head	1.1;
branch	1.1.1;
access;
symbols
	RELENG_8_4:1.1.1.5.0.30
	RELENG_9_1_0_RELEASE:1.1.1.5
	RELENG_9_1:1.1.1.5.0.28
	RELENG_9_1_BP:1.1.1.5
	RELENG_8_3_0_RELEASE:1.1.1.5
	RELENG_8_3:1.1.1.5.0.26
	RELENG_8_3_BP:1.1.1.5
	RELENG_9_0_0_RELEASE:1.1.1.5
	RELENG_9_0:1.1.1.5.0.24
	RELENG_9_0_BP:1.1.1.5
	RELENG_9:1.1.1.5.0.22
	RELENG_9_BP:1.1.1.5
	RELENG_7_4_0_RELEASE:1.1.1.5
	RELENG_8_2_0_RELEASE:1.1.1.5
	RELENG_7_4:1.1.1.5.0.20
	RELENG_7_4_BP:1.1.1.5
	RELENG_8_2:1.1.1.5.0.18
	RELENG_8_2_BP:1.1.1.5
	RELENG_8_1_0_RELEASE:1.1.1.5
	RELENG_8_1:1.1.1.5.0.16
	RELENG_8_1_BP:1.1.1.5
	RELENG_7_3_0_RELEASE:1.1.1.5
	RELENG_7_3:1.1.1.5.0.14
	RELENG_7_3_BP:1.1.1.5
	RELENG_8_0_0_RELEASE:1.1.1.5
	RELENG_8_0:1.1.1.5.0.12
	RELENG_8_0_BP:1.1.1.5
	RELENG_8:1.1.1.5.0.10
	RELENG_8_BP:1.1.1.5
	RELENG_7_2_0_RELEASE:1.1.1.5
	RELENG_7_2:1.1.1.5.0.8
	RELENG_7_2_BP:1.1.1.5
	RELENG_7_1_0_RELEASE:1.1.1.5
	RELENG_6_4_0_RELEASE:1.1.1.2.2.2
	RELENG_7_1:1.1.1.5.0.6
	RELENG_7_1_BP:1.1.1.5
	RELENG_6_4:1.1.1.2.2.2.0.4
	RELENG_6_4_BP:1.1.1.2.2.2
	RELENG_7_0_0_RELEASE:1.1.1.5
	RELENG_6_3_0_RELEASE:1.1.1.2.2.2
	RELENG_7_0:1.1.1.5.0.4
	RELENG_7_0_BP:1.1.1.5
	RELENG_6_3:1.1.1.2.2.2.0.2
	RELENG_6_3_BP:1.1.1.2.2.2
	v4-1-28:1.1.1.5
	RELENG_7:1.1.1.5.0.2
	RELENG_7_BP:1.1.1.5
	v4-1-23:1.1.1.5
	RELENG_6_2_0_RELEASE:1.1.1.2.2.1
	RELENG_6_2:1.1.1.2.2.1.0.2
	RELENG_6_2_BP:1.1.1.2.2.1
	v4-1-13:1.1.1.4
	RELENG_5_5_0_RELEASE:1.1.1.1
	RELENG_5_5:1.1.1.1.0.38
	RELENG_5_5_BP:1.1.1.1
	RELENG_6_1_0_RELEASE:1.1.1.2
	RELENG_6_1:1.1.1.2.0.6
	RELENG_6_1_BP:1.1.1.2
	v4-1-10:1.1.1.3
	RELENG_6_0_0_RELEASE:1.1.1.2
	RELENG_6_0:1.1.1.2.0.4
	RELENG_6_0_BP:1.1.1.2
	RELENG_6:1.1.1.2.0.2
	RELENG_6_BP:1.1.1.2
	RELENG_5_4_0_RELEASE:1.1.1.1
	v4-1-8:1.1.1.2
	RELENG_5_4:1.1.1.1.0.36
	RELENG_5_4_BP:1.1.1.1
	RELENG_4_11_0_RELEASE:1.1.1.1
	RELENG_4_11:1.1.1.1.0.34
	RELENG_4_11_BP:1.1.1.1
	RELENG_5_3_0_RELEASE:1.1.1.1
	RELENG_5_3:1.1.1.1.0.32
	RELENG_5_3_BP:1.1.1.1
	RELENG_5:1.1.1.1.0.30
