head	1.1;
branch	1.1.1;
access;
symbols
	RELENG_8_4:1.1.1.4.0.30
	RELENG_9_1_0_RELEASE:1.1.1.4
	RELENG_9_1:1.1.1.4.0.28
	RELENG_9_1_BP:1.1.1.4
	RELENG_8_3_0_RELEASE:1.1.1.4
	RELENG_8_3:1.1.1.4.0.26
	RELENG_8_3_BP:1.1.1.4
	RELENG_9_0_0_RELEASE:1.1.1.4
	RELENG_9_0:1.1.1.4.0.24
	RELENG_9_0_BP:1.1.1.4
	RELENG_9:1.1.1.4.0.22
	RELENG_9_BP:1.1.1.4
	RELENG_7_4_0_RELEASE:1.1.1.4
	RELENG_8_2_0_RELEASE:1.1.1.4
	RELENG_7_4:1.1.1.4.0.20
	RELENG_7_4_BP:1.1.1.4
	RELENG_8_2:1.1.1.4.0.18
	RELENG_8_2_BP:1.1.1.4
	RELENG_8_1_0_RELEASE:1.1.1.4
	RELENG_8_1:1.1.1.4.0.16
	RELENG_8_1_BP:1.1.1.4
	RELENG_7_3_0_RELEASE:1.1.1.4
	RELENG_7_3:1.1.1.4.0.14
	RELENG_7_3_BP:1.1.1.4
	RELENG_8_0_0_RELEASE:1.1.1.4
	RELENG_8_0:1.1.1.4.0.12
	RELENG_8_0_BP:1.1.1.4
	RELENG_8:1.1.1.4.0.10
	RELENG_8_BP:1.1.1.4
	RELENG_7_2_0_RELEASE:1.1.1.4
	RELENG_7_2:1.1.1.4.0.8
	RELENG_7_2_BP:1.1.1.4
	RELENG_7_1_0_RELEASE:1.1.1.4
	RELENG_6_4_0_RELEASE:1.1.1.2.2.1
	RELENG_7_1:1.1.1.4.0.6
	RELENG_7_1_BP:1.1.1.4
	RELENG_6_4:1.1.1.2.2.1.0.6
	RELENG_6_4_BP:1.1.1.2.2.1
	RELENG_7_0_0_RELEASE:1.1.1.4
	RELENG_6_3_0_RELEASE:1.1.1.2.2.1
	RELENG_7_0:1.1.1.4.0.4
	RELENG_7_0_BP:1.1.1.4
	RELENG_6_3:1.1.1.2.2.1.0.4
	RELENG_6_3_BP:1.1.1.2.2.1
	v4-1-28:1.1.1.4
	RELENG_7:1.1.1.4.0.2
	RELENG_7_BP:1.1.1.4
	v4-1-23:1.1.1.4
	RELENG_6_2_0_RELEASE:1.1.1.2.2.1
	RELENG_6_2:1.1.1.2.2.1.0.2
	RELENG_6_2_BP:1.1.1.2.2.1
	v4-1-13:1.1.1.4
	RELENG_5_5_0_RELEASE:1.1.1.1
	RELENG_5_5:1.1.1.1.0.38
	RELENG_5_5_BP:1.1.1.1
	RELENG_6_1_0_RELEASE:1.1.1.2
	RELENG_6_1:1.1.1.2.0.6
	RELENG_6_1_BP:1.1.1.2
	v4-1-10:1.1.1.3
	RELENG_6_0_0_RELEASE:1.1.1.2
	RELENG_6_0:1.1.1.2.0.4
	RELENG_6_0_BP:1.1.1.2
	RELENG_6:1.1.1.2.0.2
	RELENG_6_BP:1.1.1.2
	RELENG_5_4_0_RELEASE:1.1.1.1
	v4-1-8:1.1.1.2
	RELENG_5_4:1.1.1.1.0.36
	RELENG_5_4_BP:1.1.1.1
	RELENG_4_11_0_RELEASE:1.1.1.1
	RELENG_4_11:1.1.1.1.0.34
	RELENG_4_11_BP:1.1.1.1
	RELENG_5_3_0_RELEASE:1.1.1.1
	RELENG_5_3:1.1.1.1.0.32
	RELENG_5_3_BP:1.1.1.1
	RELENG_5:1.1.1.1.0.30
