summaryrefslogtreecommitdiff
path: root/usr/src/cmd/ipf
AgeCommit message (Collapse)AuthorFilesLines
2007-05-036455242 nightly should be able to preserve all proto areas from a single build.kupfer1-0/+1
6467531 nightly(1) needs option to generate OpenSolaris delivery --HG-- rename : usr/src/pkgdefs/SUNWftpu/copyright => usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/LICENSE
2007-01-19PSARC 2006/366 IP Instancesdh15512216-199/+1061
6289221 RFE: Need virtualized ip-stack for each local zone 6512601 panic in ipsec_in_tag - allocation failure 6514637 error message from dhcpagent: add_pkt_opt: option type 60 is missing required value 6364643 RFE: allow persistent setting of interface flags per zone 6307539 RFE: Invalid network address causes zone boot failure 5041214 Allow IPMP configuration with zones 5005887 RFE: zoneadmd should support plumbing an interface via DHCP 4991139 RFE: zones should provide a mechanism to configure a defaultrouter for a zone 6218378 zoneadmd doesn't set the netmask for non-loopback addresses hosted on lo0 4963280 zones: need to virtualize the IPv6 default address selection mechanism 4963285 zones: need support of stateless address autoconfiguration for IPv6 5048068 zones don't boot if one of its interfaces has failed 5057154 RFE: ability to change interface status from within a zone 4963287 zones should support the plumbing of the first (and only) logical interface 4978517 TCP privileged port space should be partitioned per zone 5023347 zones don't work well with network routes other than default 4963372 investigate whether global zone can act as a router for local zones 6378364 RFE: Allow each zone to have its own virtual IPFilter
2006-11-276489821 Functions ip_nexthop and ip_nexthop_route should be removeddr1469921-1/+1
6489978 Local IPv6 connections with IPv6 extensions headers fail 6490546 Panic when creating a 6to4 tunnel 6492882 wrong error text in /lib/svc/method/ipfilter for IPv6 6493833 assert failed due to unloading ipf with populated state table
2006-11-02PSARC 2006/552 Quagga SMF Modificationsamaguire1-12/+3
6312914 routeadm needs to support smf-based routing services 6440342 remove redundancies in smf-related makefiles by moving manifest rules to usr/src/cmd/Makefile.targ --HG-- rename : usr/src/cmd/cmd-inet/usr.sbin/in.rdisc.c => usr/src/cmd/cmd-inet/usr.sbin/in.rdisc/in.rdisc.c rename : usr/src/cmd/cmd-inet/usr.sbin/routeadm.c => usr/src/cmd/cmd-inet/usr.sbin/routeadm/routeadm.c rename : deleted_files/usr/src/cmd/volmgt/etc/Makefile => usr/src/cmd/volmgt/etc/Makefile
2006-10-286343157 svcadm disable ipfilter does not flush the rulesdr1469921-2/+5
6484763 PFHOOKS breaks post-ACQUIRE ESP processing 6485599 msgpullup/pullupmsg now implies either M_DATA or M_MULTIDATA 6485731 panic in fil.c trying to release ipf_mutex while not held 6485761 ipfilter kernel module always enables itself on load 6485781 mutex_enter: bad mutex in ipflog_read 6485943 MSG_FWCOOKED_* survived attempted genocide 6486513 too much of a good thing can be bad 6486575 use ipf -D twice will panic the system 6487360 physical_in hook inserted twice into ip_input() for onnv putback
