Changes in ip_fil.c

3f534a4c344b43eec3c11e5db1eabc32a3919cd5 - 9181 ipf: this use of "defined" may not be portable

Thu, 22 Feb 2018 14:36:34 +0100

9181 ipf: this use of "defined" may not be portableReviewed by: Yuri Pankov Reviewed by: Andrew Stormont Reviewed by: Alexander Pyhalov Approved by: Gordon Ross (cherry picked from commit 919bbe8a9c2d07453bbad63228681965103dff07) List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

fd48ee9d3ac0b670085f2c9cbfb9e810ea509cc4 - 8164 ipf: bad preprocessor use and need FALLTHROUGH

Fri, 05 May 2017 14:50:30 +0200

8164 ipf: bad preprocessor use and need FALLTHROUGHReviewed by: Jason King Reviewed by: Robert Mustacchi Reviewed by: Alexander Pyhalov Approved by: Hans Rosenfeld (cherry picked from commit ea0fc911b38005d4a49a679e0828f1800c35b979) List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

33f2fefd46350ca5992567761c46a5b70f864340 - 5008943 /etc/init.d/ipfboot pause/resume functionality broken

Tue, 27 Jan 2009 11:55:41 +0100

5008943 /etc/init.d/ipfboot pause/resume functionality broken5010756 "\" in configuration file does not work correctly6181489 ipfilter sends out confusing messages.6449288 Makefiles in usr/src/cmd/ipf are missing CDDL6449291 package prototype files in usr/src/pkgdefs/SUNWipfh missing CDDL6508325 stale pfil-related rules in Makefile.rules6661948 ipmon.pid file can be rendered invisible6714319 IPFilter causes failure of IPv6 compliance tests.6766614 fin_state costs more than it is worth6767239 fin_nat causes more trouble than it is worth6788299 Array overrun in ipfilter6789766 ipfs usage output is misleading6792026 ipnat panics in Divide zero exception List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

7ddc9b1afd18f260b9fb78ec7732facd91769131 - PSARC/2008/219 Committed API for packet interception

Mon, 08 Sep 2008 23:46:50 +0200

PSARC/2008/219 Committed API for packet interceptionPSARC/2008/335 Corrections for Committed API for packet interceptionPSARC/2008/557 Revision to net instance notification API4844507 Solaris needs stable interface for packet filtering software6705155 ipf_stack_init() assumes kmem_alloc with KM_NOSLEEP never fails List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

ab073b324433ebc8947d28ade932d29d0e809795 - 6726575 ipfilter needs to be able to do randomised port mapping

Fri, 01 Aug 2008 23:29:34 +0200

6726575 ipfilter needs to be able to do randomised port mapping6730614 random port numbers are in the wrong range of numbers List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

d6c23f6fbecbcca8ddd2b74c6e10f37095f9fd46 - PSARC 2008/250 ipv6 NAT for IPFilter

Thu, 24 Jul 2008 04:59:47 +0200

PSARC 2008/250 ipv6 NAT for IPFilter6600474 RFE: Need ipv6 support on NAT List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

cbded9ae11944b2d8ab0ae13e5dbd0881ddba98c - 6719268 enabling ipfilter causes up to 80% or more drop in packet throughput for multi-stream workloads

Sat, 19 Jul 2008 00:44:15 +0200

6719268 enabling ipfilter causes up to 80% or more drop in packet throughput for multi-stream workloads6721215 ipfilter panic in ipf:fr_derefrule after restoring state table6723213 IPfilter: NAT suffers performance hit by holding exclusive locks longer than required List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

