diff options
author | julian <julian@FreeBSD.org> | 2009-10-11 05:59:43 +0000 |
---|---|---|
committer | julian <julian@FreeBSD.org> | 2009-10-11 05:59:43 +0000 |
commit | 79c1f884ef6881dc506df5a23203f4cc0a447a35 (patch) | |
tree | d481a2e714a210799fdaf274f5482c3e67e5c845 /sys/netinet6/ip6_var.h | |
parent | c98bb6fb8fe1b6c9437608e3d30fd1cbf47e2e6a (diff) | |
download | FreeBSD-src-79c1f884ef6881dc506df5a23203f4cc0a447a35.zip FreeBSD-src-79c1f884ef6881dc506df5a23203f4cc0a447a35.tar.gz |
Virtualize the pfil hooks so that different jails may chose different
packet filters. ALso allows ipfw to be enabled on on ejail and disabled
on another. In 8.0 it's a global setting.
Sitting aroung in tree waiting to commit for: 2 months
MFC after: 2 months
Diffstat (limited to 'sys/netinet6/ip6_var.h')
-rw-r--r-- | sys/netinet6/ip6_var.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/netinet6/ip6_var.h b/sys/netinet6/ip6_var.h index e8fe3ec..a0a0f3a 100644 --- a/sys/netinet6/ip6_var.h +++ b/sys/netinet6/ip6_var.h @@ -358,7 +358,8 @@ VNET_DECLARE(int, ip6_use_defzone); /* Whether to use the default scope #endif #define V_ip6_use_defzone VNET(ip6_use_defzone) -extern struct pfil_head inet6_pfil_hook; /* packet filter hooks */ +VNET_DECLARE (struct pfil_head, inet6_pfil_hook); /* packet filter hooks */ +#define V_inet6_pfil_hook VNET(inet6_pfil_hook) extern struct pr_usrreqs rip6_usrreqs; struct sockopt; |