alex
01c59a917d
Strengthen the rules governing the 127.0.0.0/8 subnet. The previous rules
...
allowed external hosts to send packets to the 127.0.0.0/8 subnet on the
firewall host.
Renumber the lo0 rules to guarantee they appear first.
PR: 6406
Submitted by: Archie Cobbs <archie@whistle.com>
1998-04-25 00:40:55 +00:00
brian
116081d5f2
Add natd support.
...
PR: 6339
Submitted by: cdillon@wolves.k12.mo.us
1998-04-18 10:27:19 +00:00
phk
1ceef06f41
Better RFC1918 network protection
...
PR: 6278
Reviewed by: phk
Submitted by: Ruslan Ermilov <ru@ucb.crimea.ua>
1998-04-15 16:41:14 +00:00
adam
436bc98091
get default firewall type from rc.conf
1998-02-10 01:45:57 +00:00
danny
868b6abbca
MF22 - make firewall_type a little more robust
1997-10-21 00:54:08 +00:00
danny
df61c66b40
Fix some problems in the rules file loading and need for modload detection.
...
Found by: "James E. Housley" <housley@pr-comm.com>
1997-09-18 22:43:48 +00:00
danny
347e2e3c36
Reviewed by: msmith, alex
...
Cosmetic changes to the loading of firewall rules and lkm.
1997-09-11 10:59:02 +00:00
jkh
07cd08d705
Add inetd_flags and way of passing ipfw a configuration file
...
(if firewall = "somefilename").
Fix typo fixes and URLs which were accidently nuked out of this
file (submitted by: soil@quick.net via PR#3501).
Submitted by: "Danny J. Zerkel" <dzerkel@phofarm.com>
1997-05-05 07:08:31 +00:00
jkh
af4383e1b6
Update the etc world from RELENG_2_2 which is now more up-to-date
...
(gotta get myself -current again, this is a drag).
Also-fixes-problems-noted-by: Wolfgang Helbig & Joerg Wunsch
1997-05-03 11:22:17 +00:00
alex
7d79f25eed
Typo police.
...
Added links to O'Reilly & Associates and Addison-Wesley's web sites
to accompany the book recommendations.
1997-04-27 20:12:34 +00:00
jkh
7be3f36014
Bring in rc file changes from -current.
1997-04-27 03:59:19 +00:00
peter
f173325ac8
Revert $FreeBSD$ to $Id$
1997-02-23 09:21:14 +00:00
jkh
808a36ef65
Make the long-awaited change from $Id$ to $FreeBSD$
...
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.
Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.
1997-01-14 07:20:47 +00:00
adam
c7a799d363
don't ask for confirmation
1996-09-05 11:22:09 +00:00
wosch
8720405f01
space typo, the shell don't like name=<space>value
1996-08-19 15:34:29 +00:00
jkh
819b8778d2
Remove root dotfiles which did more harm than good.
1996-08-14 14:42:05 +00:00
alex
208516062f
Flush out the rules before adding entries. This prevents duplicate
...
rules from appearing when switching back and forth from single to
multi-user modes.
1996-06-22 00:54:36 +00:00
phk
eb2d09c221
Add another good book to the required reading.
...
make a couple of rules more sensible.
Reviewed by: phk
Submitted by: jmb
1996-04-12 09:16:42 +00:00
phk
abe01fc216
Add skeleton firewall setup(s). Comments very welcome.
1996-04-03 17:13:59 +00:00