	RELENG_5_BP:1.1.1.1
	v3-4-35:1.1.1.1
	RELENG_4_10_0_RELEASE:1.1.1.1
	RELENG_4_10:1.1.1.1.0.28
	RELENG_4_10_BP:1.1.1.1
	RELENG_5_2_1_RELEASE:1.1.1.1
	RELENG_5_2_0_RELEASE:1.1.1.1
	RELENG_5_2:1.1.1.1.0.26
	RELENG_5_2_BP:1.1.1.1
	RELENG_4_9_0_RELEASE:1.1.1.1
	RELENG_4_9:1.1.1.1.0.24
	RELENG_4_9_BP:1.1.1.1
	RELENG_5_1_0_RELEASE:1.1.1.1
	RELENG_5_1:1.1.1.1.0.22
	RELENG_5_1_BP:1.1.1.1
	RELENG_4_8_0_RELEASE:1.1.1.1
	RELENG_4_8:1.1.1.1.0.20
	RELENG_4_8_BP:1.1.1.1
	v3-4-31:1.1.1.1
	RELENG_5_0_0_RELEASE:1.1.1.1
	RELENG_5_0:1.1.1.1.0.18
	RELENG_5_0_BP:1.1.1.1
	RELENG_4_7_0_RELEASE:1.1.1.1
	RELENG_4_7:1.1.1.1.0.16
	RELENG_4_7_BP:1.1.1.1
	v3-4-29:1.1.1.1
	RELENG_4_6_2_RELEASE:1.1.1.1
	RELENG_4_6_1_RELEASE:1.1.1.1
	RELENG_4_6_0_RELEASE:1.1.1.1
	v3-4-28:1.1.1.1
	RELENG_4_6:1.1.1.1.0.14
	RELENG_4_6_BP:1.1.1.1
	v3-4-27:1.1.1.1
	v3-4-26:1.1.1.1
	v3-4-25:1.1.1.1
	RELENG_4_5_0_RELEASE:1.1.1.1
	RELENG_4_5:1.1.1.1.0.12
	RELENG_4_5_BP:1.1.1.1
	RELENG_4_4_0_RELEASE:1.1.1.1
	RELENG_4_4:1.1.1.1.0.10
	RELENG_4_4_BP:1.1.1.1
	v3-4-20:1.1.1.1
	RELENG_4_3_0_RELEASE:1.1.1.1
	RELENG_4_3:1.1.1.1.0.8
	RELENG_4_3_BP:1.1.1.1
	v3-4-16:1.1.1.1
	rev:1.1.1.1
	RELENG_4_2_0_RELEASE:1.1.1.1
	v3-4-13:1.1.1.1
	v3-4-12:1.1.1.1
	RELENG_4_1_1_RELEASE:1.1.1.1
	PRE_SMPNG:1.1.1.1
	v3-4-9:1.1.1.1
	RELENG_4_1_0_RELEASE:1.1.1.1
	v3-4-8:1.1.1.1
	RELENG_3_5_0_RELEASE:1.1.1.1
	v3_4_4:1.1.1.1
	RELENG_4_0_0_RELEASE:1.1.1.1
	RELENG_4:1.1.1.1.0.6
	RELENG_4_BP:1.1.1.1
	v3_3_8:1.1.1.1
	v3_3_6:1.1.1.1
	RELENG_3_4_0_RELEASE:1.1.1.1
	v3_3_3:1.1.1.1
	RELENG_3_3_0_RELEASE:1.1.1.1
	RELENG_3_2_PAO:1.1.1.1.0.4
	RELENG_3_2_PAO_BP:1.1.1.1
	RELENG_3_2_0_RELEASE:1.1.1.1
	RELENG_3_1_0_RELEASE:1.1.1.1
	RELENG_3:1.1.1.1.0.2
	RELENG_3_BP:1.1.1.1
	RELENG_3_0_0_RELEASE:1.1.1.1
	v3_2_7:1.1.1.1
	v3_2_3:1.1.1.1
	v3_2_1:1.1.1.1
	v3-2-a7:1.1.1.1
	V3_2_A4:1.1.1.1
	ipfilter3_1_8:1.1.1.1
	DARRENR:1.1.1
	ipfilter3_1_7:1.1.1.1
	DARRENREED:1.1.1;
locks; strict;
comment	@# @;


