Luigi Rizzo 830cc17841 Two main changes here: ...

+ implement "limit" rules, which permit to limit the number of sessions
   between certain host pairs (according to masks). These are a special
   type of stateful rules, which might be of interest in some cases.
   See the ipfw manpage for details.

 + merge the list pointers and ipfw rule descriptors in the kernel, so
   the code is smaller, faster and more readable. This patch basically
   consists in replacing "foo->rule->bar" with "rule->bar" all over
   the place.
   I have been willing to do this for ages!

MFC after: 1 week

2001-09-27 23:44:27 +00:00

..

alpha

o securelevel_gt() patches came from pre-KSE alpha -- this revision

2001-09-26 20:27:23 +00:00

amd64

Disable the check in icu_setup() to see if a handler was already used as

2001-09-27 19:03:52 +00:00

arm

o Remove some GCCisms in src/powerpc/include/endian.h.

2001-08-30 00:04:19 +00:00

boot

Make this 'make obj' safe

2001-09-26 00:13:08 +00:00

cam

o Modify access control code for the CAM SCSI pass-through device to

2001-09-26 20:13:16 +00:00

coda

Use the passed in thread to selrecord() instead of curthread.

2001-09-21 22:26:51 +00:00

compat

The arg parameter is passed by value in Linux, but not in FreeBSD.

2001-09-26 05:39:59 +00:00

conf

Add the new ng_gif, ng_gif_demux, and ng_ip_input nodes to NOTES so they

2001-09-27 22:11:37 +00:00

contrib

IPFilter munges multicast address packets on the loopback interface.

2001-09-12 22:06:36 +00:00

crypto

properly check DES weak key. KAME PR 363.

2001-07-03 17:46:48 +00:00

ddb

Fill out some gaps in ia64 DDB support. This involves generalising DDB's

2001-09-15 11:06:07 +00:00

dev

Fix typo: BGGPHY -> BRGPHY in one of the #defines I added the other day.

2001-09-27 17:32:49 +00:00

fs

o Modify generic specfs device open access control checks to use

2001-09-26 20:18:26 +00:00

geom

KSE Milestone 2

2001-09-12 08:38:13 +00:00

gnu

The addition of i_dirhash to struct inode pushed RELENG_4's

2001-09-24 18:29:20 +00:00

i4b

KSE Milestone 2

2001-09-12 08:38:13 +00:00

i386

Add the new ng_gif, ng_gif_demux, and ng_ip_input nodes to NOTES so they

2001-09-27 22:11:37 +00:00

ia64

o Modify the access control checks for the ia64 /dev/mem (and friends)

2001-09-26 20:24:23 +00:00

isa

Gate low level console output on mtx_lock_spin(&sio_lock), if the

2001-09-27 17:00:25 +00:00

isofs/cd9660

KSE Milestone 2

2001-09-12 08:38:13 +00:00

kern

o When performing a securelevel check as part of securelevel_ge() or

2001-09-26 20:41:48 +00:00

libkern

Fix a warning in bsearch(). Like index() etc, it de-qualifies its

2001-09-10 10:33:46 +00:00

modules

Add ng_ip_input. A new netgraph node for queuing IP packets into the

2001-09-27 21:54:27 +00:00

net

Two main changes here:

2001-09-27 23:44:27 +00:00

netatalk

KSE Milestone 2

2001-09-12 08:38:13 +00:00

netatm

KSE Milestone 2

2001-09-12 08:38:13 +00:00

netgraph

Add ng_ip_input. A new netgraph node for queuing IP packets into the

2001-09-27 21:54:27 +00:00

netinet

Two main changes here:

2001-09-27 23:44:27 +00:00

netinet6

Make faith loadable, unloadable, and clonable.

2001-09-25 18:40:52 +00:00

netipx

KSE Milestone 2

2001-09-12 08:38:13 +00:00

netkey

KSE Milestone 2

2001-09-12 08:38:13 +00:00

netnatm

…

netncp

KSE Milestone 2

2001-09-12 08:38:13 +00:00

netns

…

netsmb

Map errdos:67 to the ENOENT.

2001-08-21 09:16:57 +00:00

nfs

Make nfsm_dissect() have an obvious return value.

2001-09-27 22:40:38 +00:00

nfsclient

Make nfsm_dissect() have an obvious return value.

2001-09-27 22:40:38 +00:00

nfsserver

Make nfsm_dissect() have an obvious return value.

2001-09-27 22:40:38 +00:00

pc98

o Modify pc98 syscons code to use securelevel_gt() instead of

2001-09-26 20:26:32 +00:00

pccard

Fix, I think, The second slot problem with Cirrus Logic PD6729/30 parts:

2001-09-21 06:45:35 +00:00

pci

Fix typo in a comment.

2001-09-27 12:01:57 +00:00

posix4

KSE Milestone 2

2001-09-12 08:38:13 +00:00

powerpc

Catch up to recent removal of curpcb from globals.h.

2001-09-24 02:58:49 +00:00

rpc

…

sparc64

+ Fix misplacement of `txp'

2001-09-24 03:23:48 +00:00

svr4

…

sys

Restore this file to style(9). Mostly consists of whitespace fixes in the

2001-09-27 20:39:52 +00:00

tools

KSE Milestone 2

2001-09-12 08:38:13 +00:00

ufs

- Fix some minor whitespace nits.

2001-09-27 21:04:13 +00:00

vm

o Modify access control checks in mmap() to use securelevel_gt() instead

2001-09-26 20:29:39 +00:00

Makefile

…