	RELENG_5_BP:1.1.1.1
	v3-4-35:1.1.1.1
	RELENG_4_10_0_RELEASE:1.1.1.1
	RELENG_4_10:1.1.1.1.0.28
	RELENG_4_10_BP:1.1.1.1
	RELENG_5_2_1_RELEASE:1.1.1.1
	RELENG_5_2_0_RELEASE:1.1.1.1
	RELENG_5_2:1.1.1.1.0.26
	RELENG_5_2_BP:1.1.1.1
	RELENG_4_9_0_RELEASE:1.1.1.1
	RELENG_4_9:1.1.1.1.0.24
	RELENG_4_9_BP:1.1.1.1
	RELENG_5_1_0_RELEASE:1.1.1.1
	RELENG_5_1:1.1.1.1.0.22
	RELENG_5_1_BP:1.1.1.1
	RELENG_4_8_0_RELEASE:1.1.1.1
	RELENG_4_8:1.1.1.1.0.20
	RELENG_4_8_BP:1.1.1.1
	v3-4-31:1.1.1.1
	RELENG_5_0_0_RELEASE:1.1.1.1
	RELENG_5_0:1.1.1.1.0.18
	RELENG_5_0_BP:1.1.1.1
	RELENG_4_7_0_RELEASE:1.1.1.1
	RELENG_4_7:1.1.1.1.0.16
	RELENG_4_7_BP:1.1.1.1
	v3-4-29:1.1.1.1
	RELENG_4_6_2_RELEASE:1.1.1.1
	RELENG_4_6_1_RELEASE:1.1.1.1
	RELENG_4_6_0_RELEASE:1.1.1.1
	v3-4-28:1.1.1.1
	RELENG_4_6:1.1.1.1.0.14
	RELENG_4_6_BP:1.1.1.1
	v3-4-27:1.1.1.1
	v3-4-26:1.1.1.1
	v3-4-25:1.1.1.1
	RELENG_4_5_0_RELEASE:1.1.1.1
	RELENG_4_5:1.1.1.1.0.12
	RELENG_4_5_BP:1.1.1.1
	RELENG_4_4_0_RELEASE:1.1.1.1
	RELENG_4_4:1.1.1.1.0.10
	RELENG_4_4_BP:1.1.1.1
	v3-4-20:1.1.1.1
	RELENG_4_3_0_RELEASE:1.1.1.1
	RELENG_4_3:1.1.1.1.0.8
	RELENG_4_3_BP:1.1.1.1
	v3-4-16:1.1.1.1
	rev:1.1.1.1
	RELENG_4_2_0_RELEASE:1.1.1.1
	v3-4-13:1.1.1.1
	v3-4-12:1.1.1.1
	RELENG_4_1_1_RELEASE:1.1.1.1
	PRE_SMPNG:1.1.1.1
	v3-4-9:1.1.1.1
	RELENG_4_1_0_RELEASE:1.1.1.1
	v3-4-8:1.1.1.1
	RELENG_3_5_0_RELEASE:1.1.1.1
	v3_4_4:1.1.1.1
	RELENG_4_0_0_RELEASE:1.1.1.1
	RELENG_4:1.1.1.1.0.6
	RELENG_4_BP:1.1.1.1
	v3_3_8:1.1.1.1
	v3_3_6:1.1.1.1
	RELENG_3_4_0_RELEASE:1.1.1.1
	v3_3_3:1.1.1.1
	RELENG_3_3_0_RELEASE:1.1.1.1
	RELENG_3_2_PAO:1.1.1.1.0.4
	RELENG_3_2_PAO_BP:1.1.1.1
	RELENG_3_2_0_RELEASE:1.1.1.1
	RELENG_3_1_0_RELEASE:1.1.1.1
	RELENG_3:1.1.1.1.0.2
	RELENG_3_BP:1.1.1.1
	RELENG_3_0_0_RELEASE:1.1.1.1
	v3_2_7:1.1.1.1
	v3_2_3:1.1.1.1
	v3_2_1:1.1.1.1
	v3-2-a7:1.1.1.1
	V3_2_A4:1.1.1.1
	ipfilter3_1_8:1.1.1.1
	DARRENR:1.1.1
	ipfilter3_1_7:1.1.1.1
	DARRENREED:1.1.1;
locks; strict;
comment	@# @;


