index
:
FreeBSD-src
RELENG_2_2
RELENG_2_3
RELENG_2_3_0
RELENG_2_3_1
RELENG_2_3_2
RELENG_2_3_3
RELENG_2_3_4
RELENG_2_4
RELENG_2_4_4
RELENG_2_4_OLD
devel
devel-11
releng/10.1
releng/10.3
releng/11.0
releng/11.1
stable/10
stable/11
Raptor Engineering's fork of pfsense FreeBSD src with pfSense changes
Raptor Engineering, LLC
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
sys
/
netinet
/
ip_fw2.c
Commit message (
Expand
)
Author
Age
Files
Lines
*
Jump to common action checks after doing specific once. This fixes adding
glebius
2005-02-06
1
-0
/
+5
*
Add a ng_ipfw node, implementing a quick and simple interface between
glebius
2005-02-05
1
-0
/
+23
*
Change the state allocator from using regular malloc to using
csjp
2005-01-31
1
-2
/
+7
*
o Clean up interface between ip_fw_chk() and its callers:
glebius
2005-01-14
1
-26
/
+23
*
/* -> /*- for license, minor formatting changes
imp
2005-01-07
1
-1
/
+1
*
This commit adds a shared locking mechanism very similar to the
csjp
2004-12-10
1
-29
/
+69
*
Remove RFC1644 T/TCP support from the TCP side of the network stack.
andre
2004-11-02
1
-5
/
+0
*
When printing the initialization string and IPDIVERT is not compiled into the
andre
2004-10-22
1
-1
/
+1
*
Convert IPDIVERT into a loadable module. This makes use of the dynamic loada...
andre
2004-10-19
1
-4
/
+2
*
Add support to IPFW for matching by TCP data length.
green
2004-10-03
1
-0
/
+23
*
Add support to IPFW for classification based on "diverted" status
green
2004-10-03
1
-1
/
+20
*
Add to IPFW the ability to do ALTQ classification/tagging.
green
2004-10-03
1
-0
/
+44
*
Validate the action pointer to be within the rule size, so that trying to
green
2004-09-30
1
-0
/
+5
*
Add an additional struct inpcb * argument to pfil(9) in order to enable
mlaier
2004-09-29
1
-11
/
+32
*
Do not allow 'ipfw fwd' command when IPFIREWALL_FORWARD is not compiled into
andre
2004-09-13
1
-0
/
+4
*
Recover normal behavior: return EINVAL to attempt to add a divert rule
glebius
2004-09-05
1
-2
/
+5
*
Revert the last change to sys/modules/ipfw/Makefile and fix a
ru
2004-08-26
1
-0
/
+2
*
When unloading ipfw module use callout_drain() to make absolutely sure that
andre
2004-08-19
1
-1
/
+1
*
Do not unconditionally ignore IPDIVERT and IPFIREWALL_FORWARD when building
andre
2004-08-19
1
-2
/
+0
*
Bring back the sysctl 'net.inet.ip.fw.enable' to unbreak the startup scripts
andre
2004-08-19
1
-0
/
+3
*
Convert ipfw to use PFIL_HOOKS. This is change is transparent to userland
andre
2004-08-17
1
-51
/
+14
*
Add the ability to associate ipfw rules with a specific prison ID.
csjp
2004-08-12
1
-1
/
+9
*
Only invoke verify_path() for verrevpath and versrcreach when we have an IP p...
andre
2004-08-11
1
-4
/
+4
*
New ipfw option "antispoof":
andre
2004-08-09
1
-0
/
+11
*
Extend versrcreach by checking against the rt_flags for RTF_REJECT and
andre
2004-07-21
1
-0
/
+6
*
Make M_SKIP_FIREWALL a global (and semantic) flag, preventing anything from
jmallett
2004-07-17
1
-12
/
+0
*
Do a pass over all modules in the kernel and make them return EOPNOTSUPP
phk
2004-07-15
1
-0
/
+1
*
When asserting non-Giant locks in the network stack, also assert
rwatson
2004-06-24
1
-1
/
+4
*
Modify ip fw so that whenever UID or GID constraints exist in a
csjp
2004-06-11
1
-30
/
+77
*
init_tables() must be run after sys/net/route.c:route_init().
ru
2004-06-10
1
-1
/
+4
*
Introduce a new feature to IPFW2: lookup tables. These are useful
ru
2004-06-09
1
-1
/
+324
*
Add some missing <sys/module.h> includes which are masked by the
phk
2004-05-30
1
-0
/
+1
*
Add a super-user check to ipfw_ctl() to make sure that the calling
csjp
2004-05-25
1
-0
/
+4
*
Add the option versrcreach to verify that a valid route to the
andre
2004-04-23
1
-7
/
+31
*
Re-remove MT_TAGs. The problems with dummynet have been fixed now.
mlaier
2004-02-25
1
-5
/
+25
*
Backout MT_TAG removal (i.e. bring back MT_TAGs) for now, as dummynet is
mlaier
2004-02-18
1
-25
/
+5
*
This set of changes eliminates the use of MT_TAG "pseudo mbufs", replacing
mlaier
2004-02-13
1
-5
/
+25
*
NULL is not 0.
ume
2003-12-24
1
-1
/
+1
*
o IN_MULTICAST wants an address in host byte order.
maxim
2003-12-16
1
-1
/
+1
*
Include opt_ipsec.h so IPSEC/FAST_IPSEC is defined and the appropriate
sam
2003-12-02
1
-0
/
+1
*
Fix verify_rev_path() function. The author of this function tried to
andre
2003-11-27
1
-13
/
+7
*
Correct a problem where ipfw-generated packets were being returned
sam
2003-11-24
1
-5
/
+9
*
Use MPSAFE callouts only when debug.mpsafenet is 1. Both timer routines
sam
2003-11-23
1
-1
/
+1
*
Introduce tcp_hostcache and remove the tcp specific metrics from
andre
2003-11-20
1
-3
/
+6
*
Remove RTF_PRCLONING from routing table and adjust users of it
andre
2003-11-20
1
-1
/
+1
*
Fix an arguments order in check_uidgid() call.
maxim
2003-11-20
1
-2
/
+2
*
Remove the global one-level rtcache variable and associated
andre
2003-11-14
1
-6
/
+1
*
Move uid/gid checking logic out of line and lock inpcb usage. This
sam
2003-11-07
1
-40
/
+60
*
use ipsec_getnhist() instead of obsoleted ipsec_gethist().
ume
2003-11-07
1
-1
/
+1
*
Replace the if_name and if_unit members of struct ifnet with new members
brooks
2003-10-31
1
-8
/
+9
[next]