| Commit message (Expand) | Author | Age | Files | Lines |
* | Fix content and spelling of comment on _ipfw_insn.len -- a count of | rwatson | 2008-10-10 | 1 | -1/+1 |
* | Step 1.5 of importing the network stack virtualization infrastructure | zec | 2008-10-02 | 1 | -0/+81 |
* | Export IPFW_TABLES_MAX value for compiled in defaults. | rik | 2008-09-21 | 1 | -1/+6 |
* | Make the commet for the default rule number more clear. | rik | 2008-09-14 | 1 | -1/+4 |
* | Export the IPFW_DEFAULT_RULE outside ip_fw2.c. This number in not only | rik | 2008-09-06 | 1 | -0/+5 |
* | Add code to allow the system to handle multiple routing tables. | julian | 2008-05-09 | 1 | -0/+4 |
* | Fix a comment typo. | rwatson | 2008-04-29 | 1 | -1/+1 |
* | Move ipfw's nat code into its own kld: ipfw_nat. | piso | 2008-02-29 | 1 | -0/+32 |
* | Hide ipfw internal data structures behind IPFW_INTERNAL rather than | rwatson | 2008-01-25 | 1 | -0/+11 |
* | Add support for filtering on Routing Header Type 0 and | bz | 2007-05-04 | 1 | -0/+2 |
* | Summer of Code 2005: improve libalias - part 2 of 2 | piso | 2006-12-29 | 1 | -0/+60 |
* | comply with style police | julian | 2006-08-18 | 1 | -1/+0 |
* | Allow ipfw to forward to a destination that is specified by a table. | julian | 2006-08-17 | 1 | -0/+2 |
* | Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9). | oleg | 2006-05-24 | 1 | -0/+6 |
* | Reintroduce net.inet6.ip6.fw.enable sysctl to dis/enable the ipv6 processing | mlaier | 2006-05-12 | 1 | -0/+3 |
* | When sending a packet from dummynet, indicate that we're forwarding | ru | 2006-02-14 | 1 | -2/+0 |
* | Add a new feature for optimizining ipfw rulesets - substitution of the | glebius | 2005-12-13 | 1 | -0/+2 |
* | Garbage-collect now unused struct _ipfw_insn_pipe and flush_pipe_ptrs(), | glebius | 2005-11-29 | 1 | -15/+0 |
* | * Add dynamic sysctl for net.inet6.ip6.fw. | bz | 2005-08-13 | 1 | -0/+5 |
* | Add support for IPv4 only rules to IPFW2 now that it supports IPv6 as well. | mlaier | 2005-06-03 | 1 | -0/+2 |
* | IPFW version 2 is the only option in HEAD and RELENG_5. | glebius | 2005-05-04 | 1 | -1/+0 |
* | Add IPv6 support to IPFW and Dummynet. | brooks | 2005-04-18 | 1 | -0/+67 |
* | Add a ng_ipfw node, implementing a quick and simple interface between | glebius | 2005-02-05 | 1 | -0/+7 |
* | o Clean up interface between ip_fw_chk() and its callers: | glebius | 2005-01-14 | 1 | -4/+12 |
* | /* -> /*- for license, minor formatting changes | imp | 2005-01-07 | 1 | -1/+1 |
* | Add support to IPFW for matching by TCP data length. | green | 2004-10-03 | 1 | -0/+1 |
* | Add support to IPFW for classification based on "diverted" status | green | 2004-10-03 | 1 | -3/+6 |
* | Add to IPFW the ability to do ALTQ classification/tagging. | green | 2004-10-03 | 1 | -0/+10 |
* | Add an additional struct inpcb * argument to pfil(9) in order to enable | mlaier | 2004-09-29 | 1 | -2/+3 |
* | Bring back the sysctl 'net.inet.ip.fw.enable' to unbreak the startup scripts | andre | 2004-08-19 | 1 | -0/+1 |
* | Convert ipfw to use PFIL_HOOKS. This is change is transparent to userland | andre | 2004-08-17 | 1 | -7/+15 |
* | Put the 'antispoof' opcode in the proper place in the opcode list such | obrien | 2004-08-16 | 1 | -1/+1 |
* | Add the ability to associate ipfw rules with a specific prison ID. | csjp | 2004-08-12 | 1 | -1/+5 |
* | New ipfw option "antispoof": | andre | 2004-08-09 | 1 | -0/+1 |
* | Introduce a new feature to IPFW2: lookup tables. These are useful | ru | 2004-06-09 | 1 | -0/+19 |
* | Add the option versrcreach to verify that a valid route to the | andre | 2004-04-23 | 1 | -0/+1 |
* | Re-remove MT_TAGs. The problems with dummynet have been fixed now. | mlaier | 2004-02-25 | 1 | -1/+0 |
* | Backout MT_TAG removal (i.e. bring back MT_TAGs) for now, as dummynet is | mlaier | 2004-02-18 | 1 | -0/+1 |
* | This set of changes eliminates the use of MT_TAG "pseudo mbufs", replacing | mlaier | 2004-02-13 | 1 | -1/+0 |
* | Replace the if_name and if_unit members of struct ifnet with new members | brooks | 2003-10-31 | 1 | -1/+1 |
* | Allow set 31 to be used for rules other than 65535. | luigi | 2003-07-15 | 1 | -0/+1 |
* | Correct some comments, add opcode O_IPSEC to match packets | luigi | 2003-07-04 | 1 | -12/+17 |
* | Change handling to support strong alignment architectures such as alpha and | ticso | 2003-06-04 | 1 | -5/+17 |
* | Add a 'verrevpath' option that verifies the interface that a packet | cjc | 2003-03-15 | 1 | -0/+2 |
* | Oops, forgot to commit this file. This is part of the fix | mux | 2002-10-24 | 1 | -0/+2 |
* | One bugfix and one new feature. | luigi | 2002-08-10 | 1 | -3/+3 |
* | Fix a panic when doing "ipfw add pipe 1 log ..." | luigi | 2002-07-17 | 1 | -1/+1 |
* | Implement keepalives for dynamic rules, so they will not expire | luigi | 2002-07-14 | 1 | -3/+5 |
* | Remove one unused command name. | luigi | 2002-07-08 | 1 | -1/+0 |
* | Implement the last 2-3 missing instructions for ipfw, | luigi | 2002-07-05 | 1 | -0/+1 |