diff options
| author | an207044 <none@none> | 2008-05-15 00:28:16 -0700 |
|---|---|---|
| committer | an207044 <none@none> | 2008-05-15 00:28:16 -0700 |
| commit | f17d2b412cd592f6085d3a1002cac662768ec1ae (patch) | |
| tree | f27091bab881b4f41d70f64c78a1624242228b9b /usr/src/cmd/ipf | |
| parent | f0243e0a614849de4aa0ea9de2c50de8532a346a (diff) | |
| download | illumos-gate-f17d2b412cd592f6085d3a1002cac662768ec1ae.tar.gz | |
6505685 Problems with applying "to" rule in IP Filter
6562635 TCP options are not processed correctly
6562648 IPF may drop connection, which chooses to scale window
6562721 IPF should also check SACK when doing stateful inspection
6595876 state timer should be reset when retransmission is seen
6651775 ipf does not handle half estab. connections well (conn. hangs with connection match result 4/0)
Diffstat (limited to 'usr/src/cmd/ipf')
| -rw-r--r-- | usr/src/cmd/ipf/tools/ipf_y.y | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/usr/src/cmd/ipf/tools/ipf_y.y b/usr/src/cmd/ipf/tools/ipf_y.y index 69c427efd2..6ea107f6e4 100644 --- a/usr/src/cmd/ipf/tools/ipf_y.y +++ b/usr/src/cmd/ipf/tools/ipf_y.y @@ -607,6 +607,7 @@ vianame: dup: IPFY_DUPTO name { strncpy(fr->fr_dif.fd_ifname, $2, sizeof(fr->fr_dif.fd_ifname)); free($2); + fr->fr_flags |= FR_DUP; } | IPFY_DUPTO name duptoseparator hostname { strncpy(fr->fr_dif.fd_ifname, $2, sizeof(fr->fr_dif.fd_ifname)); @@ -615,12 +616,14 @@ dup: IPFY_DUPTO name else bcopy(&$4, &fr->fr_dif.fd_ip6, sizeof(fr->fr_dif.fd_ip6)); yyexpectaddr = 0; + fr->fr_flags |= FR_DUP; free($2); } | IPFY_DUPTO name duptoseparator YY_IPV6 { strncpy(fr->fr_dif.fd_ifname, $2, sizeof(fr->fr_dif.fd_ifname)); bcopy(&$4, &fr->fr_dif.fd_ip6, sizeof(fr->fr_dif.fd_ip6)); yyexpectaddr = 0; + fr->fr_flags |= FR_DUP; free($2); } ; |