Robert Watson 65450f2f77 o IPFW incorrectly handled filtering in the presence of previously ... reserved and now allocated TCP flags in incoming packets. This patch stops overloading those bits in the IP firewall rules, and moves colliding flags to a seperate field, ipflg. The IPFW userland management tool, ipfw(8), is updated to reflect this change. New TCP flags related to ECN are now included in tcp.h for reference, although we don't currently implement TCP+ECN. o To use this fix without completely rebuilding, it is sufficient to copy ip_fw.h and tcp.h into your appropriate include directory, then rebuild the ipfw kernel module, and ipfw tool, and install both. Note that a mismatch between module and userland tool will result in incorrect installation of firewall rules that may have unexpected effects. This is an MFC candidate, following shakedown. This bug does not appear to affect ipfilter. Reviewed by: security-officer, billf Reported by: Aragon Gouveia <aragon@phat.za.net>		2001-01-09 03:10:30 +00:00
..
ipfw.8	Prepare for mdoc(7)NG.	2000-12-27 14:40:52 +00:00
ipfw.c	o IPFW incorrectly handled filtering in the presence of previously	2001-01-09 03:10:30 +00:00
Makefile	Convert this Makefile to the usual style.	2000-10-06 11:18:11 +00:00