summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_fw2.c
Commit message (Expand)AuthorAgeFilesLines
* Remove ambiguity from hlen. IPv4 is now indicated by is_ipv4 and we need amlaier2005-07-031-20/+17
* Fix ipfw packet matching errors with address tables.simon2005-06-291-17/+20
* In verify_rev_path6():mlaier2005-06-161-18/+52
* Fix indentation in INET6 section in preperation of more serious work.mlaier2005-06-161-49/+49
* When doing matching based on dst_ip/src_ip make sure we are really lookingmlaier2005-06-121-10/+13
* Modify send_pkt() to return the generated packet and have the callergreen2005-06-101-8/+32
* Better explain, then actually implement the IPFW ALTQ-rule first-matchgreen2005-06-041-0/+3
* Add support for IPv4 only rules to IPFW2 now that it supports IPv6 as well.mlaier2005-06-031-0/+7
* Let OSPFv3 go through ipfw. Some more additional checks would betanimura2005-05-281-0/+5
* IPFW version 2 is the only option in HEAD and RELENG_5.glebius2005-05-041-4/+0
* Introduce a struct icmphdr which contains the type, code, and cksumbrooks2005-04-261-9/+5
* typophk2005-04-191-1/+1
* Make IPFIREWALL compile without INET6phk2005-04-191-3/+18
* Add IPv6 support to IPFW and Dummynet.brooks2005-04-181-32/+333
* Centralized finding the protocol header in IP packets in preperation forbrooks2005-04-151-92/+109
* Use NET_CALLOUT_MPSAFE macro.glebius2005-03-011-1/+1
* Jump to common action checks after doing specific once. This fixes addingglebius2005-02-061-0/+5
* Add a ng_ipfw node, implementing a quick and simple interface betweenglebius2005-02-051-0/+23
* Change the state allocator from using regular malloc to usingcsjp2005-01-311-2/+7
* o Clean up interface between ip_fw_chk() and its callers:glebius2005-01-141-26/+23
* /* -> /*- for license, minor formatting changesimp2005-01-071-1/+1
* This commit adds a shared locking mechanism very similar to thecsjp2004-12-101-29/+69
* Remove RFC1644 T/TCP support from the TCP side of the network stack.andre2004-11-021-5/+0
* When printing the initialization string and IPDIVERT is not compiled into theandre2004-10-221-1/+1
* Convert IPDIVERT into a loadable module. This makes use of the dynamic loada...andre2004-10-191-4/+2
* Add support to IPFW for matching by TCP data length.green2004-10-031-0/+23
* Add support to IPFW for classification based on "diverted" statusgreen2004-10-031-1/+20
* Add to IPFW the ability to do ALTQ classification/tagging.green2004-10-031-0/+44
* Validate the action pointer to be within the rule size, so that trying togreen2004-09-301-0/+5
* Add an additional struct inpcb * argument to pfil(9) in order to enablemlaier2004-09-291-11/+32
* Do not allow 'ipfw fwd' command when IPFIREWALL_FORWARD is not compiled intoandre2004-09-131-0/+4
* Recover normal behavior: return EINVAL to attempt to add a divert ruleglebius2004-09-051-2/+5
* Revert the last change to sys/modules/ipfw/Makefile and fix aru2004-08-261-0/+2
* When unloading ipfw module use callout_drain() to make absolutely sure thatandre2004-08-191-1/+1
* Do not unconditionally ignore IPDIVERT and IPFIREWALL_FORWARD when buildingandre2004-08-191-2/+0
* Bring back the sysctl 'net.inet.ip.fw.enable' to unbreak the startup scriptsandre2004-08-191-0/+3
* Convert ipfw to use PFIL_HOOKS. This is change is transparent to userlandandre2004-08-171-51/+14
* Add the ability to associate ipfw rules with a specific prison ID.csjp2004-08-121-1/+9
* Only invoke verify_path() for verrevpath and versrcreach when we have an IP p...andre2004-08-111-4/+4
* New ipfw option "antispoof":andre2004-08-091-0/+11
* Extend versrcreach by checking against the rt_flags for RTF_REJECT andandre2004-07-211-0/+6
* Make M_SKIP_FIREWALL a global (and semantic) flag, preventing anything fromjmallett2004-07-171-12/+0
* Do a pass over all modules in the kernel and make them return EOPNOTSUPPphk2004-07-151-0/+1
* When asserting non-Giant locks in the network stack, also assertrwatson2004-06-241-1/+4
* Modify ip fw so that whenever UID or GID constraints exist in acsjp2004-06-111-30/+77
* init_tables() must be run after sys/net/route.c:route_init().ru2004-06-101-1/+4
* Introduce a new feature to IPFW2: lookup tables. These are usefulru2004-06-091-1/+324
* Add some missing <sys/module.h> includes which are masked by thephk2004-05-301-0/+1
* Add a super-user check to ipfw_ctl() to make sure that the callingcsjp2004-05-251-0/+4
* Add the option versrcreach to verify that a valid route to theandre2004-04-231-7/+31
OpenPOWER on IntegriCloud