Import IP Filter 3.2.5
This commit is contained in:
parent
8e900f5ee8
commit
d7c5c548fb
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: ipf.h,v 1.1.1.8 1997/11/14 08:03:02 mrg Exp $ */
|
/* $NetBSD: ipf.h,v 1.1.1.9 1998/05/17 16:29:42 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: opt.c,v 1.1.1.8 1997/11/14 08:03:01 mrg Exp $ */
|
/* $NetBSD: opt.c,v 1.1.1.9 1998/05/17 16:29:42 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: kmem.c,v 1.1.1.8 1997/11/14 08:03:08 mrg Exp $ */
|
/* $NetBSD: kmem.c,v 1.1.1.9 1998/05/17 16:29:43 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: kmem.h,v 1.1.1.8 1997/11/14 08:03:10 mrg Exp $ */
|
/* $NetBSD: kmem.h,v 1.1.1.9 1998/05/17 16:29:44 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: ipft_ef.c,v 1.1.1.8 1997/11/14 08:03:19 mrg Exp $ */
|
/* $NetBSD: ipft_ef.c,v 1.1.1.9 1998/05/17 16:29:45 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: ipft_hx.c,v 1.1.1.8 1997/11/14 08:03:26 mrg Exp $ */
|
/* $NetBSD: ipft_hx.c,v 1.1.1.9 1998/05/17 16:29:45 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1995-1997 by Darren Reed.
|
* Copyright (C) 1995-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: ipft_pc.c,v 1.1.1.8 1997/11/14 08:03:22 mrg Exp $ */
|
/* $NetBSD: ipft_pc.c,v 1.1.1.9 1998/05/17 16:29:45 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: ipft_sn.c,v 1.1.1.8 1997/11/14 08:03:17 mrg Exp $ */
|
/* $NetBSD: ipft_sn.c,v 1.1.1.9 1998/05/17 16:29:44 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: ipft_td.c,v 1.1.1.8 1997/11/14 08:03:20 mrg Exp $ */
|
/* $NetBSD: ipft_td.c,v 1.1.1.9 1998/05/17 16:29:45 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: ipft_tx.c,v 1.1.1.8 1997/11/14 08:03:23 mrg Exp $ */
|
/* $NetBSD: ipft_tx.c,v 1.1.1.9 1998/05/17 16:29:45 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1995-1997 by Darren Reed.
|
* Copyright (C) 1995-1997 by Darren Reed.
|
||||||
@ -45,7 +45,7 @@
|
|||||||
|
|
||||||
#if !defined(lint)
|
#if !defined(lint)
|
||||||
static const char sccsid[] = "@(#)ipft_tx.c 1.7 6/5/96 (C) 1993 Darren Reed";
|
static const char sccsid[] = "@(#)ipft_tx.c 1.7 6/5/96 (C) 1993 Darren Reed";
|
||||||
static const char rcsid[] = "@(#)Id: ipft_tx.c,v 2.0.2.11.2.1 1997/11/12 10:56:11 darrenr Exp ";
|
static const char rcsid[] = "@(#)Id: ipft_tx.c,v 2.0.2.11.2.2 1998/04/08 14:31:16 darrenr Exp ";
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
extern int opts;
|
extern int opts;
|
||||||
@ -91,7 +91,7 @@ int *resolved;
|
|||||||
fprintf(stderr, "can't resolve hostname: %s\n", host);
|
fprintf(stderr, "can't resolve hostname: %s\n", host);
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
return np->n_net;
|
return htonl(np->n_net);
|
||||||
}
|
}
|
||||||
return *(u_32_t *)hp->h_addr;
|
return *(u_32_t *)hp->h_addr;
|
||||||
}
|
}
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: ipt.h,v 1.1.1.8 1997/11/14 08:03:28 mrg Exp $ */
|
/* $NetBSD: ipt.h,v 1.1.1.9 1998/05/17 16:29:46 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: misc.c,v 1.1.1.8 1997/11/14 08:03:25 mrg Exp $ */
|
/* $NetBSD: misc.c,v 1.1.1.9 1998/05/17 16:29:45 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: pcap.h,v 1.1.1.5 1997/11/14 08:03:31 mrg Exp $ */
|
/* $NetBSD: pcap.h,v 1.1.1.6 1998/05/17 16:29:46 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: snoop.h,v 1.1.1.8 1997/11/14 08:03:29 mrg Exp $ */
|
/* $NetBSD: snoop.h,v 1.1.1.9 1998/05/17 16:29:46 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1993-1997 by Darren Reed.
