Module Name:	syssrc
Committed By:	veego
Date:		Thu Aug 31 14:49:51 UTC 2000

Modified Files:
	basesrc/dist/ipf [netbsd-1-5]: HISTORY fils.c ip_sfil.c ipf.c ipmon.c
	    ipnat.c natparse.c parse.c
	basesrc/dist/ipf/iplang [netbsd-1-5]: iplang_y.y
	basesrc/dist/ipf/ipsend [netbsd-1-5]: ipsend.1 ipsend.5
	syssrc/sys/netinet [netbsd-1-5]: fil.c ip_auth.c ip_fil.c ip_ftp_pxy.c
	    ip_log.c ip_nat.c ip_nat.h ip_rcmd_pxy.c ip_state.c ip_state.h
	    ipl.h

Log Message:
Pull up ipf 3.4.9 (requested by veego). approved by releng-1-5.

basesrc/dist/ipf/HISTORY	1.8 -> 1.9
basesrc/dist/ipf/fils.c		1.9 -> 1.10
basesrc/dist/ipf/ip_sfil.c	1.5 -> 1.6
basesrc/dist/ipf/ipf.c		1.4 -> 1.5
basesrc/dist/ipf/ipmon.c	1.4 -> 1.5
basesrc/dist/ipf/ipnat.c	1.5 -> 1.6
basesrc/dist/ipf/natparse.c	1.3 -> 1.4
basesrc/dist/ipf/parse.c	1.4 -> 1.5
basesrc/dist/ipf/iplang/iplang_y.y	1.2 -> 1.3
basesrc/dist/ipf/ipsend/ipsend.1	1.2 -> 1.3
basesrc/dist/ipf/ipsend/ipsend.5	1.1 -> 1.2
syssrc/sys/netinet/fil.c		1.36 -> 1.37
syssrc/sys/netinet/ip_auth.c		1.17 -> 1.18
syssrc/sys/netinet/ip_fil.c		1.57 -> 1.58
syssrc/sys/netinet/ip_ftp_pxy.c		1.16 -> 1.17
syssrc/sys/netinet/ip_log.c		1.10 -> 1.11
syssrc/sys/netinet/ip_nat.c		1.34 -> 1.35
syssrc/sys/netinet/ip_nat.h		1.20 -> 1.21
syssrc/sys/netinet/ip_rcmd_pxy.c	1.4 -> 1.5
syssrc/sys/netinet/ip_state.c		1.26 -> 1.27
syssrc/sys/netinet/ip_state.h		1.16 -> 1.17
syssrc/sys/netinet/ipl.h		1.8 -> 1.9

Changes:
>3.4.9	08/08/2000 - Released
>
>implement new aging mechanism in fr_tcp_age()
>
>fix icmp state checking bug
>
>revamp buildsunos script and build both sparcv7/sparcv9 for Solaris
>if on an Ultra with a 64bit system & compiler (Caseper Dik)
>
>open ipfilter device read only if we know we can
>
>print out better information for ICMP packets in ipmon
>
>move checking for source spoofed packets to a point where we can generate
>logs of them
>
>return EFAULT from ircopyptr/iwcopyptr
>
>don't do ioctl(SIOCGETFS) for auth stats
>
>fix up freeing mbufs for post-4.3BSD
>
>fix returning of inc from ftp proxy
>
>fix bugs with ipfs -R/-W (Caseper Dik)
>
>3.4.8	19/07/2000 - Released
>
>create fake opt_inet6.h for FreeBSD-4 compile as LKM
>
>add #ifdef's for KLD_MODULE sanity
>
>NAT fastroute'd packets which come out of return-*
>
>fix upper/lower case crap in ftp proxy and get seq# checking fixed up.
>
>3.4.7	08/07/2000 - Released
>
>make "ipf -y" lookup NAT if's which are unknown
>
>prepend line numbers to ioctl error messages in ipf/ipnat
>
>don't apply patches to FreeBSD twice
>
>allow for ip_len to be on an unaligned boundary early on in fr_precheck
>
>fix printing of icmp code when it is 0
>
>correct printing of port numbers in map rules with from/to
>
>don't allow fr_func to be called at securelevel > 0 or rules to be added
>if securelevel > 0 if they have a non-zero fr_func.


To generate a diff of this commit:
cvs rdiff -r1.8 -r1.8.2.1 basesrc/dist/ipf/HISTORY
cvs rdiff -r1.9 -r1.9.4.1 basesrc/dist/ipf/fils.c
cvs rdiff -r1.5 -r1.5.4.1 basesrc/dist/ipf/ip_sfil.c basesrc/dist/ipf/ipnat.c
cvs rdiff -r1.4 -r1.4.4.1 basesrc/dist/ipf/ipf.c basesrc/dist/ipf/ipmon.c \
    basesrc/dist/ipf/parse.c
cvs rdiff -r1.3 -r1.3.2.1 basesrc/dist/ipf/natparse.c
cvs rdiff -r1.2 -r1.2.4.1 basesrc/dist/ipf/iplang/iplang_y.y
cvs rdiff -r1.2 -r1.2.8.1 basesrc/dist/ipf/ipsend/ipsend.1
cvs rdiff -r1.1 -r1.1.8.1 basesrc/dist/ipf/ipsend/ipsend.5
cvs rdiff -r1.36 -r1.36.2.1 syssrc/sys/netinet/fil.c
cvs rdiff -r1.17 -r1.17.4.1 syssrc/sys/netinet/ip_auth.c
cvs rdiff -r1.55.2.3 -r1.55.2.4 syssrc/sys/netinet/ip_fil.c
cvs rdiff -r1.16 -r1.16.4.1 syssrc/sys/netinet/ip_ftp_pxy.c \
    syssrc/sys/netinet/ip_state.h
cvs rdiff -r1.10 -r1.10.4.1 syssrc/sys/netinet/ip_log.c
cvs rdiff -r1.34 -r1.34.2.1 syssrc/sys/netinet/ip_nat.c
cvs rdiff -r1.20 -r1.20.2.1 syssrc/sys/netinet/ip_nat.h
cvs rdiff -r1.4 -r1.4.4.1 syssrc/sys/netinet/ip_rcmd_pxy.c
cvs rdiff -r1.26 -r1.26.4.1 syssrc/sys/netinet/ip_state.c
cvs rdiff -r1.8 -r1.8.2.1 syssrc/sys/netinet/ipl.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.