aboutsummaryrefslogtreecommitdiff
path: root/lib/libalias
Commit message (Collapse)AuthorAgeFilesLines
* MFC: Don't forget to recalculate the IP checksum of the originalRuslan Ermilov2002-07-251-4/+12
| | | | | | | IP datagram embedded into ICMP error message. Notes: svn path=/stable/4/; revision=100665
* Bring ipfw2 into the -stable tree. This will give more people aLuigi Rizzo2002-07-242-36/+154
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | chance to test it, and hopefully accelerate the transition from the old to the new ipfw code. NOTE: THIS COMMIT WILL NOT CHANGE THE FIREWALL YOU USE, NOR A SINGLE BIT IN YOUR KERNEL AND BINARIES. YOU WILL KEEP USING YOUR OLD "ipfw" UNLESS YOU: + add "options IPFW2" (undocumented) to your kernel config file; + compile and install sbin/ipfw and lib/libalias with make -DIPFW2 in other words, you must really want it. On the other hand, i believe you do really want to use this new code. In addition to being twice as fast in processing individual rules, you can use more powerful match patterns such as ... ip from 1.2.3.0/24{50,6,27,158} to ... ... ip from { 1.2.3.4/26 or 5.6.7.8/22 } to ... ... ip from any 5-7,9-66,1020-3000,4000-5000 to ... i.e. match sparse sets of IP addresses in constant time; use "or" connectives between match patterns; have multiple port ranges; etc. which I believe will dramatically reduce your ruleset size. As an additional bonus, "keep-state" rules will now send keepalives when the rule is about to expire, so you will not have your remote login sessions die while you are idle. The syntax is backward compatible with the old ipfw. A manual page documenting the extensions has yet to be completed. Notes: svn path=/stable/4/; revision=100592
* MFC: 1.34: make "type encode_ip_hdr" transparent TCP proxying really work.Ruslan Ermilov2001-12-181-1/+3
| | | | Notes: svn path=/stable/4/; revision=88133
* MFC: Reduce gratuitous diffs to -CURRENT.Ruslan Ermilov2001-12-171-3/+3
| | | | Notes: svn path=/stable/4/; revision=88037
* MFC: 1.17: Punch firewall holes for passive mode internal FTP server.Ruslan Ermilov2001-12-061-5/+2
| | | | Notes: svn path=/stable/4/; revision=87439
* MFC: style(9)ifyBrian Somers2001-11-232-243/+227
| | | | Notes: svn path=/stable/4/; revision=86817
* MFC: cmott@scientech.com -> cm@linktel.netBrian Somers2001-11-039-10/+10
| | | | Notes: svn path=/stable/4/; revision=85966
* MFC: 1.14:Ruslan Ermilov2001-10-021-3/+4
| | | | | | | | | | | | | | | | | Fixed the bug that prevented communication with FTP servers behind NAT in extended passive mode if the server's public IP address was different from the main NAT address. This caused a wrong aliasing link to be created that did not route the incoming packets back to the original IP address of the server. natd -v -n pub0 -redirect_address localFTP publicFTP Note that even if localFTP == publicFTP, one still needs to supply the -redirect_address directive. It is needed as a helper because extended passive mode's 229 reply does not contain the IP address. Notes: svn path=/stable/4/; revision=84366
* MFC: 1.31: TFTP support.Ruslan Ermilov2001-10-021-0/+9
| | | | Notes: svn path=/stable/4/; revision=84365
* MFC: 1.10: Close the "IRC DCC" security breach.Ruslan Ermilov2001-08-211-0/+6
| | | | | | | Approved by: re Notes: svn path=/stable/4/; revision=82072
* MFC: Adjust copyrightBrian Somers2001-08-214-12/+0
| | | | | | | Approved by: jkh Notes: svn path=/stable/4/; revision=82027
* MFC: markup and misc fixes.Ruslan Ermilov2001-08-171-5/+3
| | | | | | | Approved by: re Notes: svn path=/stable/4/; revision=81834
