summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_fw2.c
Commit message (Expand)AuthorAgeFilesLines
* Use NET_CALLOUT_MPSAFE macro.glebius2005-03-011-1/+1
* Jump to common action checks after doing specific once. This fixes addingglebius2005-02-061-0/+5
* Add a ng_ipfw node, implementing a quick and simple interface betweenglebius2005-02-051-0/+23
* Change the state allocator from using regular malloc to usingcsjp2005-01-311-2/+7
* o Clean up interface between ip_fw_chk() and its callers:glebius2005-01-141-26/+23
* /* -> /*- for license, minor formatting changesimp2005-01-071-1/+1
* This commit adds a shared locking mechanism very similar to thecsjp2004-12-101-29/+69
* Remove RFC1644 T/TCP support from the TCP side of the network stack.andre2004-11-021-5/+0
* When printing the initialization string and IPDIVERT is not compiled into theandre2004-10-221-1/+1
* Convert IPDIVERT into a loadable module. This makes use of the dynamic loada...andre2004-10-191-4/+2
* Add support to IPFW for matching by TCP data length.green2004-10-031-0/+23
* Add support to IPFW for classification based on "diverted" statusgreen2004-10-031-1/+20
* Add to IPFW the ability to do ALTQ classification/tagging.green2004-10-031-0/+44
* Validate the action pointer to be within the rule size, so that trying togreen2004-09-301-0/+5
* Add an additional struct inpcb * argument to pfil(9) in order to enablemlaier2004-09-291-11/+32
* Do not allow 'ipfw fwd' command when IPFIREWALL_FORWARD is not compiled intoandre2004-09-131-0/+4
* Recover normal behavior: return EINVAL to attempt to add a divert ruleglebius2004-09-051-2/+5
* Revert the last change to sys/modules/ipfw/Makefile and fix aru2004-08-261-0/+2
* When unloading ipfw module use callout_drain() to make absolutely sure thatandre2004-08-191-1/+1
* Do not unconditionally ignore IPDIVERT and IPFIREWALL_FORWARD when buildingandre2004-08-191-2/+0
* Bring back the sysctl 'net.inet.ip.fw.enable' to unbreak the startup scriptsandre2004-08-191-0/+3
* Convert ipfw to use PFIL_HOOKS. This is change is transparent to userlandandre2004-08-171-51/+14
* Add the ability to associate ipfw rules with a specific prison ID.csjp2004-08-121-1/+9
* Only invoke verify_path() for verrevpath and versrcreach when we have an IP p...andre2004-08-111-4/+4
* New ipfw option "antispoof":andre2004-08-091-0/+11
* Extend versrcreach by checking against the rt_flags for RTF_REJECT andandre2004-07-211-0/+6
* Make M_SKIP_FIREWALL a global (and semantic) flag, preventing anything fromjmallett2004-07-171-12/+0
* Do a pass over all modules in the kernel and make them return EOPNOTSUPPphk2004-07-151-0/+1
* When asserting non-Giant locks in the network stack, also assertrwatson2004-06-241-1/+4
* Modify ip fw so that whenever UID or GID constraints exist in acsjp2004-06-111-30/+77
* init_tables() must be run after sys/net/route.c:route_init().ru2004-06-101-1/+4
* Introduce a new feature to IPFW2: lookup tables. These are usefulru2004-06-091-1/+324
* Add some missing <sys/module.h> includes which are masked by thephk2004-05-301-0/+1
* Add a super-user check to ipfw_ctl() to make sure that the callingcsjp2004-05-251-0/+4
* Add the option versrcreach to verify that a valid route to theandre2004-04-231-7/+31
* Re-remove MT_TAGs. The problems with dummynet have been fixed now.mlaier2004-02-251-5/+25
* Backout MT_TAG removal (i.e. bring back MT_TAGs) for now, as dummynet ismlaier2004-02-181-25/+5
* This set of changes eliminates the use of MT_TAG "pseudo mbufs", replacingmlaier2004-02-131-5/+25
* NULL is not 0.ume2003-12-241-1/+1
* o IN_MULTICAST wants an address in host byte order.maxim2003-12-161-1/+1
* Include opt_ipsec.h so IPSEC/FAST_IPSEC is defined and the appropriatesam2003-12-021-0/+1
* Fix verify_rev_path() function. The author of this function tried toandre2003-11-271-13/+7
* Correct a problem where ipfw-generated packets were being returnedsam2003-11-241-5/+9
* Use MPSAFE callouts only when debug.mpsafenet is 1. Both timer routinessam2003-11-231-1/+1
* Introduce tcp_hostcache and remove the tcp specific metrics fromandre2003-11-201-3/+6
* Remove RTF_PRCLONING from routing table and adjust users of itandre2003-11-201-1/+1
* Fix an arguments order in check_uidgid() call.maxim2003-11-201-2/+2
* Remove the global one-level rtcache variable and associatedandre2003-11-141-6/+1
* Move uid/gid checking logic out of line and lock inpcb usage. Thissam2003-11-071-40/+60
* use ipsec_getnhist() instead of obsoleted ipsec_gethist().ume2003-11-071-1/+1
OpenPOWER on IntegriCloud