summaryrefslogtreecommitdiff
path: root/usr/src/cmd/ipf/tools
AgeCommit message (Collapse)AuthorFilesLines
2021-03-10 [illumos-gate merge]Dan McDonald1-2/+1
commit ef1266efec4565fb64aeda150f6100dadde8bca8 13597 ipf: variable may be used uninitialized in this function commit d464f34577edaa31dd6978ec04d66a57529dd2c8 13587 stmf_sbd: array subscript 8 is above array bounds commit e3b270024f3e952233b61d3dcb4129ba75bf2720 13520 udapl_tavor: symbol 'dapls_ib_dbp_lock' is multiply-defined commit 089ef9c1879ed031043f7bb75bd1f472558dcbbf 13576 Add mdb ::linkerset command commit f6c47fdeea63a9c5d1abefdffb93d3f87e12b7d0 13605 ramdisk systems have no boot_archive commit 2587b3a0593a431a99cc2dc78bf1034e672a35e2 13606 tic(1) writes uninitialized data to some terminfo entries commit d893e05e2a64324d7059baefcbf7bd9872a32ad9 13595 logadm: failing to build test programs commit bfbf29e2d493eb4d7f76ee725d3229899602a088 13552 fs.d: multiply-defined symbols commit 19df86dc540ec91584176ab69b765edae4562731 13613 ipkg platform.xml missing /dev/signalfd commit 8993acd7cf0075cbfaf6df95d292f897079b5618 13591 bnxe: implicit conversion from 'enum <anonymous>' to 'lm_status_t' Conflicts: usr/src/cmd/mdb/common/mdb/mdb_cmds.c
2021-03-1013597 ipf: variable may be used uninitialized in this functionToomas Soome1-2/+1
Reviewed by: Dan McDonald <danmcd@joyent.com> Reviewed by: Robert French <robert@robertdfrench.me> Approved by: Joshua M. Clulow <josh@sysmgr.org>
2021-02-24 [illumos-gate merge]Dan McDonald1-75/+60
commit 64410b34750c079390ce58d7e159fcff545d09b0 13543 ipf: symbol 'thishost' is multiply-defined commit cfc9ef1dcc5d6a18778b3b10d738d19df873d1a3 13545 fm: multiply-defined symbols commit 1e094e1b56a6d925d6f7db6fec39db1c0e16451f 13547 tip: multiply-defined symbols commit d75c60626217c1d02658d48c8cabf81bd44c6729 13449 cxgbe IPv6 checksum and LSO support commit 67ba9ac97cfcbc2368432da6d6d5cc1eb888fda3 13554 vnics should advertise IPv6 checksums
2021-02-2513543 ipf: symbol 'thishost' is multiply-definedToomas Soome1-75/+60
Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Andy Fiddaman <andy@omniosce.org> Approved by: Dan McDonald <danmcd@joyent.com>
2020-10-14 [illumos-gate merge]Jason King1-1/+1
commit 35abe3277cc67d1a650f8fd7ce718b89fbece04d 13215 qsort_r(3C) manual synopsis was botched commit 85f4cb87104c72587029a6e0f1663332c85ba118 13184 Stop translating ld(1) options through cw(1) commit 0a36db39c3cd88f4799ecd9db875f43d834d0a81 13210 Removing multiple links from aggr leaves last link dangling Conflicts: usr/src/uts/sun4u/opl/unix/Makefile usr/src/lib/krb5/plugins/preauth/pkinit/Makefile.com usr/src/cmd/rcap/rcapstat/Makefile usr/src/cmd/cmd-inet/usr.sbin/snoop/Makefile usr/src/cmd/cmd-inet/usr.sbin/Makefile
2020-10-1313184 Stop translating ld(1) options through cw(1)Richard Lowe1-5/+3
Reviewed by: Jason King <jason.brian.king+illumos@gmail.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Approved by: Robert Mustacchi <rm@fingolfin.org>
2020-02-19OS-8113 enable ld guidance (#262)John Levon1-12/+10
Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com> Approved by: Jerry Jelinek <jerry.jelinek@joyent.com>
2019-06-27OS-7667 IPFilter needs to keep and report state for cloud firewall loggingDan McDonald7-4/+74
Portions contributed by: Mike Gerdts <mike.gerdts@joyent.com> Reviewed by: Mike Gerdts <mike.gerdts@joyent.com> Reviewed by: Cody Peter Mello <cody.mello@joyent.com> Reviewed by: Michael Zeller <mike.zeller@joyent.com> Approved by: Michael Zeller <mike.zeller@joyent.com>
2018-04-03 [illumos-gate merge]Jerry Jelinek2-5/+14