* MFC: Make header files conform to style(9).David E. O'Brien2001-08-015-68/+62
| | | | Notes: svn path=/stable/4/; revision=80890
* Reduce diff to -current.David E. O'Brien2001-08-011-11/+10
| | | | Notes: svn path=/stable/4/; revision=80889
* MFC: rev 1.28 (make headers conform to style(9))David E. O'Brien2001-08-011-13/+15
| | | | Notes: svn path=/stable/4/; revision=80888
* MFC: BSD-style copyrightBrian Somers2001-06-041-0/+25
| | | | Notes: svn path=/stable/4/; revision=77702
* Add a BSD style copyrightBrian Somers2001-06-048-18/+232
| | | | | | | Approved by: Charles Mott <cmott@scientech.com> Notes: svn path=/stable/4/; revision=77700
* MFC: BSD-style copyrightBrian Somers2001-06-041-13/+22
| | | | Notes: svn path=/stable/4/; revision=77697
* MFC: MAN[1-9] -> MAN.Ruslan Ermilov2001-04-251-1/+1
| | | | Notes: svn path=/stable/4/; revision=75949
* MFC: recent mdoc(7) fixes.Ruslan Ermilov2001-03-061-24/+14
| | | | Notes: svn path=/stable/4/; revision=73888
* MFC: r1.4: sprinkle some consts aroundKris Kennaway2001-03-051-7/+9
| | | | Notes: svn path=/stable/4/; revision=73576
* MFC: r1.6: Ignore leading witespace in the string given to ↵Kris Kennaway2001-03-051-0/+1
| | | | | | | PacketAliasProxyRule(). Notes: svn path=/stable/4/; revision=73575
* MFC: the latest PPTP and misc fixes.Ruslan Ermilov2000-10-318-271/+307
| | | | Notes: svn path=/stable/4/; revision=68055
* MFC: (rev 1.3) fixed the calculations with UDP length.Ruslan Ermilov2000-09-211-2/+2
| | | | Notes: svn path=/stable/4/; revision=66159
* MFC: use strtok, eliminate warnings.Jordan K. Hubbard2000-09-203-8/+14
| | | | Notes: svn path=/stable/4/; revision=66102
* MFC: latest fixes from -current.Ruslan Ermilov2000-09-145-169/+103
| | | | Notes: svn path=/stable/4/; revision=65844
* MFC:John Baldwin2000-08-187-3/+392
| | | | | | | | | - Add address translation support for RTSP/RTP used by RealPlayer and Quicktime streaming media applications. - Add a BUGS section to the man page. Notes: svn path=/stable/4/; revision=64832
* MFC: (rev 1.37) fixed PunchFW code segmentation violation bug.Ruslan Ermilov2000-08-141-5/+4
| | | | Notes: svn path=/stable/4/; revision=64645
* This commit was manufactured by cvs2svn to create branch 'RELENG_4'.cvs2svn2000-07-271-0/+427
| | | | Notes: svn path=/stable/4/; revision=63904
* MFC: fixed PunchFWHole().Ruslan Ermilov2000-06-271-2/+3
| | | | Notes: svn path=/stable/4/; revision=62164
* MFC:Ruslan Ermilov2000-06-279-1021/+1776
| | | | | | | | | | | - Added support for FTP EPRT (RFC 2428) command. - Added support for passive mode FTP servers behind NAT. - Added security checks for FTP aliasing. - Load Sharing using IP Network Address Translation (RFC 2391). - Real PPTP support. Notes: svn path=/stable/4/; revision=62162
* This commit was manufactured by cvs2svn to create branch 'RELENG_4'.cvs2svn2000-06-261-0/+279
| | | | Notes: svn path=/stable/4/; revision=62108
* MFC: Revert the default behaviour for incoming connections soBrian Somers2000-05-112-3/+3
| | | | | | | | that they (once again) go to the target machine rather than the alias address. Notes: svn path=/stable/4/; revision=60364
* MFC: (rev 1.26) Apply TCP_EXPIRE_CONNECTED (86400 seconds) timeout onlyRuslan Ermilov2000-04-171-16/+10
| | | | | | | | | to established connections, after SYN packets were seen from both ends. PR: bin/17963 Notes: svn path=/stable/4/; revision=59319
* MFC: Redirect incoming connections to aliasAddress by defaultBrian Somers2000-04-132-15/+26
| | | | | | | | Use INADDR_ANY instead of 0 where appropriate Staticise _FindLinkIn and wrap GetDestPort with #ifndef NO_FW_PUNCH Notes: svn path=/stable/4/; revision=59188
