head	1.1;
branch	1.1.1;
access;
symbols
	RELENG_8_4:1.1.1.6.0.30
	RELENG_9_1_0_RELEASE:1.1.1.6
	RELENG_9_1:1.1.1.6.0.28
	RELENG_9_1_BP:1.1.1.6
	RELENG_8_3_0_RELEASE:1.1.1.6
	RELENG_8_3:1.1.1.6.0.26
	RELENG_8_3_BP:1.1.1.6
	RELENG_9_0_0_RELEASE:1.1.1.6
	RELENG_9_0:1.1.1.6.0.24
	RELENG_9_0_BP:1.1.1.6
	RELENG_9:1.1.1.6.0.22
	RELENG_9_BP:1.1.1.6
	RELENG_7_4_0_RELEASE:1.1.1.6
	RELENG_8_2_0_RELEASE:1.1.1.6
	RELENG_7_4:1.1.1.6.0.20
	RELENG_7_4_BP:1.1.1.6
	RELENG_8_2:1.1.1.6.0.18
	RELENG_8_2_BP:1.1.1.6
	RELENG_8_1_0_RELEASE:1.1.1.6
	RELENG_8_1:1.1.1.6.0.16
	RELENG_8_1_BP:1.1.1.6
	RELENG_7_3_0_RELEASE:1.1.1.6
	RELENG_7_3:1.1.1.6.0.14
	RELENG_7_3_BP:1.1.1.6
	RELENG_8_0_0_RELEASE:1.1.1.6
	RELENG_8_0:1.1.1.6.0.12
	RELENG_8_0_BP:1.1.1.6
	RELENG_8:1.1.1.6.0.10
	RELENG_8_BP:1.1.1.6
	RELENG_7_2_0_RELEASE:1.1.1.6
	RELENG_7_2:1.1.1.6.0.8
	RELENG_7_2_BP:1.1.1.6
	RELENG_7_1_0_RELEASE:1.1.1.6
	RELENG_6_4_0_RELEASE:1.1.1.3.2.2
	RELENG_7_1:1.1.1.6.0.6
	RELENG_7_1_BP:1.1.1.6
	RELENG_6_4:1.1.1.3.2.2.0.4
	RELENG_6_4_BP:1.1.1.3.2.2
	RELENG_7_0_0_RELEASE:1.1.1.6
	RELENG_6_3_0_RELEASE:1.1.1.3.2.2
	RELENG_7_0:1.1.1.6.0.4
	RELENG_7_0_BP:1.1.1.6
	RELENG_6_3:1.1.1.3.2.2.0.2
	RELENG_6_3_BP:1.1.1.3.2.2
	v4-1-28:1.1.1.6
	RELENG_7:1.1.1.6.0.2
	RELENG_7_BP:1.1.1.6
	v4-1-23:1.1.1.6
	RELENG_6_2_0_RELEASE:1.1.1.3.2.1
	RELENG_6_2:1.1.1.3.2.1.0.2
	RELENG_6_2_BP:1.1.1.3.2.1
	v4-1-13:1.1.1.5
	RELENG_5_5_0_RELEASE:1.1.1.2
	RELENG_5_5:1.1.1.2.0.8
	RELENG_5_5_BP:1.1.1.2
	RELENG_6_1_0_RELEASE:1.1.1.3
	RELENG_6_1:1.1.1.3.0.6
	RELENG_6_1_BP:1.1.1.3
	v4-1-10:1.1.1.4
	RELENG_6_0_0_RELEASE:1.1.1.3
	RELENG_6_0:1.1.1.3.0.4
	RELENG_6_0_BP:1.1.1.3
	RELENG_6:1.1.1.3.0.2
	RELENG_6_BP:1.1.1.3
	RELENG_5_4_0_RELEASE:1.1.1.2
	v4-1-8:1.1.1.3
	RELENG_5_4:1.1.1.2.0.6
	RELENG_5_4_BP:1.1.1.2
	RELENG_4_11_0_RELEASE:1.1.1.1.6.1
	RELENG_4_11:1.1.1.1.6.1.0.2
	RELENG_4_11_BP:1.1.1.1.6.1
	RELENG_5_3_0_RELEASE:1.1.1.2
	RELENG_5_3:1.1.1.2.0.4
	RELENG_5_3_BP:1.1.1.2