commit daefc4e3f903d9fdcba459a512dc09df2d416e91 9349 dnet: this statement may fall through commit f22cbd2db87ae3945ed6a9166f8b9d61b65c6ab9 9348 mii: duplicate 'const' declaration specifier commit 9f7e0c70988ceb8fe0dc3b631ab169a6af80ecc5 9347 c2audit: comparison between pointer and zero character constant commit cf95dd1699b88778bfda4b3d97e13237466400c4 9343 ib: comparison between pointer and zero character constant commit ae7a42b1202d66a3f5538a09de0a28329264fd15 9181 ipf: this use of "defined" may not be portable commit fff695d46af8deb863236b0569e68ea5a9bb6756 9308 mdnsd: this statement may fall through commit c15ff06a5cef5880e0afc02c7a87c6b22455f848 9307 rdist: this statement may fall through commit f6b0cb17c5dc44ae872c22ebbbd2663c98723311 9306 pppd: this use of "defined" may not be portable commit 5b85b345b049f7f7544f27a5b5e2b1bfa91da91e 9305 pppdump: this statement may fall through commit 7f24fc96855e7e749ca4e15ffdce8ea80fc94dbf 9131 regexp.h: this statement may fall through commit acca861ce6b8e9720b720b04d3880f44a3e10281 9301 nvme: Package description out of date commit 6f9a31a96454e5a48ab600f85d7e8b556b897e1a 9263 rdc: comparison between pointer and zero character constant commit 73ff8cc657529b1dc6066efa02507cc59523bf46 9240 nxge: this statement may fall through commit ea60f77b8bdb7a88d6143d8bd30ddebab992abee 9142 libxcurses: comparison between pointer and zero character constant commit 17f11284b49b98353b5119463254074fd9bc0a28 9238 ZFS Spacemap Encoding V2 commit 1c10ae76c0cb31326c320e7cef1d3f24a1f47125 9286 want refreservation=auto
2018-04-019181 ipf: this use of "defined" may not be portableToomas Soome2-5/+14
Reviewed by: Yuri Pankov <yuripv@yuripv.net> Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Alexander Pyhalov <apyhalov@gmail.com> Approved by: Gordon Ross <gwr@nexenta.com>
2017-08-28 [illumos-gate merge]Jerry Jelinek2-15/+5
commit d7c57852794a9ac50d4b6a9c4161cb10919658aa 8485 Remove set but unused variables in usr/src/cmd
2017-08-268485 Remove set but unused variables in usr/src/cmdGary Mills2-15/+5
Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Andy Stormont <astormont@racktopsystems.com> Reviewed by: Yuri Pankov <yuripv@gmx.com> Approved by: Dan McDonald <danmcd@joyent.com>
2017-06-14 [illumos-gate merge]Jerry Jelinek1-8/+1
commit 2889ec41c05e9ffe1890b529b3111354da325aeb 8311 ZFS_READONLY is a little too strict commit 796b8631498f69a3e21b5c35aee280499f64420e 8332 krb5: misleading-indentation commit c1eb8ad45781fe675aa558a47a11345293533238 8204 Makefile changes in zfstest cannot cope with empty directories commit d5767f310a0330fcb172a1651b2c9301e53b9aef 8334 ipf: self-comparison always evaluates to false commit 843c2111b160463f014d325560ad4b051711928e 8375 Kernel memory leak in nvpair code commit 403a8da73c64ff9dfb6230ba045c765a242213fb 5220 L2ARC does not support devices that do not provide 512B access commit 4ec4134be29a3b00791f6d70074168a6a3ff4fb3 8317 ddi_periodic_add(9F) has wrong type for arg in summary commit 56849bc6aade3a04eb051dc383a2091c220385c4 8322 nl: misleading-indentation commit 6dd72a43d2e43185833c20e7f0c4cb88a4d37ec8 8106 authloopback_marshal() can violate the RPC specification 8109 Kernel AUTH_SYS and AUTH_LOOPBACK implementation can ignore provided credentials commit 1d8d40bd3f903c0d0fa71c26b4548d2d47260251 8354 sync regcomp(3C) with upstream (fix make catalog)
2017-06-138334 ipf: self-comparison always evaluates to falseToomas Soome1-8/+1
Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Approved by: Dan McDonald <danmcd@joyent.com>
2017-05-08 [illumos-gate merge]Jerry Jelinek6-17/+9
commit c160bf3613805cfb4a89a0433ae896d3594f551f 8163 dwarf: this statement may fall through commit af5f29ddbc34ad2a499813f913a39accc4c41f0d 8164 ipf: bad preprocessor use and need FALLTHROUGH commit 4ac5eacf59e3146224496b826f32663415769c4c 8161 aw: this statement may fall through commit 9cdf9e12f0c6a1d10a3583d36c9a167cf71f48f4 8160 zic: this statement may fall through commit 50fc488b67a064288c7872ea37c95d418a0f8624 8157 pg: misleading-indentation commit 7038abe7532205428646f2442895374489b1c307 8154 cmd/dtrace test warning: implicit declaration of function waitpid commit b7b2590dd9f11b12a0b4878db3886068cce176af 8063 verify that we do not attempt to access inactive txg
2017-05-088164 ipf: bad preprocessor use and need FALLTHROUGHToomas Soome6-17/+9
Reviewed by: Jason King <jason.brian.king+illumos@gmail.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Alexander Pyhalov <apyhalov@gmail.com> Approved by: Hans Rosenfeld <hans.rosenfeld@joyent.com>
