| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | move kernel ipfw-related sources to a separate directory, | luigi | 2009-06-05 | 1 | -4747/+0 |
| * | Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC | rwatson | 2009-06-05 | 1 | -1/+0 |
| * | More cleanup in preparation of ipfw relocation (no actual code change): | luigi | 2009-06-05 | 1 | -1/+7 |
| * | Revert the logical change of r192341. | bz | 2009-05-18 | 1 | -1/+1 |
| * | - Fix typo in description of 'net.inet.ip.fw.autoinc_step'. | jhb | 2009-05-18 | 1 | -2/+2 |
| * | Convert IPFW_DEFAULT_TO_ACCEPT into a loader tunable | jhb | 2009-05-09 | 1 | -5/+9 |
| * | Optimize packet flow: if net.inet.ip.fw.one_pass != 0 and packet was | oleg | 2009-04-27 | 1 | -9/+0 |
| * | In preparation for turning on options VIMAGE in next commits, | zec | 2009-04-26 | 1 | -1/+2 |
| * | Prefer actual field names (if_addrhead, ifa_link) to macros aliasing | rwatson | 2009-04-20 | 1 | -1/+1 |
| * | Lock the interface address list when searching for a matching interface | rwatson | 2009-04-19 | 1 | -5/+13 |
| * | Implement an ipfw action to reassemble ip packets: reass. | piso | 2009-04-01 | 1 | -0/+53 |
| * | fw_debug has been unused for ages, so remove it from the list | luigi | 2009-03-02 | 1 | -4/+0 |
| * | For all files including net/vnet.h directly include opt_route.h and | bz | 2009-02-27 | 1 | -0/+1 |
| * | correct some #include | luigi | 2009-02-16 | 1 | -2/+1 |
| * | use a const format string in the log message so we can check the | luigi | 2009-02-16 | 1 | -6/+11 |
| * | remove unnecessary #include, and document some of the others | luigi | 2009-02-13 | 1 | -6/+2 |
| * | initialize a couple of variables, gcc 4.2.4-4 (linux) reports | luigi | 2009-01-28 | 1 | -1/+2 |
| * | For some reason (probably dating ages ago) an #ifdef SYSCTL_NODE / #endif | luigi | 2009-01-28 | 1 | -2/+5 |
| * | ipfw doesn't use the radix node head lock to protect the radix tree - remove ... | kmacy | 2008-12-16 | 1 | -2/+0 |
| * | This main goals of this project are: | qingli | 2008-12-15 | 1 | -2/+2 |
| * | version that will compile | kmacy | 2008-12-13 | 1 | -2/+3 |
| * | radix node head lock needs to be held when calling rnh_addaddr | kmacy | 2008-12-13 | 1 | -0/+2 |
| * | Second round of putting global variables, which were virtualized | bz | 2008-12-13 | 1 | -3/+4 |
| * | Put a global variables, which were virtualized but formerly | bz | 2008-12-11 | 1 | -0/+2 |
| * | Conditionally compile out V_ globals while instantiating the appropriate | zec | 2008-12-10 | 1 | -21/+59 |
| * | Rather than using hidden includes (with cicular dependencies), | bz | 2008-12-02 | 1 | -0/+3 |
| * | For consistency work on the local object passed into the function for the | bz | 2008-11-09 | 1 | -3/+3 |
| * | o Remove unnecessary parentheses and restore identation. | maxim | 2008-10-14 | 1 | -32/+24 |
| * | o Reformat ipfw nat get|setsockopt code to look it more | maxim | 2008-10-14 | 1 | -33/+36 |
| * | Cache so_cred as inp_cred in the inpcb. | bz | 2008-10-04 | 1 | -15/+7 |
| * | Step 1.5 of importing the network stack virtualization infrastructure | zec | 2008-10-02 | 1 | -35/+57 |
| * | When an inpcb doesn't have a socket but the inpcb is passed to ipfw | rwatson | 2008-09-27 | 1 | -1/+2 |
| * | Rather than shadowing global variable 'lookup' in check_uidgid(), rename | rwatson | 2008-09-27 | 1 | -8/+8 |
| * | Export IPFW_TABLES_MAX via sysctl. Part of PR: 127058. | rik | 2008-09-14 | 1 | -0/+2 |
| * | Export the IPFW_DEFAULT_RULE outside ip_fw2.c. This number in not only | rik | 2008-09-06 | 1 | -1/+2 |
| * | whitespace nit | julian | 2008-09-03 | 1 | -1/+1 |
| * | We left out V_static_len from ip_fw2.c | julian | 2008-08-25 | 1 | -3/+3 |
| * | A bunch of formatting fixes brough to light by, or created by the Vimage commit | julian | 2008-08-20 | 1 | -4/+6 |
| * | Commit step 1 of the vimage project, (network stack) | bz | 2008-08-17 | 1 | -139/+140 |
| * | The IPFW code accepts the use of the tablearg keyword along with the skipto | julian | 2008-08-01 | 1 | -8/+21 |
| * | Add code to allow the system to handle multiple routing tables. | julian | 2008-05-09 | 1 | -6/+48 |
| * | Teach pf and ipfw to use read locks in inpcbs write than write locks | rwatson | 2008-04-20 | 1 | -3/+3 |
| * | Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros to | rwatson | 2008-04-17 | 1 | -3/+3 |
| * | Don't cache ptr to nat rule in case of tablearg argument. | piso | 2008-03-17 | 1 | -1/+2 |
| * | Move ipfw's nat code into its own kld: ipfw_nat. | piso | 2008-02-29 | 1 | -551/+53 |
| * | Add table/tablearg support to ipfw's nat. | piso | 2008-02-24 | 1 | -2/+4 |
| * | Hide ipfw internal data structures behind IPFW_INTERNAL rather than | rwatson | 2008-01-25 | 1 | -0/+3 |
| * | If we are walking the IPv6 header chain and we hit an IPPROTO_NONE | dwmalone | 2007-12-09 | 1 | -3/+6 |
| * | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 1 | -1/+1 |
| * | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 1 | -1/+1 |