2006-10-20PSARC/2005/334 Packet Filtering Hooksdr14699215-2185/+163
PSARC/2006/321 ARP packet filtering Hooks 6401219 use of pullupmsg() considered destructive - clears h/w checksum flags 6418698 PSARC/2005/334 - Packet Filtering Hooks API 6449290 package prototype files in usr/src/pkgdefs/SUNWipfr missing CDDL 6449292 package prototype files in usr/src/pkgdefs/SUNWipfu missing CDDL 6449296 Makefiles for ipf kernel module building missing CDDL 6473996 "fastroute" + "nat" packets cause memory leaks in ipfilter --HG-- rename : usr/src/cmd/ipf/etc/pfil.ap.sh => deleted_files/usr/src/cmd/ipf/etc/pfil.ap.sh rename : usr/src/cmd/ipf/pfild/Makefile => deleted_files/usr/src/cmd/ipf/pfild/Makefile rename : usr/src/cmd/ipf/pfild/pfild.c => deleted_files/usr/src/cmd/ipf/pfild/pfild.c rename : usr/src/cmd/ipf/pfild/vas.c => deleted_files/usr/src/cmd/ipf/pfild/vas.c rename : usr/src/cmd/ipf/svc/pfil => deleted_files/usr/src/cmd/ipf/svc/pfil rename : usr/src/cmd/ipf/svc/pfil.xml => deleted_files/usr/src/cmd/ipf/svc/pfil.xml rename : usr/src/uts/common/inet/pfil/compat.h => deleted_files/usr/src/uts/common/inet/pfil/compat.h rename : usr/src/uts/common/inet/pfil/ndd.c => deleted_files/usr/src/uts/common/inet/pfil/ndd.c rename : usr/src/uts/common/inet/pfil/os.h => deleted_files/usr/src/uts/common/inet/pfil/os.h rename : usr/src/uts/common/inet/pfil/pfil.c => deleted_files/usr/src/uts/common/inet/pfil/pfil.c rename : usr/src/uts/common/inet/pfil/pfil.conf => deleted_files/usr/src/uts/common/inet/pfil/pfil.conf rename : usr/src/uts/common/inet/pfil/pfil.h => deleted_files/usr/src/uts/common/inet/pfil/pfil.h rename : usr/src/uts/common/inet/pfil/pfild.h => deleted_files/usr/src/uts/common/inet/pfil/pfild.h rename : usr/src/uts/common/inet/pfil/pfildrv.c => deleted_files/usr/src/uts/common/inet/pfil/pfildrv.c rename : usr/src/uts/common/inet/pfil/pfilstream.c => deleted_files/usr/src/uts/common/inet/pfil/pfilstream.c rename : usr/src/uts/common/inet/pfil/pkt.c => deleted_files/usr/src/uts/common/inet/pfil/pkt.c rename : usr/src/uts/common/inet/pfil/qif.c => deleted_files/usr/src/uts/common/inet/pfil/qif.c rename : usr/src/uts/common/inet/pfil/qif.h => deleted_files/usr/src/uts/common/inet/pfil/qif.h rename : usr/src/uts/intel/pfil/Makefile => deleted_files/usr/src/uts/intel/pfil/Makefile rename : usr/src/uts/sparc/pfil/Makefile => deleted_files/usr/src/uts/sparc/pfil/Makefile rename : usr/src/uts/common/inet/pfil/misc.c => usr/src/uts/common/inet/ipf/misc.c
2006-10-176478243 ippool can dump core (Regression)jojemann3-4/+36
6480720 ipnat usage output incorrect (Regression) 6480905 some ipfilter tools once again don't check for return values from memory allocation (Regression)
2006-10-066476429 ipnat once again does not allow rdr rules to specify a 0/0 ↵jojemann3-2/+11
destination (Regression) 6476724 parsing error with ipnat and extended port matching has returned (Regression) 6477791 IPfilter does not display all IPv6 addresses correctly after "Code Merge" (Regression)
