From owner-cvs-sys  Fri Jun 20 16:06:46 1997
Return-Path: <owner-cvs-sys>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id QAA00768
          for cvs-sys-outgoing; Fri, 20 Jun 1997 16:06:46 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id QAA00690;
          Fri, 20 Jun 1997 16:06:08 -0700 (PDT)
From: Julian Elischer <julian@FreeBSD.ORG>
Received: (from julian@localhost)
	by freefall.freebsd.org (8.8.5/8.8.5) id QAA26658;
	Fri, 20 Jun 1997 16:05:40 -0700 (PDT)
Date: Fri, 20 Jun 1997 16:05:40 -0700 (PDT)
Message-Id: <199706202305.QAA26658@freefall.freebsd.org>
To: cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG
Subject: cvs commit: src/sys/netinet ip_divert.c ip_fw.c ip_fw.h ip_input.c
         ip_output.c
Sender: owner-cvs-sys@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

julian      1997/06/20 16:05:39 PDT

  Modified files:        (Branch: RELENG_2_2)
    sys/netinet          ip_divert.c ip_fw.c ip_fw.h ip_input.c 
                         ip_output.c 
  Log:
  YACFC
  
  bring back the ipfirewall changes
  this allows more secure firewall and to reject TCP
  requests correctly
  
  Submitted by:	Whistle Communications
  user-mode changes to follow.
  
  Revision  Changes    Path
  1.1.2.3   +18 -5     src/sys/netinet/ip_divert.c
  1.51.2.3  +387 -199  src/sys/netinet/ip_fw.c
  1.23.2.2  +96 -45    src/sys/netinet/ip_fw.h
  1.50.2.6  +16 -16    src/sys/netinet/ip_input.c
  1.44.2.6  +13 -16    src/sys/netinet/ip_output.c