summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_fw2.c
Commit message (Expand)AuthorAgeFilesLines
* Commit step 1 of the vimage project, (network stack)bz2008-08-171-139/+140
* The IPFW code accepts the use of the tablearg keyword along with the skiptojulian2008-08-011-8/+21
* Add code to allow the system to handle multiple routing tables.julian2008-05-091-6/+48
* Teach pf and ipfw to use read locks in inpcbs write than write locksrwatson2008-04-201-3/+3
* Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros torwatson2008-04-171-3/+3
* Don't cache ptr to nat rule in case of tablearg argument.piso2008-03-171-1/+2
* Move ipfw's nat code into its own kld: ipfw_nat.piso2008-02-291-551/+53
* Add table/tablearg support to ipfw's nat.piso2008-02-241-2/+4
* Hide ipfw internal data structures behind IPFW_INTERNAL rather thanrwatson2008-01-251-0/+3
* If we are walking the IPv6 header chain and we hit an IPPROTO_NONEdwmalone2007-12-091-3/+6
* Continue to move from generic network entry points in the TrustedBSD MACrwatson2007-10-281-1/+1
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asrwatson2007-10-261-1/+1
* Merge first in a series of TrustedBSD MAC Framework KPI changesrwatson2007-10-241-2/+2
* Add FBSDID to all files in netinet so that people can moresilby2007-10-071-2/+3
* o For dynamic rules log a parent rule number. Prefix a log messagemaxim2007-09-291-1/+2
* Repair ALTQ-tagging rules in IPFW which got broken in the last PFgreen2007-08-291-1/+0
* o Fix bug I introduced in the previous commit (ipfw set extention):maxim2007-08-261-1/+4
* Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, whichrwatson2007-08-061-4/+1
* Replace references to NET_CALLOUT_MPSAFE with CALLOUT_MPSAFE, and removerwatson2007-07-281-1/+1
* Link pf 4.1 to the build:mlaier2007-07-031-8/+6
* Commit the change from FAST_IPSEC to IPSEC. The FAST_IPSECgnn2007-07-031-1/+1
* Commit IPv6 support for FAST_IPSEC to the tree.gnn2007-07-011-7/+0
* o Make ipfw set more robust -- now it is possible:maxim2007-06-181-18/+60
* Move universally to ANSI C function declarations, with relativelyrwatson2007-05-101-18/+23
* Add support for filtering on Routing Header Type 0 andbz2007-05-041-0/+4
* Shorten text string for ip_fw2 dynamic rules zone by removing the wordrwatson2007-04-171-1/+1
* Since we switched to using monatomically increasing timestamps,julian2007-04-031-0/+9
* Include opt_ipdivert.h so that the message announcing ipfw correctlyalc2007-02-031-0/+1
* Remove two lines that somehow snuck back in after testing.julian2007-01-091-2/+0
* Prevent adding a rule with a nat action in case IPFIREWALL_NAT was not defined.piso2007-01-051-0/+4
* Wrap ipfw nat support in a new kernel config option namedpiso2007-01-031-1/+16
* Remove a bunch of dependencies in the IP header being the first thing in thejulian2007-01-021-57/+94
* Summer of Code 2005: improve libalias - part 2 of 2piso2006-12-291-2/+546
* MFp4: 92972, 98913 + one more changebz2006-12-121-4/+6
* Add SCTP as a known upper layer protocol over v6.bz2006-11-131-0/+8
* Sweep kernel replacing suser(9) calls with priv(9) calls, assigningrwatson2006-11-061-1/+2
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hrwatson2006-10-221-1/+2
* o Do not do args->f_id.addr_type == 6 when there ismaxim2006-10-111-2/+2
* o Kill a nit in the comment.maxim2006-10-111-1/+1
* o Extend not very informative ipfw(4) message 'drop session, too manymaxim2006-10-111-2/+32
* Set scope on MC address so IPv6 carp advertisement will not get droppedbz2006-10-071-0/+11
* Handle a list of IPv6 src and dst addresses correctly, eg.jhay2006-09-161-14/+17
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointcsjp2006-09-121-5/+20
* Recognise IPv6 PIM packets.jhay2006-08-311-0/+6
* comply with style policejulian2006-08-181-5/+8
* Allow ipfw to forward to a destination that is specified by a table.julian2006-08-171-7/+23
* Remove useless NULL pointer check: we are using M_WAITOK flag for memoryoleg2006-08-041-4/+0
* Do not leak memory while flushing rules.oleg2006-08-021-2/+3
* There is a consensus that ifaddr.ifa_addr should never be NULL,yar2006-06-291-4/+0
* Use TAILQ_FOREACH consistently.yar2006-06-291-2/+1
OpenPOWER on IntegriCloud