2006-08-246427271 ipfilter now supports IPv6 rules, but still assumes hostnames ↵jojemann12-997/+183
resolve to IPv4 addresses. 6458962 Several IPfilter source files are "obsolete" and can be deleted. --HG-- rename : usr/src/cmd/ipf/lib/common/hostmask.c => deleted_files/usr/src/cmd/ipf/lib/common/hostmask.c rename : usr/src/cmd/ipf/lib/common/hostnum.c => deleted_files/usr/src/cmd/ipf/lib/common/hostnum.c rename : usr/src/cmd/ipf/lib/common/natparse.c => deleted_files/usr/src/cmd/ipf/lib/common/natparse.c rename : usr/src/cmd/ipf/lib/common/to_interface.c => deleted_files/usr/src/cmd/ipf/lib/common/to_interface.c
2006-08-11PSARC 2005/707 Surya: Forwarding Performance Enhancementsangeeta1-0/+3
6385609 Solaris has poor V4 forwarding throughput --HG-- rename : usr/src/uts/common/inet/ipf/radix.c => usr/src/common/net/patricia/radix.c rename : deleted_files/usr/src/uts/common/inet/ipf/radix.h => usr/src/uts/common/net/radix.h
2006-07-19PSARC 2006/082 IP Filter Code Merge on ip_fil4.1.9yz15524067-1797/+2935
4912568 ipftest ipf ipfstat ipnat ippool need a non-name resolution flag 5040248 ipfs -W fails to save kernel state tables 5081834 syntax parser reports wrong error position and line number 5094575 keyword "netmask" is un-supported in ipnat.conf (4) 6181751 ipf parser fails on wrong subnet notations 6181773 ipf parser fails on wrong port ranges 6248745 ipnat drops packets if the IP header is not 32 bit aligned 6340621 RFE: IP Filter code merge on ip_fil4.1.9 6359805 ipf command incorrectly check options in rules and core dumps 6395837 ipnat tcpudp parsing is incomplete 6426469 IPFilter rejects IPv6 neighbour discovery packets 6447872 usr/src/common/ipf/ip_compat.h should not be CDDL --HG-- rename : usr/src/common/ipf/bpf-ipf.h => usr/src/uts/common/inet/ipf/bpf-ipf.h rename : usr/src/common/ipf/fil.c => usr/src/uts/common/inet/ipf/fil.c rename : usr/src/common/ipf/ip_auth.c => usr/src/uts/common/inet/ipf/ip_auth.c rename : usr/src/common/ipf/ip_fil_solaris.c => usr/src/uts/common/inet/ipf/ip_fil_solaris.c rename : usr/src/common/ipf/ip_frag.c => usr/src/uts/common/inet/ipf/ip_frag.c rename : usr/src/common/ipf/ip_htable.c => usr/src/uts/common/inet/ipf/ip_htable.c rename : usr/src/common/ipf/ip_log.c => usr/src/uts/common/inet/ipf/ip_log.c rename : usr/src/common/ipf/ip_lookup.c => usr/src/uts/common/inet/ipf/ip_lookup.c rename : usr/src/common/ipf/ip_nat.c => usr/src/uts/common/inet/ipf/ip_nat.c rename : usr/src/common/ipf/ip_pool.c => usr/src/uts/common/inet/ipf/ip_pool.c rename : usr/src/common/ipf/ip_proxy.c => usr/src/uts/common/inet/ipf/ip_proxy.c rename : usr/src/common/ipf/ip_state.c => usr/src/uts/common/inet/ipf/ip_state.c rename : usr/src/common/ipf/ipf.h => usr/src/uts/common/inet/ipf/ipf.h rename : usr/src/common/ipf/ipmon.h => usr/src/uts/common/inet/ipf/ipmon.h rename : usr/src/common/ipf/ipt.h => usr/src/uts/common/inet/ipf/ipt.h rename : usr/src/common/ipf/Makefile => usr/src/uts/common/inet/ipf/netinet/Makefile