|
* Copyright (C) 1993-1997 by Darren Reed.
|
||||||
|
@ -1,18 +1,18 @@
|
|||||||
block in from any to any and not ipopts
|
block in from any to any with not ipopts
|
||||||
pass in from any to any and not opt sec-class topsecret
|
pass in from any to any with not opt sec-class topsecret
|
||||||
block in from any to any and not opt ssrr,sec-class topsecret
|
block in from any to any with not opt ssrr,sec-class topsecret
|
||||||
pass in from any to any and not opt ssrr,sec-class topsecret
|
pass in from any to any with not opt ssrr,sec-class topsecret
|
||||||
block in from any to any and not opt ts,sec-class topsecret
|
block in from any to any with not opt ts,sec-class topsecret
|
||||||
pass in from any to any and not opt ts,sec-class topsecret
|
pass in from any to any with not opt ts,sec-class topsecret
|
||||||
block in from any to any and not opt sec-class secret
|
block in from any to any with not opt sec-class secret
|
||||||
pass in from any to any and not opt sec-class secret
|
pass in from any to any with not opt sec-class secret
|
||||||
block in from any to any and not opt lsrr,ssrr
|
block in from any to any with not opt lsrr,ssrr
|
||||||
pass in from any to any and not opt lsrr,ssrr
|
pass in from any to any with not opt lsrr,ssrr
|
||||||
pass in from any to any and not ipopts
|
pass in from any to any with not ipopts
|
||||||
block in from any to any and not opt lsrr
|
block in from any to any with not opt lsrr
|
||||||
pass in from any to any and not opt lsrr
|
pass in from any to any with not opt lsrr
|
||||||
block in from any to any and not opt ssrr,ts
|
block in from any to any with not opt ssrr,ts
|
||||||
pass in from any to any and not opt ssrr,ts
|
pass in from any to any with not opt ssrr,ts
|
||||||
block in from any to any and not opt rr
|
block in from any to any with not opt rr
|
||||||
pass in from any to any and not opt rr
|
pass in from any to any with not opt rr
|
||||||
block in from any to any and not opt sec-class topsecret
|
block in from any to any with not opt sec-class topsecret
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: ipresend.c,v 1.1.1.5 1997/11/14 08:04:23 mrg Exp $ */
|
/* $NetBSD: ipresend.c,v 1.1.1.6 1998/05/17 16:29:52 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* ipresend.c (C) 1995-1997 Darren Reed
|
* ipresend.c (C) 1995-1997 Darren Reed
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: iplang.h,v 1.1.1.3 1997/11/14 08:04:47 mrg Exp $ */
|
/* $NetBSD: iplang.h,v 1.1.1.4 1998/05/17 16:29:56 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (C) 1997 by Darren Reed.
|
* Copyright (C) 1997 by Darren Reed.
|
||||||
|
@ -1,11 +1,11 @@
|
|||||||
#
|
#
|
||||||
interface { ifname le0; mtu 1500; }
|
interface { ifname le0; mtu 1500; } ;
|
||||||
|
|
||||||
ipv4 {
|
ipv4 {
|
||||||
src 1.1.1.1; dst 2.2.2.2;
|
src 1.1.1.1; dst 2.2.2.2;
|
||||||
tcp {
|
tcp {
|
||||||
seq 12345; ack 0; sport 9999; dport 23; flags S;
|
seq 12345; ack 0; sport 9999; dport 23; flags S;
|
||||||
data { value "abcdef"; } ;
|
data { value "abcdef"; } ;
|
||||||
}
|
} ;
|
||||||
}
|
} ;
|
||||||
send { via 10.1.1.1; }
|
send { via 10.1.1.1; } ;
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
/* $NetBSD: tcpip.h,v 1.1.1.3 1997/11/14 08:04:39 mrg Exp $ */
|
/* $NetBSD: tcpip.h,v 1.1.1.4 1998/05/17 16:29:54 veego Exp $ */
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Copyright (c) 1982, 1986, 1993
|
* Copyright (c) 1982, 1986, 1993
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
#
|
#
|
||||||
# block all outgoing TCP packets on le0 from any host to port 23 of host bar.
|
# block all outgoing TCP packets on le0 from any host to port 23 of host bar.
|
||||||
#
|
#
|
||||||
block out on le0 proto tcp from any to bar/32 port != 23
|
block out on le0 proto tcp from any to bar/32 port = 23
|
||||||
|
Loading…
Reference in New Issue
Block a user