2014-12-12 [illumos-gate merge]Keith M Wesolowski7-161/+68
commit b7070b7dbcc2758a7f87cefb69ad42887a287152 5427 memory leak in libzfs when doing rollback commit 94bdecd9e84ae1042607002db3e64a6849da5874 5198 Want alternate global zone rule set for each ipf netstack 5197 Global zone should be able to manage NGZ ipf state commit c67987612cd8324e1f3d1b5110086552d19a2d89 5200 ipf_stack_destroy error messages when halting zones commit 2f443e27e5988131d8b57bec58ee15f9227e0899 5096 getaddrinfo doesn't properly handle AI_ADDRCONFIG | AI_V4MAPPED commit e48cae6f8c603e9a18cdb49fdf939cd4e1753e62 4643 nss_dns fails to obtain dns ttls Conflicts: usr/src/uts/intel/ipf/ipf.global-objs.debug64 usr/src/uts/common/inet/ipf/solaris.c usr/src/uts/common/inet/ipf/netinet/ipf_stack.h usr/src/uts/common/inet/ipf/netinet/ip_fil.h usr/src/uts/common/inet/ipf/ip_log.c usr/src/uts/common/inet/ipf/ip_fil_solaris.c usr/src/uts/common/inet/ipf/fil.c usr/src/man/man1m/ippool.1m usr/src/man/man1m/ipnat.1m usr/src/man/man1m/ipf.1m usr/src/lib/nsswitch/dns/common/dns_common.c usr/src/lib/nsswitch/dns/Makefile.com usr/src/lib/libzfs/common/libzfs_iter.c usr/src/cmd/ipf/tools/ippool.c usr/src/cmd/ipf/tools/ipnat.c usr/src/cmd/ipf/tools/ipmon.c usr/src/cmd/ipf/tools/ipfzone.c usr/src/cmd/ipf/tools/ipfstat.c usr/src/cmd/ipf/tools/ipfs.c usr/src/cmd/ipf/tools/ipf.c usr/src/cmd/ipf/lib/common/load_poolnode.c usr/src/cmd/ipf/lib/common/load_pool.c usr/src/cmd/ipf/lib/common/load_hashnode.c usr/src/cmd/ipf/lib/common/load_hash.c
2014-12-105198 Want alternate global zone rule set for each ipf netstackRob Gulewich9-45/+414
5197 Global zone should be able to manage NGZ ipf state Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Darren Reed <darrenr@fastmail.net> Approved by: Richard Lowe <richlowe@richlowe.net>
2013-10-31OS-2544 ipf rules from the GZ should be add to in-zone rules, not replace ↵Rob Gulewich2-0/+3
them (man page and style fixes)
2013-10-31OS-2544 ipf rules from the GZ should be add to in-zone rules, not replace themRob Gulewich8-31/+130
2013-09-04 [illumos-gate merge]Keith M Wesolowski2-8/+29
commit bfe5cd09d00f1b1e72fbe64036f3f80b73bd2738 2408 CJK character width handled incorrectly in terminal emulators (missing widths-2.txt) commit 2da1cd3a39e2d3da7f9d15071ea9462919c011ac 2408 CJK character width handled incorrectly in terminal emulators 3019 localedef(1) manpage is pretty out of date commit 03fc868668dd42b1b163d1fb8af3968f7283a7eb 672 xargs doesn't support -0 3356 xargs needlessly duplicates stdio buffering commit 03d446db9be5b68e630562c8b6b14aa7c8a0f4dc 4075 nscd spuriously thinks all databases are privileged commit ab823b7f933f787dbdf7a0bb790639210c583869 3965 find does not support -delete option commit a81df0a5d715363cc1841810a87818dfa95675c0 3933 contract adoption can race commit cf746768a898264fa491791a8252865e5338dc67 1974 pages_pp_maximum/lotsfree discrepancy leads to mlock() failure commit b6805bf78d2bbbeeaea8909a05623587b42d58b3 4072 make clobber leaves trash commit a9478106a12424322498e53cf7cd75bd8a4d6004 3600 edit(1) is a bad .so reference commit 5253393b09789ec67bec153b866d7285a1cf1645 4082 zfs receive gets EFBIG from dmu_tx_hold_free() Conflicts: usr/src/man/man7fs/Makefile (copyright) usr/src/man/man3xnet/Makefile (ntohll/htonll) usr/src/man/man3socket/Makefile (get/freeifaddrs) usr/src/man/man1m/Makefile (ipdadm) usr/src/cmd/localedef/Makefile (euro) usr/src/cmd/ipf/tools/Makefile.tools (copyright) .gitignore usr/src/cmd/lp/filter/postscript/postreverse/Makefile (deleted) usr/src/lib/libshell/Makefile.doc (deleted) usr/src/lib/print/libpapi-lpd/Makefile.com (deleted) usr/src/pkg/manifests/library-print-open-printing-ipp.mf (deleted) usr/src/pkg/manifests/print-lp-print-client-commands.mf (deleted) Manifests (scripted replacement): usr/src/pkg/manifests/SUNWcs.man1.inc usr/src/pkg/manifests/SUNWcs.man1m.inc usr/src/pkg/manifests/SUNWcs.man4.inc usr/src/pkg/manifests/SUNWcs.man5.inc usr/src/pkg/manifests/compatibility-ucb.mf usr/src/pkg/manifests/developer-tnf.mf usr/src/pkg/manifests/diagnostic-cpu-counters.mf