1.1
date	97.02.09.22.50.16;	author darrenr;	state Exp;
branches
	1.1.1.1;
next	;

1.1.1.1
date	97.02.09.22.50.16;	author darrenr;	state Exp;
branches;
next	1.1.1.2;

1.1.1.2
date	2005.04.25.17.31.35;	author darrenr;	state Exp;
branches
	1.1.1.2.2.1;
next	1.1.1.3;

1.1.1.3
date	2005.12.30.11.34.53;	author guido;	state Exp;
branches;
next	1.1.1.4;

1.1.1.4
date	2006.08.16.11.51.31;	author guido;	state Exp;
branches
	1.1.1.4.30.1;
next	;

1.1.1.2.2.1
date	2006.08.24.07.37.09;	author guido;	state Exp;
branches;
next	;

1.1.1.4.30.1
date	2006.08.16.11.51.31;	author svnexp;	state dead;
branches;
next	1.1.1.4.30.2;

1.1.1.4.30.2
date	2013.03.28.13.01.22;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.1
log
@Initial revision
@
text
@pass in from localhost to localhost with short
block in from any to any with ipopts
pass in from any to any with opt nop,rr,zsu
pass in from any to any with opt nop,rr,zsu not opt ssrr,lsrr
pass in from localhost to localhost with not frag
@


1.1.1.1
log
@Import IP Filter v3.1.7 into FreeBSD tree
@
text
@@


1.1.1.2
log
@import ipfilter 4.1.8 into the vendor branch
@
text
@d1 1
a1 1
pass in from localhost to localhost with short,frags
a5 2
pass in proto tcp all flags S with not oow keep state
pass in proto tcp all flags S with not bad,bad-src,bad-nat
@


1.1.1.2.2.1
log
@MFC: ipfilter 4.1.13
@
text
@d5 1
a5 2
pass in from localhost to localhost and not frag
pass in from localhost to localhost with frags,frag-body
a6 1
block in proto tcp all with oow
a7 8
block in proto tcp all flags S with bad,not bad-src,not bad-nat
pass in quick all with not short
block in quick all with not nat
pass in quick all with not frag-body
block in quick all with not lowttl
pass in all with mbcast,not bcast,multicast,not state,not ipopts
block in all with not mbcast,bcast,not multicast,state
pass in from any to any with opt mtur,mtup,encode,ts,tr,sec,cipso,satid,ssrr,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump,addext,e-sec
@


1.1.1.3
log
@Import IP Filter 4.1.10
@
text
@d5 1
a5 2
pass in from localhost to localhost and not frag
pass in from localhost to localhost with frags,frag-body
a7 4
block in quick all with not nat
block in quick all with not lowttl
pass in all with mbcast,not bcast,multicast,not state
pass in from any to any with opt mtur,mtup,encode,ts,tr,sec,cipso,satid,ssrr,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump,addext,e-sec
@


1.1.1.4
log
@Import IP Filter 4.1.13
@
text
@a7 1
block in proto tcp all with oow
a8 2
block in proto tcp all flags S with bad,not bad-src,not bad-nat
pass in quick all with not short
a9 1
pass in quick all with not frag-body
d11 1
a11 2
pass in all with mbcast,not bcast,multicast,not state,not ipopts
block in all with not mbcast,bcast,not multicast,state
@


1.1.1.4.30.1
log
@file i9 was added on branch RELENG_8_4 on 2013-03-28 13:01:22 +0000
@
text
@d1 17
@


1.1.1.4.30.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 17
pass in from localhost to localhost with short,frags
block in from any to any with ipopts
pass in from any to any with opt nop,rr,zsu
pass in from any to any with opt nop,rr,zsu not opt ssrr,lsrr
pass in from localhost to localhost and not frag
pass in from localhost to localhost with frags,frag-body
pass in proto tcp all flags S with not oow keep state
block in proto tcp all with oow
pass in proto tcp all flags S with not bad,bad-src,bad-nat
block in proto tcp all flags S with bad,not bad-src,not bad-nat
pass in quick all with not short
block in quick all with not nat
pass in quick all with not frag-body
block in quick all with not lowttl
pass in all with mbcast,not bcast,multicast,not state,not ipopts
block in all with not mbcast,bcast,not multicast,state
pass in from any to any with opt mtur,mtup,encode,ts,tr,sec,cipso,satid,ssrr,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump,addext,e-sec
@


