[pkgsrc/trunk]: pkgsrc/security/pflkm Changes up to 20041204:

[peter <peter%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/6050e50a18c9
branches:  trunk
changeset: 485135:6050e50a18c9
user:      peter <peter%pkgsrc.org@localhost>
date:      Sat Dec 04 15:01:55 2004 +0000

description:
Changes up to 20041204:

* improved cleanup routines to make sure that no memory is leaking.
* applied patch to pf.c from OPENBSD_3_6 branch:
    fix a bug that leads to a crash when binat rules of the form
    'binat from ... to ... -> (if)' are used, where the interface is dynamic.
* added (unsigned char) casts to ctype functions.
* added experimental patch for ALTQ support.
* applied patch to pfctl_parser.c from OPENBSD_3_6 branch:
    do not assume entries in pf_timeouts[] are ordererd like PFTM_* in pfvar.h
* applied patch to pf.c from OPENBSD_3_6 branch:
    The flag to re-filter pf-generated packets was set wrong by synproxy
    for ACKs. It should filter the ACK replayed to the server, instead of
    of the one to the client.
* applied patch to pf.c from OPENBSD_3_6 branch:
    For RST generated due to state mismatch during handshake, don't set
    th_flags TH_ACK and leave th_ack 0, just like the RST generated by
    the stack in this case. Fixes the Raptor workaround.
* applied patch to pf_lkm.c from NetBSD HEAD:
    pfil4_wrapper, pfil6_wrapper:
    ensure that mbufs are writable beforehand as pf assumes it.
* applied patch to pf.c from OPENBSD_3_6 branch:
    reset anchor pointer to NULL when stepping back into the main ruleset,
    fixes pflog attributing states wrongly to anchors and pfctl -vvsn/sr
    showing wrong state counters for anchor rules.

diffstat:

 security/pflkm/Makefile |  4 ++--
 security/pflkm/distinfo |  6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diffs (23 lines):

diff -r aa4490570883 -r 6050e50a18c9 security/pflkm/Makefile
--- a/security/pflkm/Makefile   Sat Dec 04 14:55:59 2004 +0000
+++ b/security/pflkm/Makefile   Sat Dec 04 15:01:55 2004 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.1.1.1 2004/11/05 15:05:30 peter Exp $
+# $NetBSD: Makefile,v 1.2 2004/12/04 15:01:55 peter Exp $
 
-DISTNAME=              pflkm-20041025
+DISTNAME=              pflkm-20041204
 CATEGORIES=            security ipv6
 MASTER_SITES=          http://nedbsd.nl/~ppostma/pf/
 
diff -r aa4490570883 -r 6050e50a18c9 security/pflkm/distinfo
--- a/security/pflkm/distinfo   Sat Dec 04 14:55:59 2004 +0000
+++ b/security/pflkm/distinfo   Sat Dec 04 15:01:55 2004 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.1.1.1 2004/11/05 15:05:30 peter Exp $
+$NetBSD: distinfo,v 1.2 2004/12/04 15:01:55 peter Exp $
 
-SHA1 (pflkm-20041025.tar.gz) = 4f0720bb8fab1d4bde0d68e6927970d98c3628ad
-Size (pflkm-20041025.tar.gz) = 792281 bytes
+SHA1 (pflkm-20041204.tar.gz) = 057af53e5f935e29d576acc822c52467510cda87
+Size (pflkm-20041204.tar.gz) = 893641 bytes