summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_fw2.c
Commit message (Expand)AuthorAgeFilesLines
* Remove two lines that somehow snuck back in after testing.julian2007-01-091-2/+0
* Prevent adding a rule with a nat action in case IPFIREWALL_NAT was not defined.piso2007-01-051-0/+4
* Wrap ipfw nat support in a new kernel config option namedpiso2007-01-031-1/+16
* Remove a bunch of dependencies in the IP header being the first thing in thejulian2007-01-021-57/+94
* Summer of Code 2005: improve libalias - part 2 of 2piso2006-12-291-2/+546
* MFp4: 92972, 98913 + one more changebz2006-12-121-4/+6
* Add SCTP as a known upper layer protocol over v6.bz2006-11-131-0/+8
* Sweep kernel replacing suser(9) calls with priv(9) calls, assigningrwatson2006-11-061-1/+2
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hrwatson2006-10-221-1/+2
* o Do not do args->f_id.addr_type == 6 when there ismaxim2006-10-111-2/+2
* o Kill a nit in the comment.maxim2006-10-111-1/+1
* o Extend not very informative ipfw(4) message 'drop session, too manymaxim2006-10-111-2/+32
* Set scope on MC address so IPv6 carp advertisement will not get droppedbz2006-10-071-0/+11
* Handle a list of IPv6 src and dst addresses correctly, eg.jhay2006-09-161-14/+17
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointcsjp2006-09-121-5/+20
* Recognise IPv6 PIM packets.jhay2006-08-311-0/+6
* comply with style policejulian2006-08-181-5/+8
* Allow ipfw to forward to a destination that is specified by a table.julian2006-08-171-7/+23
* Remove useless NULL pointer check: we are using M_WAITOK flag for memoryoleg2006-08-041-4/+0
* Do not leak memory while flushing rules.oleg2006-08-021-2/+3
* There is a consensus that ifaddr.ifa_addr should never be NULL,yar2006-06-291-4/+0
* Use TAILQ_FOREACH consistently.yar2006-06-291-2/+1
* Eliminate the offset argument from send_reject. It's not beenbz2006-06-291-9/+7
* Use INPLOOKUP_WILDCARD instead of just 1 more consistently.bz2006-06-291-1/+1
* - Pullup even when the extention header is unknown, to preventume2006-06-221-1/+13
* Add support of 'tablearg' feature for:oleg2006-06-151-15/+30
* install_state(): style(9) cleanupoleg2006-06-151-33/+36
* install_state() should properly initialize 'addr_type' field of newly createdoleg2006-06-081-0/+1
* Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9).oleg2006-05-241-1/+57
* Use only lower 64bit of src/dest (and src/dest port) for hashing of IPv6mlaier2006-05-141-4/+4
* Remove ip6fw. Since ipfw has full functional IPv6 support now and - inmlaier2006-05-121-1/+0
* Reintroduce net.inet6.ip6.fw.enable sysctl to dis/enable the ipv6 processingmlaier2006-05-121-8/+13
* Don't claim "(+ipv6)" if we didn't build with INET6.mlaier2006-05-111-1/+5
* - Do not leak read lock in IP_FW_TABLE_GETSIZE case of ipfw_ctl().glebius2006-03-031-7/+5
* Use PFIL_HOOKED macros in if_bridge and pass the right argument tocsjp2006-02-021-1/+1
* Somewhat re-factor the read/write locking mechanism associated with the packetcsjp2006-02-021-45/+10
* Fix minor bug in uRPF:oleg2006-01-241-2/+8
* - Change the return type for init_tables from void to int so we can propagatecsjp2006-01-201-10/+25
* Destroy the dynamic rule zone in the event that we fail to insert thecsjp2006-01-201-0/+1
* Correct insecure temporary file usage in texindex. [06:01]cperciva2006-01-111-1/+1
* Cleanup __FreeBSD_version.glebius2005-12-161-5/+0
* Add a new feature for optimizining ipfw rulesets - substitution of theglebius2005-12-131-5/+16
* Optimize parallel processing of ipfw(4) rulesets eliminating the lockingglebius2005-12-061-71/+54
* obey opt_inet6.h and opt_ipsec.h in kernel build directory.ume2005-11-291-2/+2
* Garbage-collect now unused struct _ipfw_insn_pipe and flush_pipe_ptrs(),glebius2005-11-291-29/+1
* fixed a bug that uRPF does not work properly for an IPv6 packet bound for the...suz2005-11-101-2/+8
* Retire MT_HEADER mbuf type and change its users to use MT_DATA.andre2005-11-021-1/+1
* Remove bridge(4) from the tree. if_bridge(4) is a full functionalmlaier2005-09-271-1/+1
* Use monotonic 'time_uptime' instead of 'time_second' as timebaseandre2005-09-191-24/+24
* Fix panic when kernel compiled without INET6 by rejectingbz2005-09-141-6/+30
OpenPOWER on IntegriCloud