summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_fw2.c
Commit message (Expand)AuthorAgeFilesLines
* Sweep kernel replacing suser(9) calls with priv(9) calls, assigningrwatson2006-11-061-1/+2
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hrwatson2006-10-221-1/+2
* o Do not do args->f_id.addr_type == 6 when there ismaxim2006-10-111-2/+2
* o Kill a nit in the comment.maxim2006-10-111-1/+1
* o Extend not very informative ipfw(4) message 'drop session, too manymaxim2006-10-111-2/+32
* Set scope on MC address so IPv6 carp advertisement will not get droppedbz2006-10-071-0/+11
* Handle a list of IPv6 src and dst addresses correctly, eg.jhay2006-09-161-14/+17
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointcsjp2006-09-121-5/+20
* Recognise IPv6 PIM packets.jhay2006-08-311-0/+6
* comply with style policejulian2006-08-181-5/+8
* Allow ipfw to forward to a destination that is specified by a table.julian2006-08-171-7/+23
* Remove useless NULL pointer check: we are using M_WAITOK flag for memoryoleg2006-08-041-4/+0
* Do not leak memory while flushing rules.oleg2006-08-021-2/+3
* There is a consensus that ifaddr.ifa_addr should never be NULL,yar2006-06-291-4/+0
* Use TAILQ_FOREACH consistently.yar2006-06-291-2/+1
* Eliminate the offset argument from send_reject. It's not beenbz2006-06-291-9/+7
* Use INPLOOKUP_WILDCARD instead of just 1 more consistently.bz2006-06-291-1/+1
* - Pullup even when the extention header is unknown, to preventume2006-06-221-1/+13
* Add support of 'tablearg' feature for:oleg2006-06-151-15/+30
* install_state(): style(9) cleanupoleg2006-06-151-33/+36
* install_state() should properly initialize 'addr_type' field of newly createdoleg2006-06-081-0/+1
* Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9).oleg2006-05-241-1/+57
* Use only lower 64bit of src/dest (and src/dest port) for hashing of IPv6mlaier2006-05-141-4/+4
* Remove ip6fw. Since ipfw has full functional IPv6 support now and - inmlaier2006-05-121-1/+0
* Reintroduce net.inet6.ip6.fw.enable sysctl to dis/enable the ipv6 processingmlaier2006-05-121-8/+13
* Don't claim "(+ipv6)" if we didn't build with INET6.mlaier2006-05-111-1/+5
* - Do not leak read lock in IP_FW_TABLE_GETSIZE case of ipfw_ctl().glebius2006-03-031-7/+5
* Use PFIL_HOOKED macros in if_bridge and pass the right argument tocsjp2006-02-021-1/+1
* Somewhat re-factor the read/write locking mechanism associated with the packetcsjp2006-02-021-45/+10
* Fix minor bug in uRPF:oleg2006-01-241-2/+8
* - Change the return type for init_tables from void to int so we can propagatecsjp2006-01-201-10/+25
* Destroy the dynamic rule zone in the event that we fail to insert thecsjp2006-01-201-0/+1
* Correct insecure temporary file usage in texindex. [06:01]cperciva2006-01-111-1/+1
* Cleanup __FreeBSD_version.glebius2005-12-161-5/+0
* Add a new feature for optimizining ipfw rulesets - substitution of theglebius2005-12-131-5/+16
* Optimize parallel processing of ipfw(4) rulesets eliminating the lockingglebius2005-12-061-71/+54
* obey opt_inet6.h and opt_ipsec.h in kernel build directory.ume2005-11-291-2/+2
* Garbage-collect now unused struct _ipfw_insn_pipe and flush_pipe_ptrs(),glebius2005-11-291-29/+1
* fixed a bug that uRPF does not work properly for an IPv6 packet bound for the...suz2005-11-101-2/+8
* Retire MT_HEADER mbuf type and change its users to use MT_DATA.andre2005-11-021-1/+1
* Remove bridge(4) from the tree. if_bridge(4) is a full functionalmlaier2005-09-271-1/+1
* Use monotonic 'time_uptime' instead of 'time_second' as timebaseandre2005-09-191-24/+24
* Fix panic when kernel compiled without INET6 by rejectingbz2005-09-141-6/+30
* clear lock on error in O_LIMIT case of install_statesam2005-09-041-0/+1
* Fix broken build of rev. 1.108 in case of no INET6 and IPFIREWALLbz2005-08-141-1/+7
* * Add dynamic sysctl for net.inet6.ip6.fw.bz2005-08-131-67/+283
* include scope6_var.h for in6_clearscope().ume2005-07-261-0/+3
* Remove ambiguity from hlen. IPv4 is now indicated by is_ipv4 and we need amlaier2005-07-031-20/+17
* Fix ipfw packet matching errors with address tables.simon2005-06-291-17/+20
* In verify_rev_path6():mlaier2005-06-161-18/+52
OpenPOWER on IntegriCloud