Alexander Langer 7a99108603 Big sweep over ipfw, picking up where Poul left off: ...

- Log ICMP type during verbose output.
  - Added IPFIREWALL_VERBOSE_LIMIT option to prevent denial of service
    attacks via syslog flooding.
  - Filter based on ICMP type.
  - Timestamp chain entries when they are matched.
  - Interfaces can now be matched with a wildcard specification (i.e.
    will match any interface unit for a given name).
  - Prevent the firewall chain from being manipulated when securelevel
    is greater than 2.
  - Fixed bug that allowed the default policy to be deleted.
  - Ability to zero individual accounting entries.
  - Remove definitions of old_chk_ptr and old_ctl_ptr when compiling
    ipfw as a lkm.
  - Remove some redundant code shared between ip_fw_init and ipfw_load.

Closes PRs: 1192, 1219, and 1267.

1996-06-09 23:46:21 +00:00

..

icmp_var.h

Add lots of useful MIB variables and a few not-so-useful ones for

1995-02-16 00:27:47 +00:00

if_ether.c

Changed some memcpy()'s back to bcopy()'s.

1996-06-08 08:19:03 +00:00

if_ether.h

Send ARP's for aliased subnets with the proper source address.

1996-03-23 01:32:30 +00:00

if_fddi.h

The last part of the ether_sprint -> %6D change.

1996-01-26 09:29:29 +00:00

igmp_var.h

IGMPv2 routines rewritten, to be more compact and to fully comply

1996-03-14 16:59:20 +00:00

igmp.c

Always call ip_output() with a valid route pointer. For igmp, also get the

1996-04-18 15:41:11 +00:00

igmp.h

IGMPv2 routines rewritten, to be more compact and to fully comply

1996-03-14 16:59:20 +00:00

in_cksum.c

Remove trailing whitespace.

1995-05-30 08:16:23 +00:00

in_pcb.c

More closely preserve the original operation of rresvport() when using

1996-05-31 05:11:22 +00:00

in_pcb.h

Make the default behavior of local port assignment match traditional

1996-02-22 21:32:23 +00:00

in_proto.c

Remove useless entries from the inetsw structure initiliser which

1996-05-08 04:34:03 +00:00

in_rmx.c

Add three new route flags to help determine what sort of address

1996-05-06 17:42:13 +00:00

in_systm.h

Made idempotent.

1994-08-21 05:27:42 +00:00

in_var.h

IGMPv2 routines rewritten, to be more compact and to fully comply

1996-03-14 16:59:20 +00:00

in.c

Added proper splnet protection while modifying the interface address list.

1996-04-07 06:59:52 +00:00

in.h

Add feature for tcp "established".

1996-04-03 13:52:20 +00:00

ip_fw.c

Big sweep over ipfw, picking up where Poul left off:

1996-06-09 23:46:21 +00:00

ip_fw.h

Big sweep over ipfw, picking up where Poul left off:

1996-06-09 23:46:21 +00:00

ip_icmp.c

Always pass a route structure when calling ip_output().

1996-04-03 18:52:22 +00:00

ip_icmp.h

Fix a bunch of spelling errors in the comment fields of

1996-01-30 23:02:38 +00:00

ip_input.c

Changed some memcpy()'s back to bcopy()'s.

1996-06-08 08:19:03 +00:00

ip_mroute.c

Always call ip_output() with a valid route pointer. For igmp, also get the

1996-04-18 15:41:11 +00:00

ip_mroute.h

Completed function declarations and/or added prototypes.

1995-12-02 19:38:06 +00:00

ip_output.c

Changed some memcpy()'s back to bcopy()'s.

1996-06-08 08:19:03 +00:00

ip_var.h

Make rip_input() take the header length

1996-03-26 19:16:46 +00:00

ip.h

Define a few macros useful in the _IP_VHL case.

1996-04-18 15:42:50 +00:00

raw_ip.c

Conditionalize calls to IPFW code on COMPAT_IPFW. This is done slightly

1996-05-22 17:23:09 +00:00

tcp_debug.c

Eliminated sloppy common-style declarations. Now there are no duplicated

1996-04-13 12:45:57 +00:00

tcp_debug.h

Eliminated sloppy common-style declarations. Now there are no duplicated

1996-04-13 12:45:57 +00:00

tcp_fsm.h

New style sysctl & staticize alot of stuff.

1995-11-14 20:34:56 +00:00

tcp_input.c

Back out my stupid braino; I was thinking strlen and not sizeof.

1996-05-02 05:54:14 +00:00

tcp_output.c

Changed some memcpy()'s back to bcopy()'s.

1996-06-08 08:19:03 +00:00

tcp_reass.c

Back out my stupid braino; I was thinking strlen and not sizeof.

1996-05-02 05:54:14 +00:00

tcp_seq.h

Finish 4.4-Lite-2 merge: randomize TCP initial sequence numbers

1995-10-03 16:54:17 +00:00

tcp_subr.c

Correct formula for TCP RTO calculation. Also try to do a better job in

1996-06-05 16:57:38 +00:00

tcp_timer.c

Fix a bug in the handling of the "persist" state which, under certain

1996-06-03 15:37:52 +00:00

tcp_timer.h

Fix a bunch of spelling errors in the comment fields of

1996-01-30 23:02:38 +00:00

tcp_timewait.c

Correct formula for TCP RTO calculation. Also try to do a better job in

1996-06-05 16:57:38 +00:00

tcp_usrreq.c

Move or add #include <queue.h> in preparation for upcoming struct socket

1996-03-11 15:13:58 +00:00

tcp_var.h

Correct formula for TCP RTO calculation. Also try to do a better job in

1996-06-05 16:57:38 +00:00

tcp.h

Remove trailing whitespace.

1995-05-30 08:16:23 +00:00

tcpip.h

Merge in T/TCP TCP header file changes.

1995-02-08 20:18:48 +00:00

udp_usrreq.c

Changed some memcpy()'s back to bcopy()'s.

1996-06-08 08:19:03 +00:00

udp_var.h

Instrument UDP PCB hashing to see how often the hash lookup is effective

1996-06-05 17:20:35 +00:00

udp.h

Made idempotent.

1994-08-21 05:27:42 +00:00