freebsd-nq/sys/contrib/pf/net
Max Laier cff1b3389b Import from OpenBSD 1.168, dhartmei:
fix a bug in the input sanity check of DIOCCHANGERULE (not used by pfctl,
  but third-party tools). a rule must have a non-empty replacement address
  list when it's a translation rule but not an anchor call (i.e. "nat ...
  ->" needs a replacement address, but "nat-anchor ..." doesn't). the check
  confused "rule is an anchor call" with "rule is defined within an anchor".
  report from Michal Mertl, Max Laier.

Obtained from:	OpenBSD
MFC after:	2 weeks
2006-07-21 09:48:13 +00:00
..
if_pflog.c Revise network interface cloning to take an optional opaque 2006-07-09 06:04:01 +00:00
if_pflog.h Avoid pulling in the whole <net/pfvar.h> by opaquely declaring 2006-03-09 15:54:01 +00:00
if_pfsync.c Revise network interface cloning to take an optional opaque 2006-07-09 06:04:01 +00:00
if_pfsync.h Defer ip_output of pfsync updates to an independent callout thread instead 2005-06-10 17:23:49 +00:00
pf_if.c
pf_ioctl.c Import from OpenBSD 1.168, dhartmei: 2006-07-21 09:48:13 +00:00
pf_norm.c Loopback pf_norm.c rev. 1.106 from OpenBSD: 2006-03-25 21:15:25 +00:00
pf_osfp.c
pf_subr.c
pf_table.c Make LINT happy. 2005-05-04 15:29:28 +00:00
pf.c Only decrement the max-src-conn counter for tcp connections that reached 2005-12-25 23:52:00 +00:00
pfvar.h Only decrement the max-src-conn counter for tcp connections that reached 2005-12-25 23:52:00 +00:00