usr/src/pkg/manifests/driver-firewire.mf usr/src/pkg/manifests/driver-usb.mf usr/src/pkg/manifests/library-libtecla.mf usr/src/pkg/manifests/library-print-open-printing-ipp.mf usr/src/pkg/manifests/library-security-tcp-wrapper.mf usr/src/pkg/manifests/naming-ldap.mf usr/src/pkg/manifests/network-iscsi-target.mf usr/src/pkg/manifests/print-lp-print-client-commands.mf usr/src/pkg/manifests/service-hal.mf usr/src/pkg/manifests/service-network-dns-mdns.mf usr/src/pkg/manifests/service-network-ftp.mf usr/src/pkg/manifests/service-network-network-clients.mf usr/src/pkg/manifests/service-network-network-servers.mf usr/src/pkg/manifests/service-network-nis.mf usr/src/pkg/manifests/service-network-smtp-sendmail.mf usr/src/pkg/manifests/service-network-telnet.mf usr/src/pkg/manifests/service-network-tftp.mf usr/src/pkg/manifests/service-network-uucp.mf usr/src/pkg/manifests/service-picl.mf usr/src/pkg/manifests/service-resource-pools.mf usr/src/pkg/manifests/service-security-gss.mf usr/src/pkg/manifests/service-storage-media-volume-manager.mf usr/src/pkg/manifests/storage-metassist.mf usr/src/pkg/manifests/storage-stmf.mf usr/src/pkg/manifests/storage-svm.mf usr/src/pkg/manifests/system-accounting-legacy.mf usr/src/pkg/manifests/system-boot-network.mf usr/src/pkg/manifests/system-extended-system-utilities.mf usr/src/pkg/manifests/system-file-system-smb.mf usr/src/pkg/manifests/system-header.mf usr/src/pkg/manifests/system-kernel-platform.mf usr/src/pkg/manifests/system-kernel-ultra-wideband.mf usr/src/pkg/manifests/system-kernel.man2.inc usr/src/pkg/manifests/system-kernel.man4.inc usr/src/pkg/manifests/system-kernel.man7.inc usr/src/pkg/manifests/system-kernel.man7d.inc usr/src/pkg/manifests/system-kernel.man7fs.inc usr/src/pkg/manifests/system-kernel.man7m.inc usr/src/pkg/manifests/system-kernel.man7p.inc usr/src/pkg/manifests/system-kernel.man9.inc usr/src/pkg/manifests/system-kernel.man9e.inc usr/src/pkg/manifests/system-kernel.man9f.inc usr/src/pkg/manifests/system-kernel.man9p.inc usr/src/pkg/manifests/system-kernel.man9s.inc usr/src/pkg/manifests/system-library-security-libsasl.mf usr/src/pkg/manifests/system-library-storage-libmpapi.mf usr/src/pkg/manifests/system-library.man3.inc usr/src/pkg/manifests/system-library.man3bsm.inc usr/src/pkg/manifests/system-library.man3c.inc usr/src/pkg/manifests/system-library.man3c_db.inc usr/src/pkg/manifests/system-library.man3cfgadm.inc usr/src/pkg/manifests/system-library.man3commputil.inc usr/src/pkg/manifests/system-library.man3contract.inc usr/src/pkg/manifests/system-library.man3curses.inc usr/src/pkg/manifests/system-library.man3devid.inc usr/src/pkg/manifests/system-library.man3devinfo.inc usr/src/pkg/manifests/system-library.man3dlpi.inc usr/src/pkg/manifests/system-library.man3elf.inc usr/src/pkg/manifests/system-library.man3exacct.inc usr/src/pkg/manifests/system-library.man3ext.inc usr/src/pkg/manifests/system-library.man3fstyp.inc usr/src/pkg/manifests/system-library.man3gen.inc usr/src/pkg/manifests/system-library.man3kstat.inc usr/src/pkg/manifests/system-library.man3kvm.inc usr/src/pkg/manifests/system-library.man3ldap.inc usr/src/pkg/manifests/system-library.man3lgrp.inc usr/src/pkg/manifests/system-library.man3lib.inc usr/src/pkg/manifests/system-library.man3mail.inc usr/src/pkg/manifests/system-library.man3malloc.inc usr/src/pkg/manifests/system-library.man3mp.inc usr/src/pkg/manifests/system-library.man3nsl.inc usr/src/pkg/manifests/system-library.man3nvpair.inc usr/src/pkg/manifests/system-library.man3pam.inc usr/src/pkg/manifests/system-library.man3scf.inc usr/src/pkg/manifests/system-library.man3sec.inc usr/src/pkg/manifests/system-library.man3secdb.inc usr/src/pkg/manifests/system-library.man3sip.inc usr/src/pkg/manifests/system-library.man3socket.inc usr/src/pkg/manifests/system-library.man3tsol.inc usr/src/pkg/manifests/system-library.man3uuid.inc usr/src/pkg/manifests/system-library.man3volmgt.inc usr/src/pkg/manifests/system-library.man3xcurses.inc usr/src/pkg/manifests/system-library.man3xnet.inc usr/src/pkg/manifests/system-library.man5.inc usr/src/pkg/manifests/system-network-http-cache-accelerator.mf usr/src/pkg/manifests/system-network-nis.mf usr/src/pkg/manifests/system-network-routing.mf usr/src/pkg/manifests/system-remote-shared-memory.mf usr/src/pkg/manifests/system-security-kerberos-5.mf usr/src/pkg/manifests/system-storage-fibre-channel-port-utility.mf usr/src/pkg/manifests/system-storage-sasinfo.mf usr/src/pkg/manifests/text-doctools.mf
