summaryrefslogtreecommitdiff
path: root/usr/src/uts/intel/ipf
AgeCommit message (Collapse)AuthorFilesLines
2014-06-24OS-3119 Add global variablesRob Gulewich1-0/+4
2014-03-20OS-2800 Project BardicheRobert Mustacchi2-1/+5
OS-2784 want sdev plugin interface OS-2783 want generalized squeues OS-2785 ipf should be able to hook kvm nics OS-2782 want /dev/net/zone/%zonename/%datalink OS-610 snoop and libdlpi should be able to consume /dev/net/zone/%zonename OS-2786 .gitignore should include debug object directories OS-2781 dlpi promisc modes should be able to be RX-only OS-2780 Want dlpi primitive DL_EXCLUSIVE_REQ OS-2779 Makefile.man should take care of directory creation OS-2778 dls_promisc doesn't properly handle all transitions Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com>
2013-10-31OS-2544 ipf rules from the GZ should be add to in-zone rules, not replace ↵Rob Gulewich1-0/+22
them (fix debug build)
2013-03-04OS-1966 fix DEBUG buildJoshua M. Clulow1-0/+2
2012-09-222933 compiler warning gags need better granularityRichard Lowe1-0/+6
Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2008-09-08PSARC/2008/219 Committed API for packet interceptionDarren Reed2-4/+4
PSARC/2008/335 Corrections for Committed API for packet interception PSARC/2008/557 Revision to net instance notification API 4844507 Solaris needs stable interface for packet filtering software 6705155 ipf_stack_init() assumes kmem_alloc with KM_NOSLEEP never fails
2008-08-016726575 ipfilter needs to be able to do randomised port mappingdr1469922-3/+9
6730614 random port numbers are in the wrong range of numbers
2007-10-226599659 Makefiles shouldn't have to tear $(RELEASE) apartmeem1-2/+1
Contributed by Roland Mainz <roland.mainz@nrubsig.org>
2007-08-076354418 ??? entries hang around for long timean2070441-0/+1
2007-02-196519043 IP instances sis_check should support automatic checking in nightlyyz1552402-12/+4
6519047 IP instances sis_check does not have descriptive symbol file names --HG-- rename : usr/src/uts/intel/arp/arp.objt-symbols.obj64 => usr/src/uts/intel/arp/arp.global-objs.debug64 rename : usr/src/uts/intel/hook/hook.objt-symbols.obj64 => usr/src/uts/intel/hook/hook.global-objs.debug64 rename : usr/src/uts/intel/icmp/icmp.objt-symbols.obj64 => usr/src/uts/intel/icmp/icmp.global-objs.debug64 rename : usr/src/uts/intel/ip/ip.objt-symbols.debug64 => usr/src/uts/intel/ip/ip.global-objs.debug64 rename : usr/src/uts/intel/ip/ip.objt-symbols.obj64 => usr/src/uts/intel/ip/ip.global-objs.obj64 rename : usr/src/uts/intel/ipf/ipf.objt-symbols.obj64 => usr/src/uts/intel/ipf/ipf.global-objs.debug64 rename : usr/src/uts/intel/ipsecah/ipsecah.objt-symbols.obj64 => usr/src/uts/intel/ipsecah/ipsecah.global-objs.debug64 rename : usr/src/uts/intel/ipsecesp/ipsecesp.objt-symbols.obj64 => usr/src/uts/intel/ipsecesp/ipsecesp.global-objs.debug64 rename : usr/src/uts/intel/keysock/keysock.objt-symbols.obj64 => usr/src/uts/intel/keysock/keysock.global-objs.debug64 rename : usr/src/uts/intel/neti/neti.objt-symbols.obj64 => usr/src/uts/intel/neti/neti.global-objs.debug64 rename : usr/src/uts/intel/rts/rts.objt-symbols.obj64 => usr/src/uts/intel/rts/rts.global-objs.debug64 rename : usr/src/uts/intel/spdsock/spdsock.objt-symbols.obj64 => usr/src/uts/intel/spdsock/spdsock.global-objs.debug64 rename : usr/src/uts/intel/tun/tun.objt-symbols.obj64 => usr/src/uts/intel/tun/tun.global-objs.debug64 rename : usr/src/uts/sparc/arp/arp.objt-symbols.obj64 => usr/src/uts/sparc/arp/arp.global-objs.debug64 