	RELENG_5:1.1.1.2.0.2
	RELENG_5_BP:1.1.1.2
	v3-4-35:1.1.1.2
	RELENG_4_10_0_RELEASE:1.1.1.1
	RELENG_4_10:1.1.1.1.0.28
	RELENG_4_10_BP:1.1.1.1
	RELENG_5_2_1_RELEASE:1.1.1.1
	RELENG_5_2_0_RELEASE:1.1.1.1
	RELENG_5_2:1.1.1.1.0.26
	RELENG_5_2_BP:1.1.1.1
	RELENG_4_9_0_RELEASE:1.1.1.1
	RELENG_4_9:1.1.1.1.0.24
	RELENG_4_9_BP:1.1.1.1
	RELENG_5_1_0_RELEASE:1.1.1.1
	RELENG_5_1:1.1.1.1.0.22
	RELENG_5_1_BP:1.1.1.1
	RELENG_4_8_0_RELEASE:1.1.1.1
	RELENG_4_8:1.1.1.1.0.20
	RELENG_4_8_BP:1.1.1.1
	v3-4-31:1.1.1.1
	RELENG_5_0_0_RELEASE:1.1.1.1
	RELENG_5_0:1.1.1.1.0.18
	RELENG_5_0_BP:1.1.1.1
	RELENG_4_7_0_RELEASE:1.1.1.1
	RELENG_4_7:1.1.1.1.0.16
	RELENG_4_7_BP:1.1.1.1
	v3-4-29:1.1.1.1
	RELENG_4_6_2_RELEASE:1.1.1.1
	RELENG_4_6_1_RELEASE:1.1.1.1
	RELENG_4_6_0_RELEASE:1.1.1.1
	v3-4-28:1.1.1.1
	RELENG_4_6:1.1.1.1.0.14
	RELENG_4_6_BP:1.1.1.1
	v3-4-27:1.1.1.1
	v3-4-26:1.1.1.1
	v3-4-25:1.1.1.1
	RELENG_4_5_0_RELEASE:1.1.1.1
	RELENG_4_5:1.1.1.1.0.12
	RELENG_4_5_BP:1.1.1.1
	RELENG_4_4_0_RELEASE:1.1.1.1
	RELENG_4_4:1.1.1.1.0.10
	RELENG_4_4_BP:1.1.1.1
	v3-4-20:1.1.1.1
	RELENG_4_3_0_RELEASE:1.1.1.1
	RELENG_4_3:1.1.1.1.0.8
	RELENG_4_3_BP:1.1.1.1
	v3-4-16:1.1.1.1
	rev:1.1.1.1
	RELENG_4_2_0_RELEASE:1.1.1.1
	v3-4-13:1.1.1.1
	v3-4-12:1.1.1.1
	RELENG_4_1_1_RELEASE:1.1.1.1
	PRE_SMPNG:1.1.1.1
	v3-4-9:1.1.1.1
	RELENG_4_1_0_RELEASE:1.1.1.1
	v3-4-8:1.1.1.1
	RELENG_3_5_0_RELEASE:1.1.1.1
	v3_4_4:1.1.1.1
	RELENG_4_0_0_RELEASE:1.1.1.1
	RELENG_4:1.1.1.1.0.6
	RELENG_4_BP:1.1.1.1
	v3_3_8:1.1.1.1
	v3_3_6:1.1.1.1
	RELENG_3_4_0_RELEASE:1.1.1.1
	v3_3_3:1.1.1.1
	RELENG_3_3_0_RELEASE:1.1.1.1
	RELENG_3_2_PAO:1.1.1.1.0.4
	RELENG_3_2_PAO_BP:1.1.1.1
	RELENG_3_2_0_RELEASE:1.1.1.1
	RELENG_3_1_0_RELEASE:1.1.1.1
	RELENG_3:1.1.1.1.0.2
	RELENG_3_BP:1.1.1.1
	RELENG_3_0_0_RELEASE:1.1.1.1
	v3_2_7:1.1.1.1
	v3_2_3:1.1.1.1
	v3_2_1:1.1.1.1
	v3-2-a7:1.1.1.1
	V3_2_A4:1.1.1.1
	ipfilter3_1_8:1.1.1.1
	DARRENR:1.1.1
	ipfilter3_1_7:1.1.1.1
	DARRENREED:1.1.1;
locks; strict;
comment	@# @;


