sam 87582b9c57 Add a new config option IPSEC_FILTERGIF to control whether or not ...

packets coming out of a GIF tunnel are re-processed by ipfw, et. al.
By default they are not reprocessed.  With the option they are.

This reverts 1.214.  Prior to that change packets were not re-processed.
After they were which caused problems because packets do not have
distinguishing characteristics (like a special network if) that allows
them to be filtered specially.

This is really a stopgap measure designed for immediate MFC so that
4.8 has consistent handling to what was in 4.7.

PR:		48159
Reviewed by:	Guido van Rooij <guido@gvr.org>
MFC after:	1 day

2003-02-23 00:47:06 +00:00

..

libalias

…

accf_data.c

…

accf_http.c

…

icmp6.h

…

icmp_var.h

…

if_atm.c

…

if_atm.h

…

if_ether.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

if_ether.h

…

igmp_var.h

…

igmp.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

igmp.h

…

in_cksum.c

…

in_gif.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

in_gif.h

…

in_pcb.c

The ancient and outdated concept of "privileged ports" in UNIX-type

2003-02-21 05:28:27 +00:00

in_pcb.h

Add a TCP TIMEWAIT state which uses less space than a fullblown TCP

2003-02-19 22:32:43 +00:00

in_proto.c

Add a TCP TIMEWAIT state which uses less space than a fullblown TCP

2003-02-19 22:32:43 +00:00

in_rmx.c

Get cosmetic changes out of the way before I add routing table SMP locks.

2003-02-10 22:01:34 +00:00

in_systm.h

…

in_var.h

…

in.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

in.h

…

ip6.h

…

ip_divert.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

ip_dummynet.c

De-anonymity a couple of messages I missed in a previous sweep.

2003-01-20 13:03:34 +00:00

ip_dummynet.h

…

ip_ecn.c

…

ip_ecn.h

…

ip_encap.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

ip_encap.h

…

ip_flow.c

…

ip_flow.h

…

ip_fw2.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

ip_fw.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

ip_fw.h

…

ip_gre.c

…

ip_gre.h

…

ip_icmp.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

ip_icmp.h

…

ip_id.c

…

ip_input.c

Add a new config option IPSEC_FILTERGIF to control whether or not

2003-02-23 00:47:06 +00:00

ip_mroute.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

ip_mroute.h

…

ip_output.c

Remove unused variables in the IPSEC case.

2003-02-20 18:22:21 +00:00

ip_var.h

Add the ability to limit the number of IP fragments allowed per packet,

2003-02-22 06:41:47 +00:00

ip.h

…

ipprotosw.h

…

raw_ip.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

tcp_debug.c

…

tcp_debug.h

…

tcp_fsm.h

…

tcp_input.c

Check to see if the TF_DELACK flag is set before returning from

2003-02-22 21:54:57 +00:00

tcp_output.c

Convert tcp_fillheaders(tp, ...) -> tcpip_fillheaders(inp, ...) so the

2003-02-19 22:18:06 +00:00

tcp_reass.c

Check to see if the TF_DELACK flag is set before returning from

2003-02-22 21:54:57 +00:00

tcp_seq.h

…

tcp_subr.c

- m = m_gethdr(M_NOWAIT, MT_HEADER);

2003-02-21 23:17:12 +00:00

tcp_syncache.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

tcp_timer.c

Add a TCP TIMEWAIT state which uses less space than a fullblown TCP

2003-02-19 22:32:43 +00:00

tcp_timer.h

Add a TCP TIMEWAIT state which uses less space than a fullblown TCP

2003-02-19 22:32:43 +00:00

tcp_timewait.c

- m = m_gethdr(M_NOWAIT, MT_HEADER);

2003-02-21 23:17:12 +00:00

tcp_usrreq.c

…

tcp_var.h

Add a TCP TIMEWAIT state which uses less space than a fullblown TCP

2003-02-19 22:32:43 +00:00

tcp.h

…

tcpip.h

…

udp_usrreq.c

Back out M_* changes, per decision of the TRB.

2003-02-19 05:47:46 +00:00

udp_var.h

…

udp.h

…