8164 ipf: bad preprocessor use and need FALLTHROUGHReviewed by: Jason King <jason.brian.king+illumos@gmail.com>Reviewed by: Robert Mustacchi <rm@joyent.com>Reviewed by: Alexander Pyhalov <apyhalov
8164 ipf: bad preprocessor use and need FALLTHROUGHReviewed by: Jason King <jason.brian.king+illumos@gmail.com>Reviewed by: Robert Mustacchi <rm@joyent.com>Reviewed by: Alexander Pyhalov <apyhalov@gmail.com>Approved by: Hans Rosenfeld <hans.rosenfeld@joyent.com>(cherry picked from commit ea0fc911b38005d4a49a679e0828f1800c35b979)
show more ...
5198 Want alternate global zone rule set for each ipf netstack5197 Global zone should be able to manage NGZ ipf stateReviewed by: Jerry Jelinek <jerry.jelinek@joyent.com>Reviewed by: Robert Mustac
5198 Want alternate global zone rule set for each ipf netstack5197 Global zone should be able to manage NGZ ipf stateReviewed by: Jerry Jelinek <jerry.jelinek@joyent.com>Reviewed by: Robert Mustacchi <rm@joyent.com>Reviewed by: Dan McDonald <danmcd@omniti.com>Reviewed by: Darren Reed <darrenr@fastmail.net>Approved by: Richard Lowe <richlowe@richlowe.net>
PSARC 2010/299 GNU/Linux/BSD compatibility functions6960818 add get_nprocs(), getline(), strdupa(), strndup() to libc6901783 strndup would be nice6824404 libc should provide ffsl() & ffsll()67939
PSARC 2010/299 GNU/Linux/BSD compatibility functions6960818 add get_nprocs(), getline(), strdupa(), strndup() to libc6901783 strndup would be nice6824404 libc should provide ffsl() & ffsll()6793969 RFE: Add|stpcpy|to libc6735446 Want a __progname symbol for BSD-style source compatibility6421095 Solaris should provide strcasestr6275498 Provide string compare functions wcscasecmp,wcsncasecmp in solaris like linux--HG--rename : usr/src/lib/libc/port/gen/strcasecmp.c => usr/src/lib/libc/port/gen/ascii_strcasecmp.crename : usr/src/lib/libc/port/gen/strncasecmp.c => usr/src/lib/libc/port/gen/ascii_strncasecmp.crename : usr/src/lib/libc/sparc/gen/strcasecmp.s => usr/src/lib/libc/sparc/gen/ascii_strcasecmp.srename : usr/src/lib/libc/sparcv9/gen/strcasecmp.s => usr/src/lib/libc/sparcv9/gen/ascii_strcasecmp.s
6918206 Packets double counted on with "call now" rules6918859 pools should track bytes as well as packets for better usability6921174 ippool -ld crashes if nodes are inserted with ioctl and policy
6918206 Packets double counted on with "call now" rules6918859 pools should track bytes as well as packets for better usability6921174 ippool -ld crashes if nodes are inserted with ioctl and policy rules are not in place
6749429 printing out of fragment information is confused6749445 ipfstat -f does not show ttl but rather expiration tick6783820 IPF preauth crash6730356 legacy test regressions: i2, i4, i11
6726575 ipfilter needs to be able to do randomised port mapping6730614 random port numbers are in the wrong range of numbers
PSARC 2008/250 ipv6 NAT for IPFilter6600474 RFE: Need ipv6 support on NAT
PSARC/2007/666 Broadcast/multicast packet notification through pfhooks6633786 ipfilter with no mbcast not working as expected6645812 GLD packets are not flagged correctly as multicast/broadcast
PSARC 2006/366 IP Instances6289221 RFE: Need virtualized ip-stack for each local zone6512601 panic in ipsec_in_tag - allocation failure6514637 error message from dhcpagent: add_pkt_opt: option typ
