12-20 13:23:50 +00:00
dump Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
dumpfs mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
dumpon mdoc(7) police: removed history info from the .Os FreeBSD call. 2000-12-14 11:52:05 +00:00
fdisk Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
fdisk_pc98 Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
ffsinfo Prepare for mdoc(7)NG. 2000-12-19 15:36:48 +00:00
fsck Use macro API to <sys/queue.h> 2000-12-30 21:05:45 +00:00
fsck_ffs Document fsck_ffs's new SIGINFO handler. 2001-01-03 13:53:48 +00:00
fsck_ifs Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
fsdb mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
fsirand Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
growfs Fix a logical bug introduced by changing the formatting. 2000-12-13 22:19:05 +00:00
i386 Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
ifconfig Add missing && which absense stops 'make world' 2000-11-30 23:01:43 +00:00
init Further tidy up the sbin/init and release builds. 2001-01-01 21:39:00 +00:00
ip6fw Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
ipf Build with -DUSE_INET6 so that we can actually use the IPv6 support in 2000-10-31 22:29:27 +00:00
ipfstat Build with -DUSE_INET6 so that we can actually use the IPv6 support in 2000-10-31 22:29:27 +00:00
ipfw o IPFW incorrectly handled filtering in the presence of previously 2001-01-09 03:10:30 +00:00
ipmon Build with -DUSE_INET6 so that we can actually use the IPv6 support in 2000-10-31 22:29:27 +00:00
ipnat Build with -DUSE_INET6 so that we can actually use the IPv6 support in 2000-10-31 22:29:27 +00:00
kget mdoc(7) police: use canonical form of .Dd macro. 2000-12-11 15:20:31 +00:00
kldload Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
kldstat mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
kldunload mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
ldconfig Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
md5 mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
mdconfig Add padding space and a version number to the md_ioctl structre for future 2001-01-01 23:08:26 +00:00
mknod Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
mount Retire kernfs (userland part). 2000-12-28 12:59:57 +00:00
mount_cd9660 mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
mount_ext2fs mdoc(7) police: removed history info from the .Os FreeBSD call. 2000-12-14 11:52:05 +00:00
mount_hpfs mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
mount_ifs Retire kernfs (userland part). 2000-12-28 12:59:57 +00:00
mount_msdos mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
mount_msdosfs mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
mount_nfs mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
mount_ntfs mdoc(7) police: use canonical form of .Dd macro. 2000-12-11 15:20:31 +00:00
mount_null Prepare for mdoc(7)NG. 2000-12-27 14:40:52 +00:00
mount_nullfs Prepare for mdoc(7)NG. 2000-12-27 14:40:52 +00:00
mount_nwfs mdoc(7) police: removed history info from the .Os FreeBSD call. 2000-12-14 11:52:05 +00:00
mount_portal mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
mount_portalfs mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
mount_std Retire kernfs (userland part). 2000-12-28 12:59:57 +00:00
mount_umap Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
mount_umapfs Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
mount_union mdoc(7) police: Er macro usage cleanup. 2000-11-22 16:02:00 +00:00
mount_unionfs mdoc(7) police: Er macro usage cleanup. 2000-11-22 16:02:00 +00:00
mountd Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
natd mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
newfs Prepare for mdoc(7)NG. 2000-12-27 14:40:52 +00:00
newfs_msdos Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
nextboot mdoc(7) police: added missing .Os call. 2000-12-14 13:58:15 +00:00
nfsd mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
nfsiod mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
nologin mdoc(7) police: removed history info from the .Os FreeBSD call. 2000-12-14 11:52:05 +00:00
nos-tun Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
pc98 Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
ping Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
ping6 Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
quotacheck mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
reboot Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
restore Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
route Add `_PATH_DEVZERO'. 2000-12-09 09:35:55 +00:00
routed Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
rtsol Correct style bugs in previous commit 2000-07-06 01:55:21 +00:00
savecore mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
setkey Minor layout fixes. 2001-01-01 23:30:51 +00:00
shutdown mdoc(7) police: use canonical form of .Dd macro. 2000-12-11 15:20:31 +00:00
slattach Prepare for mdoc(7)NG. 2000-12-27 14:40:52 +00:00
spppcontrol mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
startslip Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
swapon mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
sysctl Prepare for mdoc(7)NG. 2000-12-19 15:36:48 +00:00
tunefs The tunefs code assumed that the last argument was the device specification. 2000-12-10 20:59:30 +00:00
umount mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
vinum Prepare for mdoc(7)NG. 2000-12-27 14:40:52 +00:00
Makefile Add mdconfig into the build. 2000-12-28 20:59:35 +00:00
Makefile.inc Part one of a "fix-and-move". Init(8) had make macros declared here 1997-02-10 17:41:33 +00:00