d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Disallow ipfw "tee" rules until it is actually implemented.

Browse Source 
PR:		bin/8471
This commit is contained in:
archie 1998-12-07 05:54:37 +00:00
parent ef7d200c7e
commit 566ad38652
2 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sbin/ipfw/ipfw.8
View File

@ -574,6 +574,8 @@ are reassembled before delivery to the socket, whereas fragments diverted via
are not. are not.
.Pp .Pp
Port aliases containing dashes cannot be first in a list. Port aliases containing dashes cannot be first in a list.
.Pp
The ``tee'' action is unimplemented.
.Sh AUTHORS .Sh AUTHORS
.An Ugen J. S. Antsilevich , .An Ugen J. S. Antsilevich ,
.An Poul-Henning Kamp , .An Poul-Henning Kamp ,

13
sbin/ipfw/ipfw.c
View File

@ -16,7 +16,7 @@
* *
* NEW command line interface for IP firewall facility * NEW command line interface for IP firewall facility
* *
* $Id: ipfw.c,v 1.60 1998/09/28 22:56:37 alex Exp $ * $Id: ipfw.c,v 1.61 1998/11/23 10:54:28 joerg Exp $
* *
*/ */
@ -879,7 +879,7 @@ add(ac,av)
} else if (!strncmp(*av,"divert",strlen(*av))) { } else if (!strncmp(*av,"divert",strlen(*av))) {
rule.fw_flg |= IP_FW_F_DIVERT; av++; ac--; rule.fw_flg |= IP_FW_F_DIVERT; av++; ac--;
if (!ac) if (!ac)
show_usage("missing divert port"); show_usage("missing %s port", "divert");
rule.fw_divert_port = strtoul(*av, NULL, 0); av++; ac--; rule.fw_divert_port = strtoul(*av, NULL, 0); av++; ac--;
if (rule.fw_divert_port == 0) { if (rule.fw_divert_port == 0) {
struct servent *s; struct servent *s;
@ -888,12 +888,12 @@ add(ac,av)
if (s != NULL) if (s != NULL)
rule.fw_divert_port = ntohs(s->s_port); rule.fw_divert_port = ntohs(s->s_port);
else else
show_usage("illegal divert port"); show_usage("illegal %s port", "divert");
} }
} else if (!strncmp(*av,"tee",strlen(*av))) { } else if (!strncmp(*av,"tee",strlen(*av))) {
rule.fw_flg |= IP_FW_F_TEE; av++; ac--; rule.fw_flg |= IP_FW_F_TEE; av++; ac--;
if (!ac) if (!ac)
show_usage("missing divert port"); show_usage("missing %s port", "tee divert");
rule.fw_divert_port = strtoul(*av, NULL, 0); av++; ac--; rule.fw_divert_port = strtoul(*av, NULL, 0); av++; ac--;
if (rule.fw_divert_port == 0) { if (rule.fw_divert_port == 0) {
struct servent *s; struct servent *s;
@ -902,8 +902,11 @@ add(ac,av)
if (s != NULL) if (s != NULL)
rule.fw_divert_port = ntohs(s->s_port); rule.fw_divert_port = ntohs(s->s_port);
else else
show_usage("illegal divert port"); show_usage("illegal %s port", "tee divert");
} }
#ifndef IPFW_TEE_IS_FINALLY_IMPLEMENTED
err(EX_USAGE, "the ``tee'' action is not implemented");
#endif
} else if (!strncmp(*av,"fwd",strlen(*av)) || } else if (!strncmp(*av,"fwd",strlen(*av)) ||
!strncmp(*av,"forward",strlen(*av))) { !strncmp(*av,"forward",strlen(*av))) {
struct in_addr dummyip; struct in_addr dummyip;