rename : usr/src/uts/sparc/hook/hook.objt-symbols.obj64 => usr/src/uts/sparc/hook/hook.global-objs.debug64 rename : usr/src/uts/sparc/icmp/icmp.objt-symbols.obj64 => usr/src/uts/sparc/icmp/icmp.global-objs.debug64 rename : usr/src/uts/sparc/ip/ip.objt-symbols.debug64 => usr/src/uts/sparc/ip/ip.global-objs.debug64 rename : usr/src/uts/sparc/ip/ip.objt-symbols.obj64 => usr/src/uts/sparc/ip/ip.global-objs.obj64 rename : usr/src/uts/sparc/ipsecah/ipsecah.objt-symbols.obj64 => usr/src/uts/sparc/ipsecah/ipsecah.global-objs.debug64 rename : usr/src/uts/sparc/ipsecesp/ipsecesp.objt-symbols.obj64 => usr/src/uts/sparc/ipsecesp/ipsecesp.global-objs.debug64 rename : usr/src/uts/sparc/keysock/keysock.objt-symbols.obj64 => usr/src/uts/sparc/keysock/keysock.global-objs.debug64 rename : usr/src/uts/sparc/neti/neti.objt-symbols.obj64 => usr/src/uts/sparc/neti/neti.global-objs.debug64 rename : usr/src/uts/sparc/rts/rts.objt-symbols.obj64 => usr/src/uts/sparc/rts/rts.global-objs.debug64 rename : usr/src/uts/sparc/spdsock/spdsock.objt-symbols.obj64 => usr/src/uts/sparc/spdsock/spdsock.global-objs.debug64 rename : usr/src/uts/sparc/tun/tun.objt-symbols.obj64 => usr/src/uts/sparc/tun/tun.global-objs.debug64
2007-01-19PSARC 2006/366 IP Instancesdh1551222-1/+64
6289221 RFE: Need virtualized ip-stack for each local zone 6512601 panic in ipsec_in_tag - allocation failure 6514637 error message from dhcpagent: add_pkt_opt: option type 60 is missing required value 6364643 RFE: allow persistent setting of interface flags per zone 6307539 RFE: Invalid network address causes zone boot failure 5041214 Allow IPMP configuration with zones 5005887 RFE: zoneadmd should support plumbing an interface via DHCP 4991139 RFE: zones should provide a mechanism to configure a defaultrouter for a zone 6218378 zoneadmd doesn't set the netmask for non-loopback addresses hosted on lo0 4963280 zones: need to virtualize the IPv6 default address selection mechanism 4963285 zones: need support of stateless address autoconfiguration for IPv6 5048068 zones don't boot if one of its interfaces has failed 5057154 RFE: ability to change interface status from within a zone 4963287 zones should support the plumbing of the first (and only) logical interface 4978517 TCP privileged port space should be partitioned per zone 5023347 zones don't work well with network routes other than default 4963372 investigate whether global zone can act as a router for local zones 6378364 RFE: Allow each zone to have its own virtual IPFilter
2006-11-056470037 remove global disable of some potentially useful lint warnings from ↵jg1-0/+10
the kernel lint build
2006-10-20PSARC/2005/334 Packet Filtering Hooksdr1469921-1/+21
PSARC/2006/321 ARP packet filtering Hooks 6401219 use of pullupmsg() considered destructive - clears h/w checksum flags 6418698 PSARC/2005/334 - Packet Filtering Hooks API 6449290 package prototype files in usr/src/pkgdefs/SUNWipfr missing CDDL 6449292 package prototype files in usr/src/pkgdefs/SUNWipfu missing CDDL 6449296 Makefiles for ipf kernel module building missing CDDL 6473996 "fastroute" + "nat" packets cause memory leaks in ipfilter --HG-- rename : usr/src/cmd/ipf/etc/pfil.ap.sh => deleted_files/usr/src/cmd/ipf/etc/pfil.ap.sh rename : usr/src/cmd/ipf/pfild/Makefile => deleted_files/usr/src/cmd/ipf/pfild/Makefile rename : usr/src/cmd/ipf/pfild/pfild.c => deleted_files/usr/src/cmd/ipf/pfild/pfild.c rename : usr/src/cmd/ipf/pfild/vas.c => deleted_files/usr/src/cmd/ipf/pfild/vas.c rename : usr/src/cmd/ipf/svc/pfil => deleted_files/usr/src/cmd/ipf/svc/pfil rename : usr/src/cmd/ipf/svc/pfil.xml => deleted_files/usr/src/cmd/ipf/svc/pfil.xml rename : usr/src/uts/common/inet/pfil/compat.h => deleted_files/usr/src/uts/common/inet/pfil/compat.h rename : usr/src/uts/common/inet/pfil/ndd.c => deleted_files/usr/src/uts/common/inet/pfil/ndd.c rename : usr/src/uts/common/inet/pfil/os.h => deleted_files/usr/src/uts/common/inet/pfil/os.h rename : usr/src/uts/common/inet/pfil/pfil.c => deleted_files/usr/src/uts/common/inet/pfil/pfil.c rename : usr/src/uts/common/inet/pfil/pfil.conf => deleted_files/usr/src/uts/common/inet/pfil/pfil.conf rename : usr/src/uts/common/inet/pfil/pfil.h => deleted_files/usr/src/uts/common/inet/pfil/pfil.h rename : usr/src/uts/common/inet/pfil/pfild.h => deleted_files/usr/src/uts/common/inet/pfil/pfild.h rename : usr/src/uts/common/inet/pfil/pfildrv.c => deleted_files/usr/src/uts/common/inet/pfil/pfildrv.c rename : usr/src/uts/common/inet/pfil/pfilstream.c => deleted_files/usr/src/uts/common/inet/pfil/pfilstream.c rename : usr/src/uts/common/inet/pfil/pkt.c => deleted_files/usr/src/uts/common/inet/pfil/pkt.c rename : usr/src/uts/common/inet/pfil/qif.c => deleted_files/usr/src/uts/common/inet/pfil/qif.c rename : usr/src/uts/common/inet/pfil/qif.h => deleted_files/usr/src/uts/common/inet/pfil/qif.h rename : usr/src/uts/intel/pfil/Makefile => deleted_files/usr/src/uts/intel/pfil/Makefile rename : usr/src/uts/sparc/pfil/Makefile => deleted_files/usr/src/uts/sparc/pfil/Makefile rename : usr/src/uts/common/inet/pfil/misc.c => usr/src/uts/common/inet/ipf/misc.c
2006-07-19PSARC 2006/082 IP Filter Code Merge on ip_fil4.1.9yz1552401-1/+3
4912568 ipftest ipf ipfstat ipnat ippool need a non-name resolution flag 5040248 ipfs -W fails to save kernel state tables 5081834 syntax parser reports wrong error position and line number 5094575 keyword "netmask" is un-supported in ipnat.conf (4) 6181751 ipf parser fails on wrong subnet notations 6181773 ipf parser fails on wrong port ranges 6248745 ipnat drops packets if the IP header is not 32 bit aligned 6340621 RFE: IP Filter code merge on ip_fil4.1.9 6359805 ipf command incorrectly check options in rules and core dumps 6395837 ipnat tcpudp parsing is incomplete 6426469 IPFilter rejects IPv6 neighbour discovery packets 6447872 usr/src/common/ipf/ip_compat.h should not be CDDL --HG-- rename : usr/src/common/ipf/bpf-ipf.h => usr/src/uts/common/inet/ipf/bpf-ipf.h rename : usr/src/common/ipf/fil.c => usr/src/uts/common/inet/ipf/fil.c rename : usr/src/common/ipf/ip_auth.c => usr/src/uts/common/inet/ipf/ip_auth.c rename : usr/src/common/ipf/ip_fil_solaris.c => usr/src/uts/common/inet/ipf/ip_fil_solaris.c rename : usr/src/common/ipf/ip_frag.c => usr/src/uts/common/inet/ipf/ip_frag.c rename : usr/src/common/ipf/ip_htable.c => usr/src/uts/common/inet/ipf/ip_htable.c rename : usr/src/common/ipf/ip_log.c => usr/src/uts/common/inet/ipf/ip_log.c rename : usr/src/common/ipf/ip_lookup.c => usr/src/uts/common/inet/ipf/ip_lookup.c rename : usr/src/common/ipf/ip_nat.c => usr/src/uts/common/inet/ipf/ip_nat.c rename : usr/src/common/ipf/ip_pool.c => usr/src/uts/common/inet/ipf/ip_pool.c rename : usr/src/common/ipf/ip_proxy.c => usr/src/uts/common/inet/ipf/ip_proxy.c rename : usr/src/common/ipf/ip_state.c => usr/src/uts/common/inet/ipf/ip_state.c rename : usr/src/common/ipf/ipf.h => usr/src/uts/common/inet/ipf/ipf.h rename : usr/src/common/ipf/ipmon.h => usr/src/uts/common/inet/ipf/ipmon.h rename : usr/src/common/ipf/ipt.h => usr/src/uts/common/inet/ipf/ipt.h rename : usr/src/common/ipf/Makefile => usr/src/uts/common/inet/ipf/netinet/Makefile rename : usr/src/common/ipf/ip_auth.h => usr/src/uts/common/inet/ipf/netinet/ip_auth.h rename : usr/src/common/ipf/ip_compat.h => usr/src/uts/common/inet/ipf/netinet/ip_compat.h rename : usr/src/common/ipf/ip_fil.h => usr/src/uts/common/inet/ipf/netinet/ip_fil.h rename : usr/src/common/ipf/ip_frag.h => usr/src/uts/common/inet/ipf/netinet/ip_frag.h rename : usr/src/common/ipf/ip_ftp_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_ftp_pxy.c rename : usr/src/common/ipf/ip_h323_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_h323_pxy.c rename : usr/src/common/ipf/ip_htable.h => usr/src/uts/common/inet/ipf/netinet/ip_htable.h rename : usr/src/common/ipf/ip_ipsec_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_ipsec_pxy.c rename : usr/src/common/ipf/ip_irc_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_irc_pxy.c rename : usr/src/common/ipf/ip_lookup.h => usr/src/uts/common/inet/ipf/netinet/ip_lookup.h rename : usr/src/common/ipf/ip_nat.h => usr/src/uts/common/inet/ipf/netinet/ip_nat.h rename : usr/src/common/ipf/ip_netbios_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_netbios_pxy.c rename : usr/src/common/ipf/ip_pool.h => usr/src/uts/common/inet/ipf/netinet/ip_pool.h rename : usr/src/common/ipf/ip_proxy.h => usr/src/uts/common/inet/ipf/netinet/ip_proxy.h rename : usr/src/common/ipf/ip_raudio_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_raudio_pxy.c rename : usr/src/common/ipf/ip_rcmd_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_rcmd_pxy.c rename : usr/src/common/ipf/ip_rpcb_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_rpcb_pxy.c rename : usr/src/common/ipf/ip_state.h => usr/src/uts/common/inet/ipf/netinet/ip_state.h rename : usr/src/common/ipf/ipl.h => usr/src/uts/common/inet/ipf/netinet/ipl.h rename : usr/src/common/ipf/opts.h => usr/src/uts/common/inet/ipf/opts.h rename : usr/src/common/ipf/radix.c => usr/src/uts/common/inet/ipf/radix.c rename : usr/src/common/ipf/radix.h => usr/src/uts/common/inet/ipf/radix.h rename : usr/src/common/ipf/solaris.c => usr/src/uts/common/inet/ipf/solaris.c rename : usr/src/uts/common/inet/ipf/compat.h => usr/src/uts/common/inet/pfil/compat.h rename : usr/src/uts/common/inet/ipf/misc.c => usr/src/uts/common/inet/pfil/misc.c rename : usr/src/uts/common/inet/ipf/ndd.c => usr/src/uts/common/inet/pfil/ndd.c rename : usr/src/uts/common/inet/ipf/os.h => usr/src/uts/common/inet/pfil/os.h rename : usr/src/uts/common/inet/ipf/pfil.c => usr/src/uts/common/inet/pfil/pfil.c rename : usr/src/uts/common/inet/ipf/pfil.conf => usr/src/uts/common/inet/pfil/pfil.conf rename : usr/src/uts/common/inet/ipf/pfil.h => usr/src/uts/common/inet/pfil/pfil.h rename : usr/src/common/ipf/pfild.h => usr/src/uts/common/inet/pfil/pfild.h rename : usr/src/uts/common/inet/ipf/pfildrv.c => usr/src/uts/common/inet/pfil/pfildrv.c rename : usr/src/uts/common/inet/ipf/pfilstream.c => usr/src/uts/common/inet/pfil/pfilstream.c rename : usr/src/uts/common/inet/ipf/pkt.c => usr/src/uts/common/inet/pfil/pkt.c rename : usr/src/uts/common/inet/ipf/qif.c => usr/src/uts/common/inet/pfil/qif.c rename : usr/src/uts/common/inet/ipf/qif.h => usr/src/uts/common/inet/pfil/qif.h
2005-09-304951608 RFE: IP Filter should filter IPv6 trafficml379951-2/+2
2005-06-14OpenSolaris Launchstevel@tonic-gate1-0/+70
generated by cgit v1.2.3 (git 2.39.1) at 2025-07-26 23:56:06 +0000