f4b3ec61df05330d25f55a36b975b4d7519fdeb1 - PSARC 2006/366 IP Instances

Sat, 20 Jan 2007 01:59:38 +0100

PSARC 2006/366 IP Instances6289221 RFE: Need virtualized ip-stack for each local zone6512601 panic in ipsec_in_tag - allocation failure6514637 error message from dhcpagent: add_pkt_opt: option type 60 is missing required value6364643 RFE: allow persistent setting of interface flags per zone6307539 RFE: Invalid network address causes zone boot failure5041214 Allow IPMP configuration with zones5005887 RFE: zoneadmd should support plumbing an interface via DHCP4991139 RFE: zones should provide a mechanism to configure a defaultrouter for a zone6218378 zoneadmd doesn't set the netmask for non-loopback addresses hosted on lo04963280 zones: need to virtualize the IPv6 default address selection mechanism4963285 zones: need support of stateless address autoconfiguration for IPv65048068 zones don't boot if one of its interfaces has failed5057154 RFE: ability to change interface status from within a zone4963287 zones should support the plumbing of the first (and only) logical interface4978517 TCP privileged port space should be partitioned per zone5023347 zones don't work well with network routes other than default4963372 investigate whether global zone can act as a router for local zones6378364 RFE: Allow each zone to have its own virtual IPFilter List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

381a2a9a387f449fab7d0c7e97c4184c26963abf - PSARC/2005/334 Packet Filtering Hooks

Sat, 21 Oct 2006 01:37:58 +0200

PSARC/2005/334 Packet Filtering HooksPSARC/2006/321 ARP packet filtering Hooks6401219 use of pullupmsg() considered destructive - clears h/w checksum flags6418698 PSARC/2005/334 - Packet Filtering Hooks API6449290 package prototype files in usr/src/pkgdefs/SUNWipfr missing CDDL6449292 package prototype files in usr/src/pkgdefs/SUNWipfu missing CDDL6449296 Makefiles for ipf kernel module building missing CDDL6473996 "fastroute" + "nat" packets cause memory leaks in ipfilter--HG--rename : usr/src/cmd/ipf/etc/pfil.ap.sh => deleted_files/usr/src/cmd/ipf/etc/pfil.ap.shrename : usr/src/cmd/ipf/pfild/Makefile => deleted_files/usr/src/cmd/ipf/pfild/Makefilerename : usr/src/cmd/ipf/pfild/pfild.c => deleted_files/usr/src/cmd/ipf/pfild/pfild.crename : usr/src/cmd/ipf/pfild/vas.c => deleted_files/usr/src/cmd/ipf/pfild/vas.crename : usr/src/cmd/ipf/svc/pfil => deleted_files/usr/src/cmd/ipf/svc/pfilrename : usr/src/cmd/ipf/svc/pfil.xml => deleted_files/usr/src/cmd/ipf/svc/pfil.xmlrename : usr/src/uts/common/inet/pfil/compat.h => deleted_files/usr/src/uts/common/inet/pfil/compat.hrename : usr/src/uts/common/inet/pfil/ndd.c => deleted_files/usr/src/uts/common/inet/pfil/ndd.crename : usr/src/uts/common/inet/pfil/os.h => deleted_files/usr/src/uts/common/inet/pfil/os.hrename : usr/src/uts/common/inet/pfil/pfil.c => deleted_files/usr/src/uts/common/inet/pfil/pfil.crename : usr/src/uts/common/inet/pfil/pfil.conf => deleted_files/usr/src/uts/common/inet/pfil/pfil.confrename : usr/src/uts/common/inet/pfil/pfil.h => deleted_files/usr/src/uts/common/inet/pfil/pfil.hrename : usr/src/uts/common/inet/pfil/pfild.h => deleted_files/usr/src/uts/common/inet/pfil/pfild.hrename : usr/src/uts/common/inet/pfil/pfildrv.c => deleted_files/usr/src/uts/common/inet/pfil/pfildrv.crename : usr/src/uts/common/inet/pfil/pfilstream.c => deleted_files/usr/src/uts/common/inet/pfil/pfilstream.crename : usr/src/uts/common/inet/pfil/pkt.c => deleted_files/usr/src/uts/common/inet/pfil/pkt.crename : usr/src/uts/common/inet/pfil/qif.c => deleted_files/usr/src/uts/common/inet/pfil/qif.crename : usr/src/uts/common/inet/pfil/qif.h => deleted_files/usr/src/uts/common/inet/pfil/qif.hrename : usr/src/uts/intel/pfil/Makefile => deleted_files/usr/src/uts/intel/pfil/Makefilerename : usr/src/uts/sparc/pfil/Makefile => deleted_files/usr/src/uts/sparc/pfil/Makefilerename : usr/src/uts/common/inet/pfil/misc.c => usr/src/uts/common/inet/ipf/misc.c List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

ab25eeb551a4be927a4b6ae2cf8aff7ed17decb4 - PSARC 2006/082 IP Filter Code Merge on ip_fil4.1.9