* MFC: Charles' email addressBrian Somers2000-04-021-1/+1
| | | | Notes: svn path=/stable/4/; revision=58944
* Remove single-space hard sentence breaks. These degrade the qualitySheldon Hearn2000-03-021-1/+2
| | | | | | | | of the typeset output, tend to make diffs harder to read and provide bad examples for new-comers to mdoc. Notes: svn path=/head/; revision=57686
* -it do, among other things, clear out anyAlfred Perlstein2000-02-281-1/+1
| | | | | | | | | +it does, amongst other things, clear out any The old sentance didn't seem to make sense. Notes: svn path=/head/; revision=57544
* The flags PKT_ALIAS_PUNCH_FW and PKT_ALIAS_PROXY_ONLY were bothArchie Cobbs2000-02-021-1/+1
| | | | | | | | | | being defined as 0x40. Change the former to be 0x100. Submitted by: Erik Salander <erik@whistle.com> Approved by: jkh Notes: svn path=/head/; revision=56968
* Mention what PKT_ALIAS_PROXY_ONLY does.Brian Somers2000-02-021-1/+6
| | | | | | | Prompted by: archie Notes: svn path=/head/; revision=56967
* Replace beforeinstall target with new variables used by .mk system.Rodney W. Grimes2000-01-141-4/+1
| | | | | | | Reviewed by: marcel, and make world Notes: svn path=/head/; revision=55955
* Fix a '&&' that should have been a '&'.Archie Cobbs1999-12-101-1/+1
| | | | | | | Submitted by: Erik Salander <erik@whistle.com> Notes: svn path=/head/; revision=54415
* Fix several typos.Archie Cobbs1999-12-091-17/+17
| | | | | | | Submitted by: Erik Salander <erik@whistle.com> Notes: svn path=/head/; revision=54376
* Restore sub-chapters order.Alexey Zelkin1999-11-091-19/+16
| | | | | | | | PR: docs/14766 Submitted by: Kazutoshi Kubota <kazu@iworks.co.jp> Notes: svn path=/head/; revision=53038
* Properly handle the case when either the aliasing or source address ofRuslan Ermilov1999-09-271-26/+66
| | | | | | | | | | | | | | | | the link are equal to the default aliasing address. Do not zero them! This will fix the problem with non-working links added with the source and/or aliasing address equal to the default aliasing address, but the default aliasing address is set later, after the link has been set up, like both natd(8) and ppp(8) do (for objective reasons). Reviewed by: Brian Somers <brian@FreeBSD.org>, Eivind Eklund <eivind@FreeBSD.org>, Charles Mott <cmott@srv.net> Notes: svn path=/head/; revision=51727
* ReLink() partial links in FindLinkOut() in the same manner as we do itRuslan Ermilov1999-09-221-7/+15
| | | | | | | | | in FindLinkIn(). This will make TcpMonitorIn()/TcpMonitorOut() happy. Reviewed by: eivind Notes: svn path=/head/; revision=51550
* Restore previous version of FindLinkIn().Ruslan Ermilov1999-09-211-9/+8
| | | | | | | | Instead, natd(8) should be fixed to call PacketAliasSetAddress() as part of initialization, as required by libalias(3). Notes: svn path=/head/; revision=51506
* - Make partially specified permanent links (without `dst_addr' and/orRuslan Ermilov1999-09-211-11/+25
| | | | | | | | | | | | | | `dst_port') work for outgoing packets. - Make permanent links whose `alias_addr' matches the primary aliasing address `aliasAddress' work for incoming packets. - Typo fixes. Reviewed by: brian, eivind Notes: svn path=/head/; revision=51494
* sys/errno.h -> errno.hBrian Somers1999-09-211-1/+1
| | | | Notes: svn path=/head/; revision=51491
* - Optimization to the previous (rev 1.15) commit.Ruslan Ermilov1999-09-101-9/+11
| | | | | | | | | Requested by: eivind Discussed with: eivind Reviewed by: brian, eivind Notes: svn path=/head/; revision=51125
generated by cgit v1.2.3 (git 2.25.1) at 2026-02-21 07:51:17 +0000