d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
100,377 Commits 4 Branches 49 Tags 2 GiB
76b946302c
Commit Graph

39 Commits

Author SHA1 Message Date
johan
eda438f852 Make this WARNS=2 clean by: 
- including <timeconv.h> to get _long_to_time prototype
	- removing an unused variable

Bump WARNS to it keep clean.

Approved by:	ume on ipfw@
 2004-03-03 20:21:15 +00:00
johan
31854a224a style.Makefile(5): 
Use WARNS?= instead of WARNS=.
 2004-02-23 20:25:27 +00:00
dwmalone
4a80a9f041 Add a -n option that stops ip6fw making any changes to the rules 
in the kernel.

Submitted by:	Orla McGann <orly@redbrick.dcu.ie>
MFC after:	3 weeks
 2004-02-18 15:56:53 +00:00
dwmalone
836a4cbcdf When calculating the sequence number to use in an ip6fw reset, remember to 
add one if the SYN flag was set in the original packet. This seems to make
ip6fw reset work correctly for new and in-progress connections. Update
the man page to reflect the fact it now seems to work.

Glanced at by:	ume
MFC after:	2 weeks
 2003-12-25 23:39:44 +00:00
brooks
f1e94c6f29 Replace the if_name and if_unit members of struct ifnet with new members 
if_xname, if_dname, and if_dunit. if_xname is the name of the interface
and if_dname/unit are the driver name and instance.

This change paves the way for interface renaming and enhanced pseudo
device creation and configuration symantics.

Approved By:	re (in principle)
Reviewed By:	njl, imp
Tested On:	i386, amd64, sparc64
Obtained From:	NetBSD (if_xname)
 2003-10-31 18:32:15 +00:00
ume
63ae58bf13 correct unsafe use of realloc(). 
Obtained from:	KAME
 2003-10-11 10:37:43 +00:00
ru
1edcd1b018 mdoc(7): Properly mark C headers. 2003-09-10 19:24:35 +00:00
imp
206704526c No need to define optind as an extern. stdlib.h does that for us. 2003-08-07 04:53:48 +00:00
ume
f5ec7dd2c2 Make -N option work. 
Submitted by:	KONDOU Kazuhiro <kazuhiro@alib.jp>
 2003-03-25 11:27:46 +00:00
ru
c8dda64242 /modules is gone long ago, use the safe equivalents. 2003-03-03 22:46:36 +00:00
schweikh
fec6546e12 english(4) police. 2002-12-27 12:15:40 +00:00
cjc
e4a8f19dec Check if a host argument is a IPv6 presentation format address before 
going to gethostbyname2(3).

PR:		bin/31632
MFC after:	3 days
 2002-08-25 05:44:13 +00:00
trhodes
136be46680 s/filesystem/file system/g as discussed on -developers 2002-08-21 18:11:48 +00:00
charnier
a2accd01f0 The .Nm utility 2002-07-06 19:34:18 +00:00
kuriyama
61c2113b0f Fix typos (s/IP6FILREWALL_VERBOSE/IPV6FIREWALL_VERBOSE/, s/netinet/netinet6/). 
MFC after:	1 week
 2002-05-30 07:01:58 +00:00
suz
553226e8e1 just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD. 
(based on freebsd4-snap-20020128)

Reviewed by:	ume
MFC after:	1 week
 2002-04-19 04:46:24 +00:00
dillon
c3dbbbabdf I've been meaning to do this for a while. Add an underscore to the 
time_to_xxx() and xxx_to_time() functions.  e.g. _time_to_xxx()
instead of time_to_xxx(), to make it more obvious that these are
stopgap functions & placemarkers and not meant to create a defacto
standard.  They will eventually be replaced when a real standard
comes out of committee.
 2002-01-19 23:20:02 +00:00
obrien
9baf2f1b03 Default to WARNS=2. 
Binary builds that cannot handle this must explicitly set WARNS=0.

Reviewed by:	mike
 2001-12-04 02:19:58 +00:00
dillon
3e277dbdb4 Properly convert long to time_t 2001-10-28 20:19:14 +00:00
ru
7cef49ff86 mdoc(7) police: removed HISTORY info from the .Os call. 2001-07-10 11:04:34 +00:00
dd
eaa6ee03b8 mdoc(7) police: remove extraneous .Pp before and/or after .Sh. 2001-07-09 09:54:33 +00:00
kuriyama
7129e79059 Merge from ipfw.8 (1.57). 
o Sync with netinet6/ip6_fw.c (1.12).

MFC after:	10 days
 2001-06-24 23:40:09 +00:00
ru
029dfd12d6 Update comment to match ipfw/ipfw.c,v 1.95. 2001-04-13 06:49:47 +00:00
gshapiro
1e64929334 Match ip6fw's command line options to those of ipfw (specifically, added 
the ability to use a preprocessor, use the -q (quiet) flag when reading
from a file).  The source used is from ipfw.

Clean up exit codes while I am here.

KAME has been informed and plans on integrating these patches into their
own source as well.
 2001-04-13 01:31:17 +00:00
ru
86642a4ab4 - Backout botched attempt to introduce MANSECT feature. 
- MAN[1-9] -> MAN.
 2001-03-26 14:33:27 +00:00
ru
56b5d7535b Set the default manual section for sbin/ to 8. 2001-03-20 18:13:31 +00:00
ume
68ae850293 Correct typo in usage. 
Submitted by:	David Malone <dwmalone@maths.tcd.ie>
 2001-03-18 18:45:43 +00:00
ru
8a6f8b5fe4 mdoc(7) police: split punctuation characters + misc fixes. 2001-02-01 16:38:02 +00:00
kris
1a36de8090 Fix the vulnerability with TCP ECE packets recently fixed in ipfw. 
This is untested, but believed to work.
 2001-01-23 21:11:28 +00:00
ume
301ceeb33d avoid conflicting #define symbol (s/FW_IFNLEN/IP6&/). 
Obtained from:	KAME
 2001-01-22 19:20:06 +00:00
ume
b1328b8ed8 Room to hold rules should be dynamically allocated. 
PR:		kern/24248
 2001-01-20 22:40:39 +00:00
ru
7fe8bd2b88 Prepare for mdoc(7)NG. 2000-12-18 15:16:24 +00:00
ru
835a46c9c2 mdoc(7) police: do not split author names in the AUTHORS section. 2000-11-22 09:35:58 +00:00
ru
ea31070695 mdoc(7) police: use the new features of the Nm macro. 2000-11-20 16:52:27 +00:00
phantom
6f90f2c17e mdoc(7) style fixes and cleanup 2000-05-04 17:34:31 +00:00
phantom
e41a0d9fe9 Fix path to ip6fw 2000-05-04 17:33:27 +00:00
sheldonh
ff1f324516 Remove single-space hard sentence breaks. These degrade the quality 
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.
 2000-03-01 11:27:47 +00:00
chris
16bfae1d4d Repair incorrect ``first appeared in'' reference, which originally stated 
that we supported an IPv6 firewall since version 2.0.  It now correctly
says `4.0'.
 2000-02-09 19:54:14 +00:00
shin
5a973d3065 Add ip6fw. 
Yes it is almost code freeze, but as the result of many thought, now I
think this should be added before 4.0...

make world check, kernel build check is done.

Reviewed by: green
Obtained from: KAME project
 2000-01-29 13:54:44 +00:00