summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_fw.c
Commit message (Expand)AuthorAgeFilesLines
* remove unused file (ipfw2 is the default in RELENG_5 and above; the oldluigi2003-06-241-2259/+0
* Back out M_* changes, per decision of the TRB.imp2003-02-191-2/+2
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-211-2/+2
* Bridged packets are supplied to the firewall with their IP headeriedowse2002-12-271-1/+6
* o Untangle the confusion with the malloc flags {M_WAITOK, M_NOWAIT} andbmilekic2002-12-191-2/+2
* Remove (almost all) global variables that were used to holdluigi2002-06-221-38/+42
* Remove custom definitions (IP_FW_TCPF_SYN etc.) of TCP header flagsluigi2002-05-131-2/+1
* Add code to match MAC header fields (at the moment supported onluigi2002-05-121-62/+108
* Cleanup the interface to ip_fw_chk, two of the input argumentsluigi2002-05-091-75/+82
* Enlighten those who read the FINE POINTS of the documentation a bitcjc2002-05-011-2/+6
* Simple p_ucred -> td_ucred changes to start using the per-thread ucredjhb2002-02-271-1/+1
* BUGFIX: make use of the pointer to the target of skipto rules,luigi2002-02-201-2/+4
* o Move NTOHL() and associated macros into <sys/param.h>. These aremike2002-02-181-2/+2
* Silence unused variable warning in the !KLD_MODULE case.dd2002-02-101-0/+2
* Fix a missing "ipfw:" in a syslog message.cjc2002-01-071-1/+1
* Implement matching IP precedence in ipfw(4).yar2001-12-211-1/+4
* minor whitespace fixes.jlemon2001-12-141-1/+1
* ipfw_modevent(): Don't use an unnatural block to define a variabledd2001-11-271-3/+0
* Remove debugging printfs that weren't conditional on any debuggingdd2001-11-271-2/+0
* MFS: sync the ipfw/dummynet/bridge code with the one recently mergedluigi2001-11-041-76/+95
* Only allow users to see their own socket connections ifps2001-10-051-4/+2
* Make it so dummynet and bridge can be loaded as modules.ps2001-10-051-13/+5
* Fix a problem with unnumbered rules introduced in latest commit.luigi2001-10-011-3/+3
* Two main changes here:luigi2001-09-271-164/+242
* o Modify IPFW and DUMMYNET administrative setsockopt() calls to userwatson2001-09-261-3/+8
* Fix a null pointer dereference introduced in the last commit, plusluigi2001-09-241-6/+4
* A bunch of minor changes to the code (see below) for readability, code sizeluigi2001-09-201-304/+318
* the IP_FW_GET code in ip_fw_ctl() sizes a buffer to hold informationbillf2001-08-261-0/+3
* While in there fixing a fragment logging bug, fix it so we logcjc2001-07-021-8/+11
* pipe/queue are the only consumers of flow_id, so only set it in those casesbillf2001-04-061-1/+1
* Replace dyn_fin_lifetime with dyn_ack_lifetime for half-closed state.simokawa2001-03-271-1/+1
* Only flush rules that have a rule number above that set by a newpaul2001-03-211-8/+17
* The TCP sequence number used for sending a RST with the ipfw reset rulejlemon2001-03-091-1/+1
* The TCP header-specific section suffered a little bit of bitrot recently:billf2001-02-271-1/+1
* Clean up warning.jlemon2001-02-151-1/+0
* Introduce a new feature in IPFW: Check of the source or destinationphk2001-02-131-0/+12
* Sync with the bridge/dummynet/ipfw code already tested in stable.luigi2001-02-101-43/+41
* Mechanical change to use <sys/queue.h> macro API instead ofphk2001-02-041-15/+14
* MFS: bridge/ipfw/dummynet fixes (bridge.c will be committed separately)luigi2001-02-021-4/+2
* Make sure we do not follow an invalid pointer in ipfw_reportluigi2001-01-271-1/+2
* Minor cleanups after yesterday's patch.luigi2001-01-261-4/+3
* Bring dummynet in line with the code that now works in -STABLE.luigi2001-01-261-41/+39
* o IPFW incorrectly handled filtering in the presence of previouslyrwatson2001-01-091-5/+13
* Convert more malloc+bzero to malloc+M_ZERO.dwmalone2000-12-081-6/+3
* Fixed the security breach I introduced in rev 1.145.ru2000-11-071-3/+3
* Remove unneeded #include <sys/proc.h> lines.phk2000-10-291-1/+0
* Fetch the protocol header (TCP, UDP, ICMP) only from the first fragmentru2000-10-271-16/+11
* Close PR22152 and PR19511 -- correct the naming of a variableluigi2000-10-261-1/+1
* Allow for IP_FW_ADD to be used in getsockopt(2) incarnation asru2000-10-121-1/+3
* As we now may check the TCP header window field, make sure we pullupru2000-10-061-4/+4
OpenPOWER on IntegriCloud