rename : usr/src/common/ipf/ip_auth.h => usr/src/uts/common/inet/ipf/netinet/ip_auth.h rename : usr/src/common/ipf/ip_compat.h => usr/src/uts/common/inet/ipf/netinet/ip_compat.h rename : usr/src/common/ipf/ip_fil.h => usr/src/uts/common/inet/ipf/netinet/ip_fil.h rename : usr/src/common/ipf/ip_frag.h => usr/src/uts/common/inet/ipf/netinet/ip_frag.h rename : usr/src/common/ipf/ip_ftp_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_ftp_pxy.c rename : usr/src/common/ipf/ip_h323_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_h323_pxy.c rename : usr/src/common/ipf/ip_htable.h => usr/src/uts/common/inet/ipf/netinet/ip_htable.h rename : usr/src/common/ipf/ip_ipsec_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_ipsec_pxy.c rename : usr/src/common/ipf/ip_irc_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_irc_pxy.c rename : usr/src/common/ipf/ip_lookup.h => usr/src/uts/common/inet/ipf/netinet/ip_lookup.h rename : usr/src/common/ipf/ip_nat.h => usr/src/uts/common/inet/ipf/netinet/ip_nat.h rename : usr/src/common/ipf/ip_netbios_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_netbios_pxy.c rename : usr/src/common/ipf/ip_pool.h => usr/src/uts/common/inet/ipf/netinet/ip_pool.h rename : usr/src/common/ipf/ip_proxy.h => usr/src/uts/common/inet/ipf/netinet/ip_proxy.h rename : usr/src/common/ipf/ip_raudio_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_raudio_pxy.c rename : usr/src/common/ipf/ip_rcmd_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_rcmd_pxy.c rename : usr/src/common/ipf/ip_rpcb_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_rpcb_pxy.c rename : usr/src/common/ipf/ip_state.h => usr/src/uts/common/inet/ipf/netinet/ip_state.h rename : usr/src/common/ipf/ipl.h => usr/src/uts/common/inet/ipf/netinet/ipl.h rename : usr/src/common/ipf/opts.h => usr/src/uts/common/inet/ipf/opts.h rename : usr/src/common/ipf/radix.c => usr/src/uts/common/inet/ipf/radix.c rename : usr/src/common/ipf/radix.h => usr/src/uts/common/inet/ipf/radix.h rename : usr/src/common/ipf/solaris.c => usr/src/uts/common/inet/ipf/solaris.c rename : usr/src/uts/common/inet/ipf/compat.h => usr/src/uts/common/inet/pfil/compat.h rename : usr/src/uts/common/inet/ipf/misc.c => usr/src/uts/common/inet/pfil/misc.c rename : usr/src/uts/common/inet/ipf/ndd.c => usr/src/uts/common/inet/pfil/ndd.c rename : usr/src/uts/common/inet/ipf/os.h => usr/src/uts/common/inet/pfil/os.h rename : usr/src/uts/common/inet/ipf/pfil.c => usr/src/uts/common/inet/pfil/pfil.c rename : usr/src/uts/common/inet/ipf/pfil.conf => usr/src/uts/common/inet/pfil/pfil.conf rename : usr/src/uts/common/inet/ipf/pfil.h => usr/src/uts/common/inet/pfil/pfil.h rename : usr/src/common/ipf/pfild.h => usr/src/uts/common/inet/pfil/pfild.h rename : usr/src/uts/common/inet/ipf/pfildrv.c => usr/src/uts/common/inet/pfil/pfildrv.c rename : usr/src/uts/common/inet/ipf/pfilstream.c => usr/src/uts/common/inet/pfil/pfilstream.c rename : usr/src/uts/common/inet/ipf/pkt.c => usr/src/uts/common/inet/pfil/pkt.c rename : usr/src/uts/common/inet/ipf/qif.c => usr/src/uts/common/inet/pfil/qif.c rename : usr/src/uts/common/inet/ipf/qif.h => usr/src/uts/common/inet/pfil/qif.h