1.1
date	97.02.09.22.50.11;	author darrenr;	state Exp;
branches
	1.1.1.1;
next	;

1.1.1.1
date	97.02.09.22.50.11;	author darrenr;	state Exp;
branches
	1.1.1.1.6.1;
next	1.1.1.2;

1.1.1.2
date	2004.06.21.22.47.51;	author darrenr;	state Exp;
branches;
next	1.1.1.3;

1.1.1.3
date	2005.04.25.17.31.27;	author darrenr;	state Exp;
branches
	1.1.1.3.2.1;
next	1.1.1.4;

1.1.1.4
date	2005.12.30.11.34.53;	author guido;	state Exp;
branches;
next	1.1.1.5;

1.1.1.5
date	2006.08.16.11.51.31;	author guido;	state Exp;
branches;
next	1.1.1.6;

1.1.1.6
date	2007.06.04.02.48.50;	author darrenr;	state Exp;
branches
	1.1.1.6.30.1;
next	;

1.1.1.1.6.1
date	2004.07.04.09.24.41;	author darrenr;	state Exp;
branches;
next	;

1.1.1.3.2.1
date	2006.08.24.07.37.08;	author guido;	state Exp;
branches;
next	1.1.1.3.2.2;

1.1.1.3.2.2
date	2007.11.18.11.03.25;	author darrenr;	state Exp;
branches;
next	;

1.1.1.6.30.1
date	2007.06.04.02.48.50;	author svnexp;	state dead;
branches;
next	1.1.1.6.30.2;

1.1.1.6.30.2
date	2013.03.28.13.01.21;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.1
log
@Initial revision
@
text
@pass in on ed0(!) proto tcp from 127.0.0.1/32 to 127.0.0.1/32 port = 23 keep state
block in log first on lo0(!) proto tcp/udp from any to any keep state
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 2049 keep frags
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 53 keep state keep frags
@


1.1.1.1
log
@Import IP Filter v3.1.7 into FreeBSD tree
@
text
@@


1.1.1.1.6.1
log
@MFC of IPFilter 3.4.35.
@
text
@a4 1
pass in proto tcp from any port > 1024 to 127.0.0.1/32 port = 25 keep state
@


1.1.1.2
log
@Import ipfilter 3.4.35 onto vendor branch
@
text
@a4 1
pass in proto tcp from any port > 1024 to 127.0.0.1/32 port = 25 keep state
@


1.1.1.3
log
@import ipfilter 4.1.8 into the vendor branch
@
text
@d3 1
a3 1
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 20499 keep frags
d5 1
a5 4
pass in on ed0(!) out-via vx0(!) proto udp from any to any keep state
pass out on ppp0(!) in-via le0(!) proto tcp from any to any keep state
pass in proto tcp from any port > 1024 to 127.0.0.1/32 port = 1024 keep state
pass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,strict,newisn,no-icmp-err)
@


1.1.1.3.2.1
log
@MFC: ipfilter 4.1.13
@
text
@d2 1
a2 1
block in log first on lo0(!) proto tcp/udp from any to any port = 7 keep state
a3 1
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 2049 keep frags (strict)
a6 1
pass in on ed0(!),vx0(!) out-via vx0(!),ed0(!) proto udp from any to any keep state
d8 1
a8 2
pass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,strict,newisn,no-icmp-err,age 600/600)
pass in proto udp from any to any keep state (sync,age 10/20)
@


