CVS: cvs.openbsd.org: src

[Ryan Thomas McBride <mcbride_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>]

CVSROOT:	/cvs
Module name:	src
Changes by:	mcbride_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2004/12/04 00:49:49

Modified files:
	sys/net        : pfvar.h pf.c pf_ioctl.c pf_table.c 

Log message:
Add kernel code to keep track of tcp connections which have completed
the 3-way handshake. Allow limits on both total connections and connection
rate, put offenders in a table which can be used in the ruleset, and optionally
kill existing states. Rate tracking code from dhartmei_(_at_)__(_dot_)_

Adds a second pool for table entries using the default allocator, which
allows entries to be added at splsoftnet().

ok deraadt@ dhartmei@