| Commit message (Expand) | Author | Age | Files | Lines |
* | For consistency work on the local object passed into the function for the | bz | 2008-11-09 | 1 | -3/+3 |
* | o Remove unnecessary parentheses and restore identation. | maxim | 2008-10-14 | 1 | -32/+24 |
* | o Reformat ipfw nat get|setsockopt code to look it more | maxim | 2008-10-14 | 1 | -33/+36 |
* | Cache so_cred as inp_cred in the inpcb. | bz | 2008-10-04 | 1 | -15/+7 |
* | Step 1.5 of importing the network stack virtualization infrastructure | zec | 2008-10-02 | 1 | -35/+57 |
* | When an inpcb doesn't have a socket but the inpcb is passed to ipfw | rwatson | 2008-09-27 | 1 | -1/+2 |
* | Rather than shadowing global variable 'lookup' in check_uidgid(), rename | rwatson | 2008-09-27 | 1 | -8/+8 |
* | Export IPFW_TABLES_MAX via sysctl. Part of PR: 127058. | rik | 2008-09-14 | 1 | -0/+2 |
* | Export the IPFW_DEFAULT_RULE outside ip_fw2.c. This number in not only | rik | 2008-09-06 | 1 | -1/+2 |
* | whitespace nit | julian | 2008-09-03 | 1 | -1/+1 |
* | We left out V_static_len from ip_fw2.c | julian | 2008-08-25 | 1 | -3/+3 |
* | A bunch of formatting fixes brough to light by, or created by the Vimage commit | julian | 2008-08-20 | 1 | -4/+6 |
* | Commit step 1 of the vimage project, (network stack) | bz | 2008-08-17 | 1 | -139/+140 |
* | The IPFW code accepts the use of the tablearg keyword along with the skipto | julian | 2008-08-01 | 1 | -8/+21 |
* | Add code to allow the system to handle multiple routing tables. | julian | 2008-05-09 | 1 | -6/+48 |
* | Teach pf and ipfw to use read locks in inpcbs write than write locks | rwatson | 2008-04-20 | 1 | -3/+3 |
* | Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros to | rwatson | 2008-04-17 | 1 | -3/+3 |
* | Don't cache ptr to nat rule in case of tablearg argument. | piso | 2008-03-17 | 1 | -1/+2 |
* | Move ipfw's nat code into its own kld: ipfw_nat. | piso | 2008-02-29 | 1 | -551/+53 |
* | Add table/tablearg support to ipfw's nat. | piso | 2008-02-24 | 1 | -2/+4 |
* | Hide ipfw internal data structures behind IPFW_INTERNAL rather than | rwatson | 2008-01-25 | 1 | -0/+3 |
* | If we are walking the IPv6 header chain and we hit an IPPROTO_NONE | dwmalone | 2007-12-09 | 1 | -3/+6 |
* | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 1 | -1/+1 |
* | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 1 | -1/+1 |
* | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -2/+2 |
* | Add FBSDID to all files in netinet so that people can more | silby | 2007-10-07 | 1 | -2/+3 |
* | o For dynamic rules log a parent rule number. Prefix a log message | maxim | 2007-09-29 | 1 | -1/+2 |
* | Repair ALTQ-tagging rules in IPFW which got broken in the last PF | green | 2007-08-29 | 1 | -1/+0 |
* | o Fix bug I introduced in the previous commit (ipfw set extention): | maxim | 2007-08-26 | 1 | -1/+4 |
* | Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which | rwatson | 2007-08-06 | 1 | -4/+1 |
* | Replace references to NET_CALLOUT_MPSAFE with CALLOUT_MPSAFE, and remove | rwatson | 2007-07-28 | 1 | -1/+1 |
* | Link pf 4.1 to the build: | mlaier | 2007-07-03 | 1 | -8/+6 |
* | Commit the change from FAST_IPSEC to IPSEC. The FAST_IPSEC | gnn | 2007-07-03 | 1 | -1/+1 |
* | Commit IPv6 support for FAST_IPSEC to the tree. | gnn | 2007-07-01 | 1 | -7/+0 |
* | o Make ipfw set more robust -- now it is possible: | maxim | 2007-06-18 | 1 | -18/+60 |
* | Move universally to ANSI C function declarations, with relatively | rwatson | 2007-05-10 | 1 | -18/+23 |
* | Add support for filtering on Routing Header Type 0 and | bz | 2007-05-04 | 1 | -0/+4 |
* | Shorten text string for ip_fw2 dynamic rules zone by removing the word | rwatson | 2007-04-17 | 1 | -1/+1 |
* | Since we switched to using monatomically increasing timestamps, | julian | 2007-04-03 | 1 | -0/+9 |
* | Include opt_ipdivert.h so that the message announcing ipfw correctly | alc | 2007-02-03 | 1 | -0/+1 |
* | Remove two lines that somehow snuck back in after testing. | julian | 2007-01-09 | 1 | -2/+0 |
* | Prevent adding a rule with a nat action in case IPFIREWALL_NAT was not defined. | piso | 2007-01-05 | 1 | -0/+4 |
* | Wrap ipfw nat support in a new kernel config option named | piso | 2007-01-03 | 1 | -1/+16 |
* | Remove a bunch of dependencies in the IP header being the first thing in the | julian | 2007-01-02 | 1 | -57/+94 |
* | Summer of Code 2005: improve libalias - part 2 of 2 | piso | 2006-12-29 | 1 | -2/+546 |
* | MFp4: 92972, 98913 + one more change | bz | 2006-12-12 | 1 | -4/+6 |
* | Add SCTP as a known upper layer protocol over v6. | bz | 2006-11-13 | 1 | -0/+8 |
* | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -1/+2 |
* | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -1/+2 |
* | o Do not do args->f_id.addr_type == 6 when there is | maxim | 2006-10-11 | 1 | -2/+2 |