2013-08-304072 make clobber leaves trashGordon Ross2-8/+30
Reviewed by: Albert Lee <trisk@nexenta.com> Reviewed by: Dan McDonald <danmcd@nexenta.com> Reviewed by: Marcel Telka <marcel.telka@nexenta.com> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Garrett D'Amore <garrett@damore.org>
2012-11-28OS-777 ipfilter should support loading / modifying per-zone rules from the ↵Rob Gulewich2-8/+6
GZ (clean up includes)
2012-11-28OS-777 ipfilter should support loading / modifying per-zone rules from the ↵Rob Gulewich1-0/+1
GZ (missing declaration)
2012-11-28OS-777 ipfilter should support loading / modifying per-zone rules from the GZRob Gulewich9-40/+405
Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com>
2009-11-196772643 Packets dropped at ipfil_sendpkt if interface index is set at plumb timeAlexandr Nedvedicky1-1/+2
6891782 ipftest fails to run 6897532 Race condition window arround fr_enable_active is still opened 6897632 nic_event_v* hook should check if IPF is running before it will proceed further
2009-07-296864230 hiho, hiho, it'ch chtime for CH to gojmcp1-3/+0
Portions contributed by Rich Lowe
2009-02-136803232 parsing empty config files results in an errorDarren Reed2-4/+3
6803834 regression test failure for legacy/i13
2009-01-275008943 /etc/init.d/ipfboot pause/resume functionality brokenDarren Reed7-42/+145
5010756 "\" in configuration file does not work correctly 6181489 ipfilter sends out confusing messages. 6449288 Makefiles in usr/src/cmd/ipf are missing CDDL 6449291 package prototype files in usr/src/pkgdefs/SUNWipfh missing CDDL 6508325 stale pfil-related rules in Makefile.rules 6661948 ipmon.pid file can be rendered invisible 6714319 IPFilter causes failure of IPv6 compliance tests. 6766614 fin_state costs more than it is worth 6767239 fin_nat causes more trouble than it is worth 6788299 Array overrun in ipfilter 6789766 ipfs usage output is misleading 6792026 ipnat panics in Divide zero exception
2009-01-196617470 ipftest is reported as false positive by wsdiffVladimir Kotal1-6/+9
2008-12-286749429 printing out of fragment information is confusedDarren Reed1-3/+6
6749445 ipfstat -f does not show ttl but rather expiration tick 6783820 IPF preauth crash 6730356 legacy test regressions: i2, i4, i11
2008-11-206677460 ipfilter automatic flushing of state table entries needs to work the ↵John Ojemann2-7/+5
same as it does for NAT 6566976 state limit check works when limit is reached only 6566982 state limit is not check when inserting states via IOCTL
2008-09-266743637 ipfstat prints certain certain counters two timesAlexandr Nedvedicky2-9/+12
6744095 fix c-style in ip_state.c in fr_matchstate() et. al. 6744100 add a comment for CR 6653172 to fil.c 6725139 OOW problem still present after a patch 127888-09 has been applied 6657378 IPF address pools does not match addresses reliably for IPv6 6726717 IPF persistent tunables still don't work with stack instances 6743002 ipf_property_update() is too picky 6731974 incorrect calculation in fr_pullup 6749974 IPF does not know whether packet comes from local client (loopback) or from NIC interface
2008-09-08PSARC/2008/219 Committed API for packet interceptionDarren Reed2-22/+3
PSARC/2008/335 Corrections for Committed API for packet interception PSARC/2008/557 Revision to net instance notification API 4844507 Solaris needs stable interface for packet filtering software 6705155 ipf_stack_init() assumes kmem_alloc with KM_NOSLEEP never fails
2008-08-286713984 if a nat entry is created, but the packet gets blocked, the entry ↵John Ojemann2-8/+6
