For those with FreeBSD 5.3 systems, I've cleanly compiled IPFilter as part of the kernel build after doing a BSD/kupgrade.
Hopefully nutting out the problems with timeout queues has brought an end to panics that mention those functions. The change to SIOCGNATL is to provide support for identd being able to determine which host it should relay the connection to, an upcoming change to NetBSD. Cheers, Darren http://coombs.anu.edu.au/~avalon/ip_fil4.1.8.tar.gz e7d92bc8a4e7878a4c60bb3aff84384f ip_fil4.1.8.tar.gz 4.1.8 - Released 29 March 2005 include path from Phil Dibowitz for sorting ipfstat -t output by source or destination port. fix a bug in printing rules where interface names could not be printed, even if they're in the rule structure. fix BSD/kupgrade to correctly change ipfilter lkm Makefile for FreeBSD add a new features to SIOCGNATL: - if IPN_IN is set, search for a matching MAP entry instead of RDR (Peter Potsma) turn off function inlining for freebsd 5.3+ UDP doesn't pullup enough data which can sometimes cause a panic. Fix other protocols, as required, where a similar problem may exist. overhaul the timeout queue management, especially that for user defined queues which are now only freed in an orderly manner. 4.1.7 - Released 13 March 2005