Wed, 19 Jul 2006 10:15:53 +0200

PSARC 2006/082 IP Filter Code Merge on ip_fil4.1.94912568 ipftest ipf ipfstat ipnat ippool need a non-name resolution flag5040248 ipfs -W fails to save kernel state tables5081834 syntax parser reports wrong error position and line number5094575 keyword "netmask" is un-supported in ipnat.conf (4)6181751 ipf parser fails on wrong subnet notations6181773 ipf parser fails on wrong port ranges6248745 ipnat drops packets if the IP header is not 32 bit aligned6340621 RFE: IP Filter code merge on ip_fil4.1.96359805 ipf command incorrectly check options in rules and core dumps6395837 ipnat tcpudp parsing is incomplete6426469 IPFilter rejects IPv6 neighbour discovery packets6447872 usr/src/common/ipf/ip_compat.h should not be CDDL--HG--rename : usr/src/common/ipf/bpf-ipf.h => usr/src/uts/common/inet/ipf/bpf-ipf.hrename : usr/src/common/ipf/fil.c => usr/src/uts/common/inet/ipf/fil.crename : usr/src/common/ipf/ip_auth.c => usr/src/uts/common/inet/ipf/ip_auth.crename : usr/src/common/ipf/ip_fil_solaris.c => usr/src/uts/common/inet/ipf/ip_fil_solaris.crename : usr/src/common/ipf/ip_frag.c => usr/src/uts/common/inet/ipf/ip_frag.crename : usr/src/common/ipf/ip_htable.c => usr/src/uts/common/inet/ipf/ip_htable.crename : usr/src/common/ipf/ip_log.c => usr/src/uts/common/inet/ipf/ip_log.crename : usr/src/common/ipf/ip_lookup.c => usr/src/uts/common/inet/ipf/ip_lookup.crename : usr/src/common/ipf/ip_nat.c => usr/src/uts/common/inet/ipf/ip_nat.crename : usr/src/common/ipf/ip_pool.c => usr/src/uts/common/inet/ipf/ip_pool.crename : usr/src/common/ipf/ip_proxy.c => usr/src/uts/common/inet/ipf/ip_proxy.crename : usr/src/common/ipf/ip_state.c => usr/src/uts/common/inet/ipf/ip_state.crename : usr/src/common/ipf/ipf.h => usr/src/uts/common/inet/ipf/ipf.hrename : usr/src/common/ipf/ipmon.h => usr/src/uts/common/inet/ipf/ipmon.hrename : usr/src/common/ipf/ipt.h => usr/src/uts/common/inet/ipf/ipt.hrename : usr/src/common/ipf/Makefile => usr/src/uts/common/inet/ipf/netinet/Makefilerename : usr/src/common/ipf/ip_auth.h => usr/src/uts/common/inet/ipf/netinet/ip_auth.hrename : usr/src/common/ipf/ip_compat.h => usr/src/uts/common/inet/ipf/netinet/ip_compat.hrename : usr/src/common/ipf/ip_fil.h => usr/src/uts/common/inet/ipf/netinet/ip_fil.hrename : usr/src/common/ipf/ip_frag.h => usr/src/uts/common/inet/ipf/netinet/ip_frag.hrename : usr/src/common/ipf/ip_ftp_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_ftp_pxy.crename : usr/src/common/ipf/ip_h323_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_h323_pxy.crename : usr/src/common/ipf/ip_htable.h => usr/src/uts/common/inet/ipf/netinet/ip_htable.hrename : usr/src/common/ipf/ip_ipsec_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_ipsec_pxy.crename : usr/src/common/ipf/ip_irc_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_irc_pxy.crename : usr/src/common/ipf/ip_lookup.h => usr/src/uts/common/inet/ipf/netinet/ip_lookup.hrename : usr/src/common/ipf/ip_nat.h => usr/src/uts/common/inet/ipf/netinet/ip_nat.hrename : usr/src/common/ipf/ip_netbios_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_netbios_pxy.crename : usr/src/common/ipf/ip_pool.h => usr/src/uts/common/inet/ipf/netinet/ip_pool.hrename : usr/src/common/ipf/ip_proxy.h => usr/src/uts/common/inet/ipf/netinet/ip_proxy.hrename : usr/src/common/ipf/ip_raudio_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_raudio_pxy.crename : usr/src/common/ipf/ip_rcmd_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_rcmd_pxy.crename : usr/src/common/ipf/ip_rpcb_pxy.c => usr/src/uts/common/inet/ipf/netinet/ip_rpcb_pxy.crename : usr/src/common/ipf/ip_state.h => usr/src/uts/common/inet/ipf/netinet/ip_state.hrename : usr/src/common/ipf/ipl.h => usr/src/uts/common/inet/ipf/netinet/ipl.hrename : usr/src/common/ipf/opts.h => usr/src/uts/common/inet/ipf/opts.hrename : usr/src/common/ipf/radix.c => usr/src/uts/common/inet/ipf/radix.crename : usr/src/common/ipf/radix.h => usr/src/uts/common/inet/ipf/radix.hrename : usr/src/common/ipf/solaris.c => usr/src/uts/common/inet/ipf/solaris.crename : usr/src/uts/common/inet/ipf/compat.h => usr/src/uts/common/inet/pfil/compat.hrename : usr/src/uts/common/inet/ipf/misc.c => usr/src/uts/common/inet/pfil/misc.crename : usr/src/uts/common/inet/ipf/ndd.c => usr/src/uts/common/inet/pfil/ndd.crename : usr/src/uts/common/inet/ipf/os.h => usr/src/uts/common/inet/pfil/os.hrename : usr/src/uts/common/inet/ipf/pfil.c => usr/src/uts/common/inet/pfil/pfil.crename : usr/src/uts/common/inet/ipf/pfil.conf => usr/src/uts/common/inet/pfil/pfil.confrename : usr/src/uts/common/inet/ipf/pfil.h => usr/src/uts/common/inet/pfil/pfil.hrename : usr/src/common/ipf/pfild.h => usr/src/uts/common/inet/pfil/pfild.hrename : usr/src/uts/common/inet/ipf/pfildrv.c => usr/src/uts/common/inet/pfil/pfildrv.crename : usr/src/uts/common/inet/ipf/pfilstream.c => usr/src/uts/common/inet/pfil/pfilstream.crename : usr/src/uts/common/inet/ipf/pkt.c => usr/src/uts/common/inet/pfil/pkt.crename : usr/src/uts/common/inet/ipf/qif.c => usr/src/uts/common/inet/pfil/qif.crename : usr/src/uts/common/inet/ipf/qif.h => usr/src/uts/common/inet/pfil/qif.h List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

5e985db5e665b4363a8154fb1870b3895ca33192 - 6373357 ipfilter tools need to check return values from memory allocation

Thu, 16 Feb 2006 20:17:41 +0100

6373357 ipfilter tools need to check return values from memory allocation List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

7663b81667fda05833f609eceac713f0a83c2347 - 4951608 RFE: IP Filter should filter IPv6 traffic

Sat, 01 Oct 2005 03:43:55 +0200

4951608 RFE: IP Filter should filter IPv6 traffic List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c

7c478bd95313f5f23a4c958a745db2134aa03244 - OpenSolaris Launch

Tue, 14 Jun 2005 09:00:00 +0200

OpenSolaris Launch List of files: /titanic_44/usr/src/cmd/ipf/tools/ip_fil.c