should be removed 6718524 ipfilter incorrectly tracks and handles orphan state table and nat table entries 6742115 IPfilter: NAT entries added with SIOCSTPUT are ignored if no rules exist. 6528443 ipnat -l shows more sessions than ipf_nattable_max
2008-08-016726575 ipfilter needs to be able to do randomised port mappingdr1469922-3/+56
6730614 random port numbers are in the wrong range of numbers
2008-07-23PSARC 2008/250 ipv6 NAT for IPFilteryx1606015-135/+317
6600474 RFE: Need ipv6 support on NAT
2008-07-186719268 enabling ipfilter causes up to 80% or more drop in packet throughput ↵dr1469922-4/+0
for multi-stream workloads 6721215 ipfilter panic in ipf:fr_derefrule after restoring state table 6723213 IPfilter: NAT suffers performance hit by holding exclusive locks longer than required
2008-05-156505685 Problems with applying "to" rule in IP Filteran2070441-0/+3
6562635 TCP options are not processed correctly 6562648 IPF may drop connection, which chooses to scale window 6562721 IPF should also check SACK when doing stateful inspection 6595876 state timer should be reset when retransmission is seen 6651775 ipf does not handle half estab. connections well (conn. hangs with connection match result 4/0)
2008-04-306685076 ippool and other ipf utilities have possible race conditionjojemann2-14/+3
6685092 ipfilter list processing function(s) have unsafe edge case(s)
2008-04-116677590 ON is now required to deliver license info via pkg copyright filesmjnelson1-1/+4
6684249 third party license cleanup --HG-- rename : usr/src/pkgdefs/SUNWdsdu/copyright => deleted_files/usr/src/pkgdefs/SUNWdsdu/copyright rename : usr/src/pkgdefs/SUNWgrubS/copyright => deleted_files/usr/src/pkgdefs/SUNWgrubS/copyright rename : usr/src/pkgdefs/SUNWipfr/copyright => deleted_files/usr/src/pkgdefs/SUNWipfr/copyright rename : usr/src/pkgdefs/SUNWipfu/copyright => deleted_files/usr/src/pkgdefs/SUNWipfu/copyright rename : usr/src/pkgdefs/SUNWlibsasl/copyright => deleted_files/usr/src/pkgdefs/SUNWlibsasl/copyright.in rename : usr/src/pkgdefs/SUNWpppdu/copyright => deleted_files/usr/src/pkgdefs/SUNWpppdu/copyright rename : usr/src/pkgdefs/SUNWpppg/copyright => deleted_files/usr/src/pkgdefs/SUNWpppg/copyright rename : usr/src/pkgdefs/SUNWpppgS/copyright => deleted_files/usr/src/pkgdefs/SUNWpppgS/copyright rename : usr/src/pkgdefs/SUNWsndmr/copyright => deleted_files/usr/src/pkgdefs/SUNWsndmr/copyright rename : usr/src/pkgdefs/SUNWsndmu/copyright => deleted_files/usr/src/pkgdefs/SUNWsndmu/copyright rename : usr/src/pkgdefs/SUNWsshcu/copyright => deleted_files/usr/src/pkgdefs/SUNWsshcu/copyright rename : usr/src/pkgdefs/SUNWsshdr/copyright => deleted_files/usr/src/pkgdefs/SUNWsshdr/copyright rename : usr/src/pkgdefs/SUNWsshdu/copyright => deleted_files/usr/src/pkgdefs/SUNWsshdu/copyright rename : usr/src/pkgdefs/SUNWsshr/copyright => deleted_files/usr/src/pkgdefs/SUNWsshr/copyright rename : usr/src/pkgdefs/SUNWsshu/copyright => deleted_files/usr/src/pkgdefs/SUNWsshu/copyright rename : usr/src/pkgdefs/SUNWtcpd/copyright => deleted_files/usr/src/pkgdefs/SUNWtcpd/copyright rename : usr/src/pkgdefs/SUNWtcpdS/copyright => deleted_files/usr/src/pkgdefs/SUNWtcpdS/copyright rename : usr/src/pkgdefs/SUNWtecla/copyright => deleted_files/usr/src/pkgdefs/SUNWtecla/copyright rename : usr/src/uts/common/sys/i2o/THIRDPARTYLICENSE => deleted_files/usr/src/uts/common/sys/i2o/THIRDPARTYLICENSE rename : usr/src/uts/common/sys/i2o/THIRDPARTYLICENSE.descrip => deleted_files/usr/src/uts/common/sys/i2o/THIRDPARTYLICENSE.descrip rename : usr/src/pkgdefs/SUNWnetcat/copyright => usr/src/cmd/cmd-inet/usr.bin/nc/THIRDPARTYLICENSE rename : usr/src/pkgdefs/SUNWcsl/copyright => usr/src/pkgdefs/SUNWcsl/lic_AMD rename : usr/src/pkgdefs/SUNWgrub/copyright => usr/src/pkgdefs/SUNWgrub/grubcredits rename : usr/src/pkgdefs/SUNWgss/copyright => usr/src/pkgdefs/SUNWgss/gss_license rename : usr/src/pkgdefs/SUNWocfh/copyright => usr/src/pkgdefs/SUNWocfh/copyright.in rename : usr/src/pkgdefs/SUNWroute/copyright => usr/src/pkgdefs/SUNWroute/copyright.in rename : usr/src/pkgdefs/common_files/copyright => usr/src/pkgdefs/license_files/cr_Sun rename : usr/src/pkgdefs/SUNWdrmr/LICENSE => usr/src/uts/common/io/drm/THIRDPARTYLICENSE rename : usr/src/pkgdefs/SUNWpppd/copyright => usr/src/uts/common/io/ppp/THIRDPARTYLICENSE