1.1.1.3.2.2
log
@MFC IPFilter update from 4.1.13 to 4.1.28, including additional fixes applied
post 4.1.28 for FreeBSD.  See src/contrib/ipfilter/HISTORY for more details
of the bugs fixed, etc.
@
text
@d1 2
a2 2
pass in on ed0(!) proto tcp from 127.0.0.1/32 to 127.0.0.1/32 port = 23 keep state # count 0
block in log first on lo0(!) proto tcp/udp from any to any port = 7 keep state # count 0
d5 7
a11 7
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 53 keep state keep frags # count 0
pass in on ed0(!) out-via vx0(!) proto udp from any to any keep state # count 0
pass out on ppp0(!) in-via le0(!) proto tcp from any to any keep state # count 0
pass in on ed0(!),vx0(!) out-via vx0(!),ed0(!) proto udp from any to any keep state # count 0
pass in proto tcp from any port > 1024 to 127.0.0.1/32 port = 1024 keep state # count 0
pass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,strict,newisn,no-icmp-err,age 600/600) # count 0
pass in proto udp from any to any keep state (sync,age 10/20) # count 0
@


1.1.1.4
log
@Import IP Filter 4.1.10
@
text
@d2 1
a2 1
block in log first on lo0(!) proto tcp/udp from any to any port = 7 keep state
a3 1
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 2049 keep frags (strict)
a6 1
pass in on ed0(!),vx0(!) out-via vx0(!),ed0(!) proto udp from any to any keep state
@


1.1.1.5
log
@Import IP Filter 4.1.13
@
text
@d10 1
a10 2
pass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,strict,newisn,no-icmp-err,age 600/600)
pass in proto udp from any to any keep state (sync,age 10/20)
@


1.1.1.6
log
@Import IPFilter 4.1.23 to vendor branch.
See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13
@
text
@d1 2
a2 2
pass in on ed0(!) proto tcp from 127.0.0.1/32 to 127.0.0.1/32 port = 23 keep state # count 0
block in log first on lo0(!) proto tcp/udp from any to any port = 7 keep state # count 0
d5 7
a11 7
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 53 keep state keep frags # count 0
pass in on ed0(!) out-via vx0(!) proto udp from any to any keep state # count 0
pass out on ppp0(!) in-via le0(!) proto tcp from any to any keep state # count 0
pass in on ed0(!),vx0(!) out-via vx0(!),ed0(!) proto udp from any to any keep state # count 0
pass in proto tcp from any port > 1024 to 127.0.0.1/32 port = 1024 keep state # count 0
pass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,strict,newisn,no-icmp-err,age 600/600) # count 0
pass in proto udp from any to any keep state (sync,age 10/20) # count 0
@


1.1.1.6.30.1
log
@file i11 was added on branch RELENG_8_4 on 2013-03-28 13:01:21 +0000
@
text
@d1 11
@


1.1.1.6.30.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 11
pass in on ed0(!) proto tcp from 127.0.0.1/32 to 127.0.0.1/32 port = 23 keep state # count 0
block in log first on lo0(!) proto tcp/udp from any to any port = 7 keep state # count 0
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 20499 keep frags
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 2049 keep frags (strict)
pass in proto udp from 127.0.0.1/32 to 127.0.0.1/32 port = 53 keep state keep frags # count 0
pass in on ed0(!) out-via vx0(!) proto udp from any to any keep state # count 0
pass out on ppp0(!) in-via le0(!) proto tcp from any to any keep state # count 0
pass in on ed0(!),vx0(!) out-via vx0(!),ed0(!) proto udp from any to any keep state # count 0
pass in proto tcp from any port > 1024 to 127.0.0.1/32 port = 1024 keep state # count 0
pass in proto tcp from any to any flags S/FSRPAU keep state (limit 101,strict,newisn,no-icmp-err,age 600/600) # count 0
pass in proto udp from any to any keep state (sync,age 10/20) # count 0
@


