| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Export IPFW_TABLES_MAX via sysctl. Part of PR: 127058. | rik | 2008-09-14 | 1 | -0/+2 |
| * | Export the IPFW_DEFAULT_RULE outside ip_fw2.c. This number in not only | rik | 2008-09-06 | 1 | -1/+2 |
| * | whitespace nit | julian | 2008-09-03 | 1 | -1/+1 |
| * | We left out V_static_len from ip_fw2.c | julian | 2008-08-25 | 1 | -3/+3 |
| * | A bunch of formatting fixes brough to light by, or created by the Vimage commit | julian | 2008-08-20 | 1 | -4/+6 |
| * | Commit step 1 of the vimage project, (network stack) | bz | 2008-08-17 | 1 | -139/+140 |
| * | The IPFW code accepts the use of the tablearg keyword along with the skipto | julian | 2008-08-01 | 1 | -8/+21 |
| * | Add code to allow the system to handle multiple routing tables. | julian | 2008-05-09 | 1 | -6/+48 |
| * | Teach pf and ipfw to use read locks in inpcbs write than write locks | rwatson | 2008-04-20 | 1 | -3/+3 |
| * | Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros to | rwatson | 2008-04-17 | 1 | -3/+3 |
| * | Don't cache ptr to nat rule in case of tablearg argument. | piso | 2008-03-17 | 1 | -1/+2 |
| * | Move ipfw's nat code into its own kld: ipfw_nat. | piso | 2008-02-29 | 1 | -551/+53 |
| * | Add table/tablearg support to ipfw's nat. | piso | 2008-02-24 | 1 | -2/+4 |
| * | Hide ipfw internal data structures behind IPFW_INTERNAL rather than | rwatson | 2008-01-25 | 1 | -0/+3 |
| * | If we are walking the IPv6 header chain and we hit an IPPROTO_NONE | dwmalone | 2007-12-09 | 1 | -3/+6 |
| * | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 1 | -1/+1 |
| * | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 1 | -1/+1 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -2/+2 |
| * | Add FBSDID to all files in netinet so that people can more | silby | 2007-10-07 | 1 | -2/+3 |
| * | o For dynamic rules log a parent rule number. Prefix a log message | maxim | 2007-09-29 | 1 | -1/+2 |
| * | Repair ALTQ-tagging rules in IPFW which got broken in the last PF | green | 2007-08-29 | 1 | -1/+0 |
| * | o Fix bug I introduced in the previous commit (ipfw set extention): | maxim | 2007-08-26 | 1 | -1/+4 |
| * | Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which | rwatson | 2007-08-06 | 1 | -4/+1 |
| * | Replace references to NET_CALLOUT_MPSAFE with CALLOUT_MPSAFE, and remove | rwatson | 2007-07-28 | 1 | -1/+1 |
| * | Link pf 4.1 to the build: | mlaier | 2007-07-03 | 1 | -8/+6 |
| * | Commit the change from FAST_IPSEC to IPSEC. The FAST_IPSEC | gnn | 2007-07-03 | 1 | -1/+1 |
| * | Commit IPv6 support for FAST_IPSEC to the tree. | gnn | 2007-07-01 | 1 | -7/+0 |
| * | o Make ipfw set more robust -- now it is possible: | maxim | 2007-06-18 | 1 | -18/+60 |
| * | Move universally to ANSI C function declarations, with relatively | rwatson | 2007-05-10 | 1 | -18/+23 |
| * | Add support for filtering on Routing Header Type 0 and | bz | 2007-05-04 | 1 | -0/+4 |
| * | Shorten text string for ip_fw2 dynamic rules zone by removing the word | rwatson | 2007-04-17 | 1 | -1/+1 |
| * | Since we switched to using monatomically increasing timestamps, | julian | 2007-04-03 | 1 | -0/+9 |
| * | Include opt_ipdivert.h so that the message announcing ipfw correctly | alc | 2007-02-03 | 1 | -0/+1 |
| * | Remove two lines that somehow snuck back in after testing. | julian | 2007-01-09 | 1 | -2/+0 |
| * | Prevent adding a rule with a nat action in case IPFIREWALL_NAT was not defined. | piso | 2007-01-05 | 1 | -0/+4 |
| * | Wrap ipfw nat support in a new kernel config option named | piso | 2007-01-03 | 1 | -1/+16 |
| * | Remove a bunch of dependencies in the IP header being the first thing in the | julian | 2007-01-02 | 1 | -57/+94 |
| * | Summer of Code 2005: improve libalias - part 2 of 2 | piso | 2006-12-29 | 1 | -2/+546 |
| * | MFp4: 92972, 98913 + one more change | bz | 2006-12-12 | 1 | -4/+6 |
| * | Add SCTP as a known upper layer protocol over v6. | bz | 2006-11-13 | 1 | -0/+8 |
| * | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -1/+2 |
| * | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -1/+2 |
| * | o Do not do args->f_id.addr_type == 6 when there is | maxim | 2006-10-11 | 1 | -2/+2 |
| * | o Kill a nit in the comment. | maxim | 2006-10-11 | 1 | -1/+1 |
| * | o Extend not very informative ipfw(4) message 'drop session, too many | maxim | 2006-10-11 | 1 | -2/+32 |
| * | Set scope on MC address so IPv6 carp advertisement will not get dropped | bz | 2006-10-07 | 1 | -0/+11 |
| * | Handle a list of IPv6 src and dst addresses correctly, eg. | jhay | 2006-09-16 | 1 | -14/+17 |
| * | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 1 | -5/+20 |
| * | Recognise IPv6 PIM packets. | jhay | 2006-08-31 | 1 | -0/+6 |
| * | comply with style police | julian | 2006-08-18 | 1 | -5/+8 |
