gpalmer
9b39baf16c
Try to make the `syn' blocking code act a bit more sensibly - don't
...
block `syn' packets that have `ack' set.
Reviewed by:
Submitted by:
Obtained from:
1995-07-31 13:58:35 +00:00
dg
3da1e3ecc4
Added $Id$.
1995-07-23 05:36:31 +00:00
dg
de86e24516
Fixed panic that occurs on certain firewall rejected packets that was
...
caused by dtom() being used on an mbuf cluster. The fix involves passing
around the mbuf pointer.
Submitted by: Bill Fenner
1995-07-09 14:29:46 +00:00
dg
5d30bb533f
This is the end result of about a dozen passes through this code to fix
...
incorrect indents, a variety of poor coding practices such as comparing
pointers to constants ('0'), poor code structuring, etc, etc. This brings
the code up to the minimum standards for inclusion in FreeBSD.
1995-07-04 05:39:03 +00:00
dg
f131661e5a
Define TRUE and FALSE.
1995-07-04 05:29:30 +00:00
dg
c200b4b97b
1) Removed bogus #include
...
2) Rewrote "bad_packet" code to be less buggy and more readable.
3) Removed a pile of goto's; the code is now somewhat less reminiscent
of a certain Italian pasta.
4) Changed all boolean returns of "0" and "1" to FALSE/TRUE.
1995-07-04 03:35:20 +00:00
gpalmer
f3e714fb0e
Add a missing `goto' statement so that this compiles yet again.
1995-06-28 13:22:36 +00:00
guido
5d28c984cc
reject option in ip_fw used to panic the system. This fixes it.
...
-Guido
Reviewed by:
Submitted by:
Obtained from:
1995-06-27 17:26:27 +00:00
rgrimes
c86f0c7a71
Remove trailing whitespace.
1995-05-30 08:16:23 +00:00
rgrimes
0e1db07cf9
Fix -Wformat warnings from LINT kernel.
1995-05-11 19:26:53 +00:00
ugen
b132c690f3
Allocate memory as M_IPFW,now we can watch firewall memory usage
...
in vmstat..
1995-03-12 13:28:13 +00:00
ugen
7ef3525e29
Allow "via" to be specified ever as IP adress or
...
as interface name/unit...
1995-02-24 14:33:54 +00:00
ugen
dd3cca2bda
Actual firewall change.
...
1) Firewall is not subdivided on forwarding / blocking chains
anymore.Actually only one chain left-it was the blocking one.
2) LKM support.ip_fwdef.c is function pointers definition and
goes into kernel along with all INET stuff.
1995-01-12 13:06:32 +00:00
ugen
a10269c105
Add clear one accounting entry control.
...
Structure fields changed to seem more standart.
1994-12-13 15:57:34 +00:00
ugen
cc4646f030
Late patch for delete control..
1994-12-12 18:10:41 +00:00
ugen
dd9e9b49e3
Add match by interface from which packet arrived (via)
...
Handle right fragmented packets. Remove checking option
from kernel..
1994-12-12 17:20:55 +00:00
ugen
f625842f61
Added: ICMP reply,TCP SYN check,logging..
1994-11-28 12:35:14 +00:00
jkh
e8b4c66232
Ugen J.S.Antsilevich's latest, happiest, IP firewall code.
...
Poul: Please take this into BETA. It's non-intrusive, and a rather
substantial improvement over what was there before.
1994-11-16 10:17:11 +00:00
jkh
4975a57b63
Almost 12th hour (the 11th hour was almost an hour ago :-) patches
...
from Ugen.
1994-11-08 12:47:29 +00:00
jkh
319fc7e1e0
2 11th-hour fixes from Ugen (not Uben, sorry!) J.S.Antsilevich.
...
I think it's time for Ugen to get a freefall account, just so I can
direct mail at him directly and let him drop off patches for us here. Ugen?
Done!
Submitted by: ugen
1994-11-07 10:01:32 +00:00
jkh
7add8247a9
Latest changes from Uben.
...
Submitted by: uben
1994-10-31 23:58:04 +00:00
jkh
6dbcdb0ab9
IP Firewall code from Daniel Boulet and J.S.Antsilevich
...
Submitted by: danny ugen
1994-10-28 15:09:49 +00:00