summaryrefslogtreecommitdiff
path: root/sbin/ipf/parse.c
AgeCommit message (Collapse)Author
2000-04-05Update to ipf 3.3.12. Most fixes relate to hardening ofKjell Wooding
in-kernel ftp proxy. See sbin/ipf/HISTORY for details.
2000-03-13Import of Darren Reed's IPFilter 3.3.11. See sbin/ipf/HISTORY for detailedKjell Wooding
changelog. Documentation changes are now way behind. Volunteers?
2000-02-16Import IPFilter 3.3.9. Primarily, bugfixes since 3.3.8. See sbin/ipf/HISTORYKjell Wooding
for details.
2000-02-01Update to IPFilter 3.3.8. Man pages still to go. See sbin/ipf/HISTORYKjell Wooding
for details.
1999-12-28ipf could dump core when fed unfinished rules. Inspired by pr/995.Kjell Wooding
1999-12-17Update to Darren Reed's IPFilter 3.3.5Kjell Wooding
Fixes: realaudio proxy issues, "log level" printing, and source address for icmp replies (was reversed). Thoughtfully submitted by techs@obfuscation.org
1999-12-16Add the ability to use interface names in place of addressesKjell Wooding
in firewall rules. i.e. block return-rst in quick on fxp0 proto tcp from any to fxp0 port = 9999 This will make things like DHCP much easier to deal with in the future.
1999-12-15Import of Darren Reed's IPFilter 3.3.4, including OpenBSD patches.Kjell Wooding
Many, many enhancements and improvements, including new in-kernel proxies, enhancements to logging, and many bugfixes. Note: Man pages have not yet been re-converted to mdoc.
1999-07-06gethostname() is safeTheo de Raadt
1999-07-05Big cleanup of the userland ipf parsing code.Kjell Wooding
inet_addr() was replaced with inet_aton. atoi() tests were replaced by range-checked strtol calls. Error checking of ipf.rules input should be vastly improved now.
1999-06-06use inet_aton() instead of inet_addr()Theo de Raadt
1999-02-05ipf 3.2.10; work by kjellTheo de Raadt
1998-11-24Bail out instead of core-dumping if we don't understand the port range ↵Theo de Raadt
operator; ws@netbsd
1998-09-15Updated to v3.2.9 of Darren's codebase. His code reimplements variablepattonme
locking, replaces u_long's with u_32_t to properly handle 64bit archs. Wrapped OpenBSD specific preprocessor logic.
1998-07-09MAXHOSTNAMELENTheo de Raadt
1998-02-27network byte order; reedTheo de Raadt
1998-01-26IPF 3.2.3dgregor
1997-11-24fix parsing of various arguments; felix@mamba.pond.sub.orgTheo de Raadt
1997-08-2464bit fix, cast pointers to long, not int.Todd C. Miller
1997-06-24Remove an errant line that got missed in the merge.Todd C. Miller
1997-06-23merge in 3.1.11kstailey
1997-06-23sizeof(int) != sizeof(long)Theo de Raadt
1997-04-19thorpej:kstailey
icmpcode() returns an int, and, more importantly, -1 on failure. So, make this work on systems with unsigned chars by placing the return value of icmpcode() in a temporary variable, checking for failure, and then only setting fil.fr_icode (a char) upon success.
1997-04-06Fix int vs. long problemsTodd C. Miller
1997-02-26post 1.3.8 patcheskstailey
1997-02-26version 1.3.8kstailey
1997-01-17r?index -> strr?chrTodd C. Miller
1996-10-08Prototype & Stylistic fixes for high -W gcc levelsNiklas Hallqvist
1996-07-18ipfilter 3.1.0dm
1996-06-26Print empty TCP flags checks (like '/SA' ) properlydm
1996-06-23update rcsidTheo de Raadt
1996-05-10ipfilter 3.0.4dm
1996-01-25IP filter 3.0.1dm
1996-01-07from beurton@fnet.fr: Darren Reed's IP filterdm