2008-01-20PSARC/2007/666 Broadcast/multicast packet notification through pfhooksdr1469921-3/+4
6633786 ipfilter with no mbcast not working as expected 6645812 GLD packets are not flagged correctly as multicast/broadcast
2007-11-126627912 ipnat -l still shows some inconsistent resultsjojemann1-2/+5
2007-11-056603271 ipnat -l demonstrates inconsistent behavior and can cause system to ↵jojemann2-5/+11
hang or panic
2007-09-046231883 ipfilter service lacks refresh methodan2070441-3/+1
6561278 pressing 'q' to quit ipfstat -t will cause underlying bash and tcsh to terminate but not ksh
2007-05-176455532 OSNet cleanup required in preparation for direct bindingsrie1-7/+8
--HG-- rename : usr/src/cmd/bnu/strecpy.c => deleted_files/usr/src/cmd/bnu/strecpy.c rename : usr/src/cmd/fs.d/ufs/mount/realpath.c => deleted_files/usr/src/cmd/fs.d/ufs/mount/realpath.c rename : usr/src/cmd/lp/lib/lp/tinames.c => deleted_files/usr/src/cmd/lp/lib/lp/tinames.c rename : usr/src/cmd/sgs/crle/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/crle/common/mapfile-vers rename : usr/src/cmd/sgs/elfdump/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/elfdump/common/mapfile-vers rename : usr/src/cmd/sgs/ldd/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/ldd/common/mapfile-vers rename : usr/src/cmd/sgs/moe/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/moe/common/mapfile-vers rename : usr/src/cmd/sgs/pvs/common/mapfile-vers => deleted_files/usr/src/cmd/sgs/pvs/common/mapfile-vers rename : usr/src/lib/libsocket/amd64/byteorder.s => deleted_files/usr/src/lib/libsocket/amd64/byteorder.s rename : usr/src/lib/libsocket/i386/byteorder.s => deleted_files/usr/src/lib/libsocket/i386/byteorder.s rename : usr/src/cmd/sgs/ld/common/mapfile-vers => usr/src/cmd/sgs/ld/common/mapfile-intf rename : usr/src/cmd/sgs/mapfiles/Makefile => usr/src/common/mapfiles/Makefile rename : usr/src/cmd/sgs/mapfiles/amd64/Makefile => usr/src/common/mapfiles/amd64/Makefile rename : usr/src/cmd/sgs/mapfiles/amd64/map.above4G => usr/src/common/mapfiles/amd64/map.above4G rename : usr/src/cmd/sgs/mapfiles/amd64/map.below4G => usr/src/common/mapfiles/amd64/map.below4G rename : usr/src/cmd/sgs/mapfiles/common/Makefile => usr/src/common/mapfiles/common/Makefile rename : usr/src/cmd/mapfile_bssalign => usr/src/common/mapfiles/common/map.bssalign rename : usr/src/cmd/mapfile_execdata => usr/src/common/mapfiles/common/map.execdata rename : usr/src/lib/common/mapfile-filter => usr/src/common/mapfiles/common/map.filter rename : usr/src/cmd/mapfile_noexstk => usr/src/common/mapfiles/common/map.noexstk rename : usr/src/cmd/sgs/mapfiles/i386/Makefile => usr/src/common/mapfiles/i386/Makefile rename : usr/src/cmd/sgs/mapfiles/i386/map.default => usr/src/common/mapfiles/i386/map.default rename : usr/src/cmd/mapfile_noexdata => usr/src/common/mapfiles/i386/map.noexdata rename : usr/src/cmd/sgs/mapfiles/i386/map.pagealign => usr/src/common/mapfiles/i386/map.pagealign rename : usr/src/cmd/sgs/mapfiles/sparc/Makefile => usr/src/common/mapfiles/sparc/Makefile rename : usr/src/cmd/sgs/mapfiles/sparc/map.default => usr/src/common/mapfiles/sparc/map.default rename : usr/src/cmd/sgs/mapfiles/sparc/map.pagealign => usr/src/common/mapfiles/sparc/map.pagealign rename : usr/src/cmd/sgs/mapfiles/sparcv9/Makefile => usr/src/common/mapfiles/sparcv9/Makefile rename : usr/src/cmd/sgs/mapfiles/sparcv9/map.above4G => usr/src/common/mapfiles/sparcv9/map.above4G rename : usr/src/cmd/sgs/mapfiles/sparcv9/map.below4G => usr/src/common/mapfiles/sparcv9/map.below4G rename : usr/src/lib/libsocket/inet/byteorder.c => usr/src/lib/libc/sparc/gen/byteorder.c
2007-05-036455242 nightly should be able to preserve all proto areas from a single build.kupfer1-0/+1
6467531 nightly(1) needs option to generate OpenSolaris delivery --HG-- rename : usr/src/pkgdefs/SUNWftpu/copyright => usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/LICENSE
