Commit Graph

21 Commits

Author SHA1 Message Date
Pav Lucistnik
8075c5bed6 - Update to 2.02
* Fix severe byte order related problem with "route-to" rules
    (much help from Joris Vandalon with testing here)
  * Make tcpdump's -w flag work for if_pfsync
  * Fix byte order and drop lock for icmp_error() calls.
    (note that it is necessary to allow icmp_error messages - from
    "block-policy return" - as FreeBSD does not know about pf's
    special tags, yet).

- update ALTQ-message to point to the new 5.2R-patchset from rofug.ro
  as well

PR:		ports/61318
Submitted by:	Max Laier <max@love2party.net> (maintainer)
2004-01-13 20:41:19 +00:00
Bruce M Simpson
2830eb5a46 Supersedes ports/59442 and previous hasty-fix, and fixes the following:
- Build with __FreeBSD_version > 501114 (see bms commit)
 - Build with new route.h (no RTF_PRCLONING)
 - Don't use hardware assistance on framentation when DF is set.
 - Allow pftcpdump -w to be used with pfsync.

Found-by:	bento / Pyun YongHyeon
Submitted by:	Max Laier
PR:		ports/59548
2003-11-25 14:08:02 +00:00
Bruce M Simpson
0765a72da5 Fix pf for ${OSVERSION} >= 501114, i.e. the 5.2 freeze point, when andre@'s
tcp hostcache changes took place.
2003-11-19 14:31:36 +00:00
James E. Housley
b0044f05e0 Bump port version to 2.00:
- Build again with FreeBSD_version > 501113 (if_xname)
 - Fix some byte order problems with route-to rules
 - Stable release

PR:		589037
Submitted By:	MAINTAINER
2003-11-09 16:00:18 +00:00
Kirill Ponomarev
b8e7204389 - Remove bogus file from patches
PR:		58354
Submitted by:	maintainer
No cookie for:	edwin
2003-10-21 23:08:50 +00:00
Kirill Ponomarev
2defaaee9d - Add patch to fix a build problem with NOINET6 defined.
- Bump PORTREVISION

PR:		57812
Submitted by:	maintainer
2003-10-10 07:26:28 +00:00
Sergey A. Osokin
f02f62890b Remove NULL patch. 2003-10-02 21:31:37 +00:00
Sergey A. Osokin
c8f2ddf584 Update to 1.66
PR:		ports/57452
Submitted by	Max Laier <max@love2party.net> (maintainer)
2003-10-02 20:58:23 +00:00
Edwin Groothuis
45fb9aeee0 Update port: security/pf - OpenBSD 3.4 pf
Port update after API change in PFIL_HOOKS in -current and
	OpenBSD 3.4 Release.

PR:		 ports/57305
Submitted by:	Max Laier <max@love2party.net>
2003-09-28 13:27:06 +00:00
Edwin Groothuis
54f5773685 FIXUP for possible remote DoS w/ scrub rules
http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_norm.c?sortby=date

PR:		-
Submitted by:	mlaier@#bsdcode
Obtained from:	OpenBSD-Current
2003-08-29 03:14:03 +00:00
Foxfair Hu
b21f67a66c PR:
Submitted by:
Reviewed by:
Approved by:
Obtained from:
MFC after:
Add a patch to fix a u_int_16 overflow after new merged gcc.

Submitted by:		Pyun YongHyeon <yongari@kt-is.co.kr>
Reviewed by:		maintainer
tested ok by:		all current platforms
2003-07-18 01:51:24 +00:00
Foxfair Hu
cb8530724e PR:
Submitted by:
Reviewed by:
Approved by:
Obtained from:
MFC after:
Add a critical patch to fix a problem with normalization, which does not
cause problems in normal operation but might lead to a pagefault => crash.

Submitted by:	Pyun YongHyeon <yongari@kt-is.co.kr>
Approved by:	maintainer
2003-07-04 01:28:53 +00:00
Foxfair Hu
dca19a09d9 PR:
Submitted by:
Reviewed by:
Approved by:
Obtained from:
MFC after:
Fix 'make index' warning.

Pointed out by: parv_fm@emailgroups.net
2003-07-03 00:40:20 +00:00
Foxfair Hu
07b27b7bc8 Use a better comment in system passwd file when we create the user 'proxy'
at first time. No necessary to bump PRTREVISION so only force commit in
Makefile.
2003-06-26 18:04:43 +00:00
Foxfair Hu
3cf9d23aaa Approved by: maintainer
Reformat pkg-install & pkg-message, and add 64-bit platform fix.
Note: pf now register its user as proxy:proxy which uid/gid is 62:62.
2003-06-26 16:20:13 +00:00
Foxfair Hu
d2ff3920b8 PR:
Submitted by:	maintainer
Reviewed by:
Approved by:
Obtained from:
MFC after:
Add two patches to solve the following problems:

patch-ab
 - resolves a problem with a mbuf-tag in 5.1
 - Submitted by: Pyun YongHyeon <yongari@kt-is.co.kr>

patch-ac
 - pulls in two critical fixes from OpenBSD patch branch
 - Obtained from: OpenBSD

Change BROKEN to IGNORE tag in Makefile, suggested by: kris@
&& bump PORTREVISION.
2003-06-18 04:46:34 +00:00
Foxfair Hu
9c34cb3269 Submitted by: maintainer
Obtained from:	Andrzej Tobola <san@iem.pw.edu.pl>
Fix build if NOINET6 is defined, and bump PORTREVISION to aware this.
2003-06-16 03:14:27 +00:00
Foxfair Hu
1151514036 Submitted by: Kjell <la3sg@frisurf.no>
Reviewed by:	maintainer
Correct wording in pkg-message to avoid a possible copy & paste
problem, and bump PORTREVISION.
2003-06-14 01:24:49 +00:00
Sheldon Hearn
d190d554cd Correct typo in URL.
Submitted by:	maintainer
2003-06-13 14:49:51 +00:00
Dmitry Sivachenko
298ce28a76 Correct a typo. 2003-06-13 10:57:08 +00:00
Foxfair Hu
588291566f Add pf 1.0, OpenBSD's pf (packetfilter) as in OpenBSD 3.3 as a loadable
kernel module.

PR:		52121
Submitted by:	Max Laier <max@love2party.net>
2003-06-13 01:09:29 +00:00