PSARC 2006/366 IP Instances6289221 RFE: Need virtualized ip-stack for each local zone6512601 panic in ipsec_in_tag - allocation failure6514637 error message from dhcpagent: add_pkt_opt: option type 60 is missing required value6364643 RFE: allow persistent setting of interface flags per zone6307539 RFE: Invalid network address causes zone boot failure5041214 Allow IPMP configuration with zones5005887 RFE: zoneadmd should support plumbing an interface via DHCP4991139 RFE: zones should provide a mechanism to configure a defaultrouter for a zone6218378 zoneadmd doesn't set the netmask for non-loopback addresses hosted on lo04963280 zones: need to virtualize the IPv6 default address selection mechanism4963285 zones: need support of stateless address autoconfiguration for IPv65048068 zones don't boot if one of its interfaces has failed5057154 RFE: ability to change interface status from within a zone4963287 zones should support the plumbing of the first (and only) logical interface4978517 TCP privileged port space should be partitioned per zone5023347 zones don't work well with network routes other than default4963372 investigate whether global zone can act as a router for local zones6378364 RFE: Allow each zone to have its own virtual IPFilter
PSARC/2005/334 Packet Filtering HooksPSARC/2006/321 ARP packet filtering Hooks6401219 use of pullupmsg() considered destructive - clears h/w checksum flags6418698 PSARC/2005/334 - Packet Filtering
PSARC/2005/334 Packet Filtering HooksPSARC/2006/321 ARP packet filtering Hooks6401219 use of pullupmsg() considered destructive - clears h/w checksum flags6418698 PSARC/2005/334 - Packet Filtering Hooks API6449290 package prototype files in usr/src/pkgdefs/SUNWipfr missing CDDL6449292 package prototype files in usr/src/pkgdefs/SUNWipfu missing CDDL6449296 Makefiles for ipf kernel module building missing CDDL6473996 "fastroute" + "nat" packets cause memory leaks in ipfilter--HG--rename : usr/src/cmd/ipf/etc/pfil.ap.sh => deleted_files/usr/src/cmd/ipf/etc/pfil.ap.shrename : usr/src/cmd/ipf/pfild/Makefile => deleted_files/usr/src/cmd/ipf/pfild/Makefilerename : usr/src/cmd/ipf/pfild/pfild.c => deleted_files/usr/src/cmd/ipf/pfild/pfild.crename : usr/src/cmd/ipf/pfild/vas.c => deleted_files/usr/src/cmd/ipf/pfild/vas.crename : usr/src/cmd/ipf/svc/pfil => deleted_files/usr/src/cmd/ipf/svc/pfilrename : usr/src/cmd/ipf/svc/pfil.xml => deleted_files/usr/src/cmd/ipf/svc/pfil.xmlrename : usr/src/uts/common/inet/pfil/compat.h => deleted_files/usr/src/uts/common/inet/pfil/compat.hrename : usr/src/uts/common/inet/pfil/ndd.c => deleted_files/usr/src/uts/common/inet/pfil/ndd.crename : usr/src/uts/common/inet/pfil/os.h => deleted_files/usr/src/uts/common/inet/pfil/os.hrename : usr/src/uts/common/inet/pfil/pfil.c => deleted_files/usr/src/uts/common/inet/pfil/pfil.crename : usr/src/uts/common/inet/pfil/pfil.conf => deleted_files/usr/src/uts/common/inet/pfil/pfil.confrename : usr/src/uts/common/inet/pfil/pfil.h => deleted_files/usr/src/uts/common/inet/pfil/pfil.hrename : usr/src/uts/common/inet/pfil/pfild.h => deleted_files/usr/src/uts/common/inet/pfil/pfild.hrename : usr/src/uts/common/inet/pfil/pfildrv.c => deleted_files/usr/src/uts/common/inet/pfil/pfildrv.crename : usr/src/uts/common/inet/pfil/pfilstream.c => deleted_files/usr/src/uts/common/inet/pfil/pfilstream.crename : usr/src/uts/common/inet/pfil/pkt.c => deleted_files/usr/src/uts/common/inet/pfil/pkt.crename : usr/src/uts/common/inet/pfil/qif.c => deleted_files/usr/src/uts/common/inet/pfil/qif.crename : usr/src/uts/common/inet/pfil/qif.h => deleted_files/usr/src/uts/common/inet/pfil/qif.hrename : usr/src/uts/intel/pfil/Makefile => deleted_files/usr/src/uts/intel/pfil/Makefilerename : usr/src/uts/sparc/pfil/Makefile => deleted_files/usr/src/uts/sparc/pfil/Makefilerename : usr/src/uts/common/inet/pfil/misc.c => usr/src/uts/common/inet/ipf/misc.c