2007-01-19PSARC 2006/366 IP Instancesdh1551226-181/+650
6289221 RFE: Need virtualized ip-stack for each local zone 6512601 panic in ipsec_in_tag - allocation failure 6514637 error message from dhcpagent: add_pkt_opt: option type 60 is missing required value 6364643 RFE: allow persistent setting of interface flags per zone 6307539 RFE: Invalid network address causes zone boot failure 5041214 Allow IPMP configuration with zones 5005887 RFE: zoneadmd should support plumbing an interface via DHCP 4991139 RFE: zones should provide a mechanism to configure a defaultrouter for a zone 6218378 zoneadmd doesn't set the netmask for non-loopback addresses hosted on lo0 4963280 zones: need to virtualize the IPv6 default address selection mechanism 4963285 zones: need support of stateless address autoconfiguration for IPv6 5048068 zones don't boot if one of its interfaces has failed 5057154 RFE: ability to change interface status from within a zone 4963287 zones should support the plumbing of the first (and only) logical interface 4978517 TCP privileged port space should be partitioned per zone 5023347 zones don't work well with network routes other than default 4963372 investigate whether global zone can act as a router for local zones 6378364 RFE: Allow each zone to have its own virtual IPFilter
2006-10-20PSARC/2005/334 Packet Filtering Hooksdr1469922-5/+33
PSARC/2006/321 ARP packet filtering Hooks 6401219 use of pullupmsg() considered destructive - clears h/w checksum flags 6418698 PSARC/2005/334 - Packet Filtering Hooks API 6449290 package prototype files in usr/src/pkgdefs/SUNWipfr missing CDDL 6449292 package prototype files in usr/src/pkgdefs/SUNWipfu missing CDDL 6449296 Makefiles for ipf kernel module building missing CDDL 6473996 "fastroute" + "nat" packets cause memory leaks in ipfilter --HG-- rename : usr/src/cmd/ipf/etc/pfil.ap.sh => deleted_files/usr/src/cmd/ipf/etc/pfil.ap.sh rename : usr/src/cmd/ipf/pfild/Makefile => deleted_files/usr/src/cmd/ipf/pfild/Makefile rename : usr/src/cmd/ipf/pfild/pfild.c => deleted_files/usr/src/cmd/ipf/pfild/pfild.c rename : usr/src/cmd/ipf/pfild/vas.c => deleted_files/usr/src/cmd/ipf/pfild/vas.c rename : usr/src/cmd/ipf/svc/pfil => deleted_files/usr/src/cmd/ipf/svc/pfil rename : usr/src/cmd/ipf/svc/pfil.xml => deleted_files/usr/src/cmd/ipf/svc/pfil.xml rename : usr/src/uts/common/inet/pfil/compat.h => deleted_files/usr/src/uts/common/inet/pfil/compat.h rename : usr/src/uts/common/inet/pfil/ndd.c => deleted_files/usr/src/uts/common/inet/pfil/ndd.c rename : usr/src/uts/common/inet/pfil/os.h => deleted_files/usr/src/uts/common/inet/pfil/os.h rename : usr/src/uts/common/inet/pfil/pfil.c => deleted_files/usr/src/uts/common/inet/pfil/pfil.c rename : usr/src/uts/common/inet/pfil/pfil.conf => deleted_files/usr/src/uts/common/inet/pfil/pfil.conf rename : usr/src/uts/common/inet/pfil/pfil.h => deleted_files/usr/src/uts/common/inet/pfil/pfil.h rename : usr/src/uts/common/inet/pfil/pfild.h => deleted_files/usr/src/uts/common/inet/pfil/pfild.h rename : usr/src/uts/common/inet/pfil/pfildrv.c => deleted_files/usr/src/uts/common/inet/pfil/pfildrv.c rename : usr/src/uts/common/inet/pfil/pfilstream.c => deleted_files/usr/src/uts/common/inet/pfil/pfilstream.c rename : usr/src/uts/common/inet/pfil/pkt.c => deleted_files/usr/src/uts/common/inet/pfil/pkt.c rename : usr/src/uts/common/inet/pfil/qif.c => deleted_files/usr/src/uts/common/inet/pfil/qif.c rename : usr/src/uts/common/inet/pfil/qif.h => deleted_files/usr/src/uts/common/inet/pfil/qif.h rename : usr/src/uts/intel/pfil/Makefile => deleted_files/usr/src/uts/intel/pfil/Makefile rename : usr/src/uts/sparc/pfil/Makefile => deleted_files/usr/src/uts/sparc/pfil/Makefile rename : usr/src/uts/common/inet/pfil/misc.c => usr/src/uts/common/inet/ipf/misc.c
2006-10-176478243 ippool can dump core (Regression)jojemann3-4/+36
6480720 ipnat usage output incorrect (Regression) 6480905 some ipfilter tools once again don't check for return values from memory allocation (Regression)
generated by cgit v1.2.3 (git 2.39.1) at 2025-07-29 02:18:07 +0000