2006-05-305040252 /var/db/ipf not created when ipfilter is installeddr1469924-7/+8
6231450 consider moving ipmon.pid to /var/run 6346648 /lib/svc/method/pfil should use "-c" option for "svcprop -p general/enabled svc:/network/ipfilter" 6415517 pfil.ap is missing an entry for "ce" interface on x86 6428485 kernel vsnprintf does not handle %*.*s correctly
2006-03-28PSARC 2005/426 libmd - message digest librarydarrenm1-3/+3
4795652 /usr/include/security should be listed in Targetdirs 4937832 x86 optimization of SHA-1 6188861 provide libmd - message digest library --HG-- rename : usr/src/cmd/cmd-inet/usr.bin/pppd/md4.c => deleted_files/usr/src/cmd/cmd-inet/usr.bin/pppd/md4.c rename : usr/src/cmd/cmd-inet/usr.bin/pppd/md4.h => deleted_files/usr/src/cmd/cmd-inet/usr.bin/pppd/md4.h rename : usr/src/cmd/cmd-inet/usr.bin/pppd/sha1.c => deleted_files/usr/src/cmd/cmd-inet/usr.bin/pppd/sha1.c rename : usr/src/cmd/cmd-inet/usr.bin/pppd/sha1.h => deleted_files/usr/src/cmd/cmd-inet/usr.bin/pppd/sha1.h rename : usr/src/cmd/cmd-inet/usr.bin/pppd/sha1_consts.h => deleted_files/usr/src/cmd/cmd-inet/usr.bin/pppd/sha1_consts.h rename : usr/src/common/net/wanboot/crypt/sha1.c => deleted_files/usr/src/common/net/wanboot/crypt/sha1.c rename : usr/src/lib/libmd5/spec/Makefile => deleted_files/usr/src/lib/libmd5/spec/Makefile rename : usr/src/lib/libmd5/spec/Makefile.targ => deleted_files/usr/src/lib/libmd5/spec/Makefile.targ rename : usr/src/lib/libmd5/spec/amd64/Makefile => deleted_files/usr/src/lib/libmd5/spec/amd64/Makefile rename : usr/src/lib/libmd5/spec/i386/Makefile => deleted_files/usr/src/lib/libmd5/spec/i386/Makefile rename : usr/src/lib/libmd5/spec/md5.spec => deleted_files/usr/src/lib/libmd5/spec/md5.spec rename : usr/src/lib/libmd5/spec/sparc/Makefile => deleted_files/usr/src/lib/libmd5/spec/sparc/Makefile rename : usr/src/lib/libmd5/spec/sparcv9/Makefile => deleted_files/usr/src/lib/libmd5/spec/sparcv9/Makefile rename : usr/src/lib/libmd5/spec/versions => deleted_files/usr/src/lib/libmd5/spec/versions rename : usr/src/lib/libmd5_psr/Makefile => deleted_files/usr/src/lib/libmd5_psr/Makefile rename : usr/src/lib/libmd5_psr/Makefile.com => deleted_files/usr/src/lib/libmd5_psr/Makefile.com rename : usr/src/lib/libmd5_psr/Makefile.targ => deleted_files/usr/src/lib/libmd5_psr/Makefile.targ rename : usr/src/lib/libmd5_psr/inc.flg => deleted_files/usr/src/lib/libmd5_psr/inc.flg rename : usr/src/lib/libmd5_psr/sparc/Makefile => deleted_files/usr/src/lib/libmd5_psr/sparc/Makefile rename : usr/src/lib/libmd5_psr/sparc/sun4u/Makefile => deleted_files/usr/src/lib/libmd5_psr/sparc/sun4u/Makefile rename : usr/src/lib/libmd5_psr/sparcv9/Makefile => deleted_files/usr/src/lib/libmd5_psr/sparcv9/Makefile rename : usr/src/lib/libmd5_psr/sparcv9/sun4u/Makefile => deleted_files/usr/src/lib/libmd5_psr/sparcv9/sun4u/Makefile rename : usr/src/lib/libmd5_psr/spec/Makefile => deleted_files/usr/src/lib/libmd5_psr/spec/Makefile rename : usr/src/lib/libmd5_psr/spec/Makefile.com => deleted_files/usr/src/lib/libmd5_psr/spec/Makefile.com rename : usr/src/lib/libmd5_psr/spec/sparc/Makefile => deleted_files/usr/src/lib/libmd5_psr/spec/sparc/Makefile rename : usr/src/lib/libmd5_psr/spec/sparc/sun4u/Makefile => deleted_files/usr/src/lib/libmd5_psr/spec/sparc/sun4u/Makefile rename : usr/src/lib/libmd5_psr/spec/sparc/versions-sun4u => deleted_files/usr/src/lib/libmd5_psr/spec/sparc/versions-sun4u rename : usr/src/lib/libmd5_psr/spec/sparcv9/Makefile => deleted_files/usr/src/lib/libmd5_psr/spec/sparcv9/Makefile rename : usr/src/lib/libmd5_psr/spec/sparcv9/md5_psr-sun4u.spec => deleted_files/usr/src/lib/libmd5_psr/spec/sparcv9/md_psr-sun4u.spec rename : usr/src/lib/libmd5_psr/spec/sparcv9/sun4u/Makefile => deleted_files/usr/src/lib/libmd5_psr/spec/sparcv9/sun4u/Makefile rename : usr/src/lib/libmd5_psr/spec/sparcv9/versions-sun4u => deleted_files/usr/src/lib/libmd5_psr/spec/sparcv9/versions-sun4u rename : usr/src/lib/libmd5_psr/spec/sparc/md5_psr-sun4u.spec => deleted_files/usr/src/lib/libmd_psr/spec/sparc/md_psr-sun4u.spec rename : usr/src/cmd/volmgt/vold/vold_md4.c => usr/src/common/crypto/md4/md4.c rename : usr/src/cmd/volmgt/vold/md4.h => usr/src/lib/libmd/common/md4.h rename : usr/src/head/md5.h => usr/src/lib/libmd/common/md5.h rename : usr/src/lib/libmd5/llib-lmd5 => usr/src/lib/libmd5/common/llib-lmd5
2006-03-276370137 pfil.ap is missing an entry for e1000g interfaces on sparc machinesonnv_37yw1619641-1/+2
2006-03-076362056 IP Filter not for forwarding interface-to-interface traffic when ↵yz1552401-2/+2
destination off LAN
2006-02-166373357 ipfilter tools need to check return values from memory allocationschuster11-6/+107
2005-12-126361450 ippool -f fails in snv_29jojemann1-3/+3
2005-11-216347453 backwards compatible comma pool delimiter forgot ipv6jojemann1-2/+3
2005-10-286333506 Changes to ippool -f may break legacy applicationsml379951-1/+3
2005-10-116199500 IP Filter's ipmon should be run with absolute path namedr1469923-6/+7
6264454 "make all" fails in usr/src/cmd/ipf 6267778 reference count assertion failure in ip_ire.c 6330610 parsing error with ipnat and extended port matching 6332961 network/ipfilter ipfilter test tproxy_3h_01_rdr causes snv_22 to hang
2005-09-304951608 RFE: IP Filter should filter IPv6 trafficml3799525-224/+1122
2005-09-176307568 ipfstat -t doesn't display the idle time correctlyyx1606014-2/+28
6319881 ipnat does not allow rdr rules to specify a 0/0 destination 6321197 "ipf -n" doesn't work with "-r" or "-z" option
2005-09-076307498 ipf/ipfstat doesn't print out mbcast option when used in rulesyx1606011-0/+35
2005-08-166261284 ipfilter can fail to startup without entering into maintenance modeml379951-1/+4
2005-08-106271179 gcc and pfild don't get alongpj1576031-3/+3
2005-07-186260673 pfild should be able to send large packagespj1576031-2/+2
2005-06-14OpenSolaris Launchstevel@tonic-gate159-0/+23682
generated by cgit v1.2.3 (git 2.39.1) at 2025-06-23 05:57:15 +0000