6476429 ipnat once again does not allow rdr rules to specify a 0/0 destination (Regression)6476724 parsing error with ipnat and extended port matching has returned (Regression)6477791 IPfilter does
6476429 ipnat once again does not allow rdr rules to specify a 0/0 destination (Regression)6476724 parsing error with ipnat and extended port matching has returned (Regression)6477791 IPfilter does not display all IPv6 addresses correctly after "Code Merge" (Regression)
6427271 ipfilter now supports IPv6 rules, but still assumes hostnames resolve to IPv4 addresses.6458962 Several IPfilter source files are "obsolete" and can be deleted.--HG--rename : usr/src/cmd/
6427271 ipfilter now supports IPv6 rules, but still assumes hostnames resolve to IPv4 addresses.6458962 Several IPfilter source files are "obsolete" and can be deleted.--HG--rename : usr/src/cmd/ipf/lib/common/hostmask.c => deleted_files/usr/src/cmd/ipf/lib/common/hostmask.crename : usr/src/cmd/ipf/lib/common/hostnum.c => deleted_files/usr/src/cmd/ipf/lib/common/hostnum.crename : usr/src/cmd/ipf/lib/common/natparse.c => deleted_files/usr/src/cmd/ipf/lib/common/natparse.crename : usr/src/cmd/ipf/lib/common/to_interface.c => deleted_files/usr/src/cmd/ipf/lib/common/to_interface.c
PSARC 2006/082 IP Filter Code Merge on ip_fil4.1.94912568 ipftest ipf ipfstat ipnat ippool need a non-name resolution flag5040248 ipfs -W fails to save kernel state tables5081834 syntax parser rep
PSARC 2006/082 IP Filter Code Merge on ip_fil4.1.94912568 ipftest ipf ipfstat ipnat ippool need a non-name resolution flag5040248 ipfs -W fails to save kernel state tables5081834 syntax parser reports wrong error position and line number5094575 keyword "netmask" is un-supported in ipnat.conf (4)6181751 ipf parser fails on wrong subnet notations6181773 ipf parser fails on wrong port ranges6248745 ipnat drops packets if the IP header is not 32 bit aligned6340621 RFE: IP Filter code merge on ip_fil4.1.96359805 ipf command incorrectly check options in rules and core dumps6395837 ipnat tcpudp parsing is incomplete6426469 IPFilter rejects IPv6 neighbour discovery packets6447872 usr/src/common/ipf/ip_compat.h should not be CDDL--HG--rename : usr/src/common/ipf/bpf-ipf.h => usr/src/uts/common/inet/ipf/bpf-ipf.hrename : usr/src/common/ipf/fil.c => usr/src/uts/common/inet/ipf/fil.crename : usr/src/common/ipf/ip_auth.c => usr/src/uts/common/inet/ipf/ip_auth.crename : usr/src/common/ipf/ip_fil_solaris.c => usr/src/uts/common/inet/ipf/ip_fil_solaris.crename : usr/src/common/ipf/ip_frag.c => usr/src/uts/common/inet/ipf/ip_frag.crename : usr/src/common/ipf/ip_htable.c => usr/src/uts/common/inet/ipf/ip_htable.crename : usr/src/common/ipf/ip_log.c => usr/src/uts/common/inet/ipf/ip_log.crename : usr/src/common/ipf/ip_lookup.c => usr/src/uts/common/inet/ipf/ip_lookup.crename : usr/src/common/ipf/ip_nat.c => usr/src/uts/common/inet/ipf/ip_nat.crename : usr/src/common/ipf/ip_pool.c => usr/src/uts/common/inet/ipf/ip_pool.crename : usr/src/common/ipf/ip_proxy.c => usr/src/uts/common/inet/ipf/ip_proxy.crename : usr/src/common/ipf/ip_state.c => usr/src/uts/common/inet/ipf/ip_state.crename : usr/src/common/ipf/ipf.h => usr/src/uts/common/inet/ipf/ipf.hrename : usr/src/common/ipf/ipmon.h => usr/src/uts/common/inet/ipf/ipmon.hrename : usr/src/common/ipf/ipt.h => usr/src/uts/common/inet/ipf/ipt.hrename : usr/src/common/ipf/Makefile => usr/src/uts/common/inet/ipf/netinet/Makefilerename : usr/src/common/ipf/ip_auth.h => usr/src/uts/common/inet/ipf/netinet/ip_auth.hrename : usr/src/common/ipf/ip_compat.h => usr/src/uts/common/inet/ipf/netinet/ip_compat.hrename : usr/src/common/ipf/ip_fil.h => usr/src/uts/common/inet/ipf/netinet/ip_fil.hrename : usr/src/common/ipf/ip_frag.h => usr/src/uts/common/inet/ipf/netinet/ip_frag.hrename : usr/src/common/ipf/ip_ftp_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_ftp_pxy.crename : usr/src/common/ipf/ip_h323_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_h323_pxy.crename : usr/src/common/ipf/ip_htable.h => usr/src/uts/common/inet/ipf/netinet/ip_htable.hrename : usr/src/common/ipf/ip_ipsec_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_ipsec_pxy.crename : usr/src/common/ipf/ip_irc_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_irc_pxy.crename : usr/src/common/ipf/ip_lookup.h => usr/src/uts/common/inet/ipf/netinet/ip_lookup.hrename : usr/src/common/ipf/ip_nat.h => usr/src/uts/common/inet/ipf/netinet/ip_nat.hrename : usr/src/common/ipf/ip_netbios_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_netbios_pxy.crename : usr/src/common/ipf/ip_pool.h => usr/src/uts/common/inet/ipf/netinet/ip_pool.hrename : usr/src/common/ipf/ip_proxy.h => usr/src/uts/common/inet/ipf/netinet/ip_proxy.hrename : usr/src/common/ipf/ip_raudio_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_raudio_pxy.crename : usr/src/common/ipf/ip_rcmd_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_rcmd_pxy.crename : usr/src/common/ipf/ip_rpcb_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_rpcb_pxy.crename : usr/src/common/ipf/ip_state.h => usr/src/uts/common/inet/ipf/netinet/ip_state.hrename : usr/src/common/ipf/ipl.h => usr/src/uts/common/inet/ipf/netinet/ipl.hrename : usr/src/common/ipf/opts.h => usr/src/uts/common/inet/ipf/opts.hrename : usr/src/common/ipf/radix.c => usr/src/uts/common/inet/ipf/radix.crename : usr/src/common/ipf/radix.h => usr/src/uts/common/inet/ipf/radix.hrename : usr/src/common/ipf/solaris.c => usr/src/uts/common/inet/ipf/solaris.crename : usr/src/uts/common/inet/ipf/compat.h => usr/src/uts/common/inet/pfil/compat.hrename : usr/src/uts/common/inet/ipf/misc.c => usr/src/uts/common/inet/pfil/misc.crename : usr/src/uts/common/inet/ipf/ndd.c => usr/src/uts/common/inet/pfil/ndd.crename : usr/src/uts/common/inet/ipf/os.h => usr/src/uts/common/inet/pfil/os.hrename : usr/src/uts/common/inet/ipf/pfil.c => usr/src/uts/common/inet/pfil/pfil.crename : usr/src/uts/common/inet/ipf/pfil.conf => usr/src/uts/common/inet/pfil/pfil.confrename : usr/src/uts/common/inet/ipf/pfil.h => usr/src/uts/common/inet/pfil/pfil.hrename : usr/src/common/ipf/pfild.h => usr/src/uts/common/inet/pfil/pfild.hrename : usr/src/uts/common/inet/ipf/pfildrv.c => usr/src/uts/common/inet/pfil/pfildrv.crename : usr/src/uts/common/inet/ipf/pfilstream.c => usr/src/uts/common/inet/pfil/pfilstream.crename : usr/src/uts/common/inet/ipf/pkt.c => usr/src/uts/common/inet/pfil/pkt.crename : usr/src/uts/common/inet/ipf/qif.c => usr/src/uts/common/inet/pfil/qif.crename : usr/src/uts/common/inet/ipf/qif.h => usr/src/uts/common/inet/pfil/qif.h
4951608 RFE: IP Filter should filter IPv6 traffic
6307568 ipfstat -t doesn't display the idle time correctly6319881 ipnat does not allow rdr rules to specify a 0/0 destination6321197 "ipf -n" doesn't work with "-r" or "-z" option
6307498 ipf/ipfstat doesn't print out mbcast option when used in rules
OpenSolaris Launch