summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_nat.c
AgeCommit message (Collapse)Author
2000-08-10Whoops. Reapply Aaron's detach code fix. inadvertantly whacked in theKjell Wooding
3.3.18 import.
2000-08-10Import ipf 3.3.18. Fixes more problems with the in-kernel FTP proxy,Kjell Wooding
some nat state bugs, and ups the default state table size. See sbin/ipf/HISTORY for details.
2000-07-03Make nat_ifdetach() actually work; beck@ okAaron Campbell
2000-05-24Update to ipf 3.3.16. among other things, this addresses a security issueKjell Wooding
with certain rule configurations: * don't add TCP state if it is an RST packet and (attempt) to send out RST/ICMP packets in a manner that bypasses IP Filter.
2000-05-10ipf 3.3.14, fixes an ipnat problem and ip option mishandling, which the ↵Theo de Raadt
bridge code cares about
2000-05-01Update to ipfilter 3.3.13. This should be the last of the 3.3.x releases.Kjell Wooding
This patch fixes mostly ICMP timeout problems, as the ftp proxy changes were imported previously.
2000-04-05Update to ipf 3.3.12. Most fixes relate to hardening ofKjell Wooding
in-kernel ftp proxy. See sbin/ipf/HISTORY for details.
2000-03-13Import of Darren Reed's IPFilter 3.3.11. See sbin/ipf/HISTORY for detailedKjell Wooding
changelog. Documentation changes are now way behind. Volunteers?
2000-02-16Import IPFilter 3.3.9. Primarily, bugfixes since 3.3.8. See sbin/ipf/HISTORYKjell Wooding
for details.
2000-02-01Update to IPFilter 3.3.8. Man pages still to go. See sbin/ipf/HISTORYKjell Wooding
for details.
1999-12-17Patch to fix ipmon -F. /dev/ipnat and /dev/ipstate now handle SIOCIPFFB.Kjell Wooding
from darrenr@pobox.com
1999-12-17Update to Darren Reed's IPFilter 3.3.5Kjell Wooding
Fixes: realaudio proxy issues, "log level" printing, and source address for icmp replies (was reversed). Thoughtfully submitted by techs@obfuscation.org
1999-12-15Import of Darren Reed's IPFilter 3.3.4, including OpenBSD patches.Kjell Wooding
Many, many enhancements and improvements, including new in-kernel proxies, enhancements to logging, and many bugfixes. Note: Man pages have not yet been re-converted to mdoc.
1999-08-08Support detaching of network interfaces. Still work to do in ipf, andNiklas Hallqvist
other families than inet.
1999-06-07I do not believe thisTheo de Raadt
1999-02-05ipf 3.2.10; work by kjellTheo de Raadt
1999-02-01remove the correct KFREEDavid Leonard
1999-01-29remove multiple freeDavid Leonard
1998-10-11bad ioctls return EINVAL; garath@code.ridgefield.orgTheo de Raadt
1998-09-15Updated to v3.2.9 of Darren's codebase. His code reimplements variablepattonme
locking, replaces u_long's with u_32_t to properly handle 64bit archs. Wrapped OpenBSD specific preprocessor logic.
1998-06-27delete extra KFREE(); d@openbsd.orgTheo de Raadt
1998-02-17$OpenBSD$dgregor
1998-01-26IPF 3.2.3dgregor
1997-06-23merge in 3.1.11kstailey
1997-04-18Use the right types on 64-bit machinesNiklas Hallqvist
1997-02-13prevent free()ed object from being referencedkstailey
1997-02-12protect ip_natexpirekstailey
1997-02-11IPF 1.3.7kstailey
1997-01-18syslog.h -> sys/syslog.hJason Downs
THIS IS THE KERNEL, DAMNIT.
1996-10-24<sys/dir.h> is for use as a compatibility interface only. Warn ifThorsten Lockert
included by kernel modules, and also remove use from any modules that currently attempt to use it.
1996-10-08Prototype & Stylistic fixes for high -W gcc levelsNiklas Hallqvist
1996-07-18ipfilter 3.1.0dm
1996-05-13fix return-rstdm
1996-05-10ipfilter 3.0.4dm
1996-01-25IP filter 3.0.1dm