1.1
date	97.02.09.22.50.11;	author darrenr;	state Exp;
branches
	1.1.1.1;
next	;

1.1.1.1
date	97.02.09.22.50.11;	author darrenr;	state Exp;
branches;
next	1.1.1.2;

1.1.1.2
date	2005.04.25.17.31.27;	author darrenr;	state Exp;
branches
	1.1.1.2.2.1;
next	1.1.1.3;

1.1.1.3
date	2005.12.30.11.34.53;	author guido;	state Exp;
branches;
next	1.1.1.4;

1.1.1.4
date	2006.08.16.11.51.31;	author guido;	state Exp;
branches;
next	1.1.1.5;

1.1.1.5
date	2007.06.04.02.48.49;	author darrenr;	state Exp;
branches
	1.1.1.5.30.1;
next	;

1.1.1.2.2.1
date	2006.08.24.07.37.08;	author guido;	state Exp;
branches;
next	1.1.1.2.2.2;

1.1.1.2.2.2
date	2007.11.18.11.03.25;	author darrenr;	state Exp;
branches;
next	;

1.1.1.5.30.1
date	2007.06.04.02.48.49;	author svnexp;	state dead;
branches;
next	1.1.1.5.30.2;

1.1.1.5.30.2
date	2013.03.28.13.01.21;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.1
log
@Initial revision
@
text
@pass in from 127.0.0.1/32 to 127.0.0.1/32 with short
block in from any to any with ipopt
pass in from any to any with opt nop,rr,zsu
pass in from any to any with opt nop,rr,zsu not opt lsrr,ssrr
pass in from 127.0.0.1/32 to 127.0.0.1/32 with not frag
@


1.1.1.1
log
@Import IP Filter v3.1.7 into FreeBSD tree
@
text
@@


1.1.1.2
log
@import ipfilter 4.1.8 into the vendor branch
@
text
@d1 2
a2 2
pass in from 127.0.0.1/32 to 127.0.0.1/32 with short,frag
block in from any to any with ipopts
a5 2
pass in proto tcp from any to any flags S/FSRPAU with not oow keep state
pass in proto tcp from any to any flags S/FSRPAU with not bad,bad-src,bad-nat
@


1.1.1.2.2.1
log
@MFC: ipfilter 4.1.13
@
text
@a5 1
pass in from 127.0.0.1/32 to 127.0.0.1/32 with frag,frag-body
a6 1
block in proto tcp from any to any with oow
a7 8
block in proto tcp from any to any flags S/FSRPAU with bad,not bad-src,not bad-nat
pass in quick from any to any with not short
block in quick from any to any with not nat
pass in quick from any to any with not frag-body
block in quick from any to any with not lowttl
pass in from any to any with not ipopts,mbcast,not bcast,mcast,not state
block in from any to any with not mbcast,bcast,not mcast,state
pass in from any to any with opt mtup,mtur,encode,ts,tr,sec,e-sec,cipso,satid,ssrr,addext,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump
@


1.1.1.2.2.2
log
@MFC IPFilter update from 4.1.13 to 4.1.28, including additional fixes applied
post 4.1.28 for FreeBSD.  See src/contrib/ipfilter/HISTORY for more details
of the bugs fixed, etc.
@
text
@d7 1
a7 1
pass in proto tcp from any to any flags S/FSRPAU with not oow keep state # count 0
@


1.1.1.3
log
@Import IP Filter 4.1.10
@
text
@a5 1
pass in from 127.0.0.1/32 to 127.0.0.1/32 with frag,frag-body
a7 4
block in quick from any to any with not nat
block in quick from any to any with not lowttl
pass in from any to any with mbcast,not bcast,mcast,not state
pass in from any to any with opt mtup,mtur,encode,ts,tr,sec,e-sec,cipso,satid,ssrr,addext,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump
@


1.1.1.4
log
@Import IP Filter 4.1.13
@
text
@a7 1
block in proto tcp from any to any with oow
a8 2
block in proto tcp from any to any flags S/FSRPAU with bad,not bad-src,not bad-nat
pass in quick from any to any with not short
a9 1
pass in quick from any to any with not frag-body
d11 1
a11 2
pass in from any to any with not ipopts,mbcast,not bcast,mcast,not state
block in from any to any with not mbcast,bcast,not mcast,state
@


1.1.1.5
log
@Import IPFilter 4.1.23 to vendor branch.
See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13
@
text
@d7 1
a7 1
pass in proto tcp from any to any flags S/FSRPAU with not oow keep state # count 0
@


1.1.1.5.30.1
log
@file i9 was added on branch RELENG_8_4 on 2013-03-28 13:01:21 +0000
@
text
@d1 17
@


1.1.1.5.30.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 17
pass in from 127.0.0.1/32 to 127.0.0.1/32 with short,frag
block in from any to any with ipopts
pass in from any to any with opt nop,rr,zsu
pass in from any to any with opt nop,rr,zsu not opt lsrr,ssrr
pass in from 127.0.0.1/32 to 127.0.0.1/32 with not frag
pass in from 127.0.0.1/32 to 127.0.0.1/32 with frag,frag-body
pass in proto tcp from any to any flags S/FSRPAU with not oow keep state # count 0
block in proto tcp from any to any with oow
pass in proto tcp from any to any flags S/FSRPAU with not bad,bad-src,bad-nat
block in proto tcp from any to any flags S/FSRPAU with bad,not bad-src,not bad-nat
pass in quick from any to any with not short
block in quick from any to any with not nat
pass in quick from any to any with not frag-body
block in quick from any to any with not lowttl
pass in from any to any with not ipopts,mbcast,not bcast,mcast,not state
block in from any to any with not mbcast,bcast,not mcast,state
pass in from any to any with opt mtup,mtur,encode,ts,tr,sec,e-sec,cipso,satid,ssrr,addext,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump
@


