diff options
| author | melifaro <melifaro@FreeBSD.org> | 2012-09-04 19:43:26 +0000 |
|---|---|---|
| committer | melifaro <melifaro@FreeBSD.org> | 2012-09-04 19:43:26 +0000 |
| commit | 1fbae66b6e67117d899f9c10f12c000c4584d32c (patch) | |
| tree | a8022a21cc0401215271f1f78d4f500650942824 /sys/netinet/ipfw/ip_fw_private.h | |
| parent | 599115bdcb3939cdc5164a09fd18ccfe4c310ab1 (diff) | |
| download | FreeBSD-src-1fbae66b6e67117d899f9c10f12c000c4584d32c.zip FreeBSD-src-1fbae66b6e67117d899f9c10f12c000c4584d32c.tar.gz | |
Introduce new link-layer PFIL hook V_link_pfil_hook.
Merge ether_ipfw_chk() and part of bridge_pfil() into
unified ipfw_check_frame() function called by PFIL.
This change was suggested by rwatson? @ DevSummit.
Remove ipfw headers from ether/bridge code since they are unneeded now.
Note this thange introduce some (temporary) performance penalty since
PFIL read lock has to be acquired for every link-level packet.
MFC after: 3 weeks
Diffstat (limited to 'sys/netinet/ipfw/ip_fw_private.h')
| -rw-r--r-- | sys/netinet/ipfw/ip_fw_private.h | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/sys/netinet/ipfw/ip_fw_private.h b/sys/netinet/ipfw/ip_fw_private.h index 7f65c41..fb13a72 100644 --- a/sys/netinet/ipfw/ip_fw_private.h +++ b/sys/netinet/ipfw/ip_fw_private.h @@ -270,10 +270,6 @@ int ipfw_ctl(struct sockopt *sopt); int ipfw_chk(struct ip_fw_args *args); void ipfw_reap_rules(struct ip_fw *head); -/* In ip_fw_pfil */ -int ipfw_check_hook(void *arg, struct mbuf **m0, struct ifnet *ifp, int dir, - struct inpcb *inp); - /* In ip_fw_table.c */ struct radix_node; int ipfw_lookup_table(struct ip_fw_chain *ch, uint16_t tbl, in_addr_t addr, |
