Commit pf version 3.5 and link additional files to the kernel build.

Version 3.5 brings:
 - Atomic commits of ruleset changes (reduce the chance of ending up in an
   inconsistent state).
 - A 30% reduction in the size of state table entries.
 - Source-tracking (limit number of clients and states per client).
 - Sticky-address (the flexibility of round-robin with the benefits of
   source-hash).
 - Significant improvements to interface handling.
 - and many more ...

1 files changed, 14 insertions, 0 deletions

diff --git a/sys/netinet/in_proto.c b/sys/netinet/in_proto.c
index 44bd060..553f90e 100644
--- a/sys/netinet/in_proto.c
+++ b/sys/netinet/in_proto.c
@@ -35,6 +35,7 @@
 #include "opt_mrouting.h"
 #include "opt_ipsec.h"
 #include "opt_inet6.h"
+#include "opt_pf.h"
 
 #include <sys/param.h>
 #include <sys/systm.h>
@@ -86,6 +87,11 @@
 #include <netipx/ipx_ip.h>
 #endif
 
+#ifdef DEV_PFSYNC
+#include <net/pfvar.h>
+#include <net/if_pfsync.h>
+#endif
+
 extern	struct domain inetdomain;
 static	struct pr_usrreqs nousrreqs;
 
@@ -225,6 +231,14 @@ struct protosw inetsw[] = {
   &rip_usrreqs
 },
 #endif	/* PIM */
+#ifdef DEV_PFSYNC
+{ SOCK_RAW,	&inetdomain,	IPPROTO_PFSYNC,	PR_ATOMIC|PR_ADDR,
+  pfsync_input,	0,		0,		rip_ctloutput,
+  0,
+  0,		0,		0,		0,
+  &rip_usrreqs
+},
+#endif	/* DEV_PFSYNC */
 	/* raw wildcard */
 { SOCK_RAW,	&inetdomain,	0,		PR_ATOMIC|PR_ADDR,
   rip_input,	0,		0,		rip_ctloutput,