summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ip_fw2.c
Commit message (Expand)AuthorAgeFilesLines
* Use PFIL_HOOKED macros in if_bridge and pass the right argument tocsjp2006-02-021-1/+1
* Somewhat re-factor the read/write locking mechanism associated with the packetcsjp2006-02-021-45/+10
* Fix minor bug in uRPF:oleg2006-01-241-2/+8
* - Change the return type for init_tables from void to int so we can propagatecsjp2006-01-201-10/+25
* Destroy the dynamic rule zone in the event that we fail to insert thecsjp2006-01-201-0/+1
* Correct insecure temporary file usage in texindex. [06:01]cperciva2006-01-111-1/+1
* Cleanup __FreeBSD_version.glebius2005-12-161-5/+0
* Add a new feature for optimizining ipfw rulesets - substitution of theglebius2005-12-131-5/+16
* Optimize parallel processing of ipfw(4) rulesets eliminating the lockingglebius2005-12-061-71/+54
* obey opt_inet6.h and opt_ipsec.h in kernel build directory.ume2005-11-291-2/+2
* Garbage-collect now unused struct _ipfw_insn_pipe and flush_pipe_ptrs(),glebius2005-11-291-29/+1
* fixed a bug that uRPF does not work properly for an IPv6 packet bound for the...suz2005-11-101-2/+8
* Retire MT_HEADER mbuf type and change its users to use MT_DATA.andre2005-11-021-1/+1
* Remove bridge(4) from the tree. if_bridge(4) is a full functionalmlaier2005-09-271-1/+1
* Use monotonic 'time_uptime' instead of 'time_second' as timebaseandre2005-09-191-24/+24
* Fix panic when kernel compiled without INET6 by rejectingbz2005-09-141-6/+30
* clear lock on error in O_LIMIT case of install_statesam2005-09-041-0/+1
* Fix broken build of rev. 1.108 in case of no INET6 and IPFIREWALLbz2005-08-141-1/+7
* * Add dynamic sysctl for net.inet6.ip6.fw.bz2005-08-131-67/+283
* include scope6_var.h for in6_clearscope().ume2005-07-261-0/+3
* Remove ambiguity from hlen. IPv4 is now indicated by is_ipv4 and we need amlaier2005-07-031-20/+17
* Fix ipfw packet matching errors with address tables.simon2005-06-291-17/+20
* In verify_rev_path6():mlaier2005-06-161-18/+52
* Fix indentation in INET6 section in preperation of more serious work.mlaier2005-06-161-49/+49
* When doing matching based on dst_ip/src_ip make sure we are really lookingmlaier2005-06-121-10/+13
* Modify send_pkt() to return the generated packet and have the callergreen2005-06-101-8/+32
* Better explain, then actually implement the IPFW ALTQ-rule first-matchgreen2005-06-041-0/+3
* Add support for IPv4 only rules to IPFW2 now that it supports IPv6 as well.mlaier2005-06-031-0/+7
* Let OSPFv3 go through ipfw. Some more additional checks would betanimura2005-05-281-0/+5
* IPFW version 2 is the only option in HEAD and RELENG_5.glebius2005-05-041-4/+0
* Introduce a struct icmphdr which contains the type, code, and cksumbrooks2005-04-261-9/+5
* typophk2005-04-191-1/+1
* Make IPFIREWALL compile without INET6phk2005-04-191-3/+18
* Add IPv6 support to IPFW and Dummynet.brooks2005-04-181-32/+333
* Centralized finding the protocol header in IP packets in preperation forbrooks2005-04-151-92/+109
* Use NET_CALLOUT_MPSAFE macro.glebius2005-03-011-1/+1
* Jump to common action checks after doing specific once. This fixes addingglebius2005-02-061-0/+5
* Add a ng_ipfw node, implementing a quick and simple interface betweenglebius2005-02-051-0/+23
* Change the state allocator from using regular malloc to usingcsjp2005-01-311-2/+7
* o Clean up interface between ip_fw_chk() and its callers:glebius2005-01-141-26/+23
* /* -> /*- for license, minor formatting changesimp2005-01-071-1/+1
* This commit adds a shared locking mechanism very similar to thecsjp2004-12-101-29/+69
* Remove RFC1644 T/TCP support from the TCP side of the network stack.andre2004-11-021-5/+0
* When printing the initialization string and IPDIVERT is not compiled into theandre2004-10-221-1/+1
* Convert IPDIVERT into a loadable module. This makes use of the dynamic loada...andre2004-10-191-4/+2
* Add support to IPFW for matching by TCP data length.green2004-10-031-0/+23
* Add support to IPFW for classification based on "diverted" statusgreen2004-10-031-1/+20
* Add to IPFW the ability to do ALTQ classification/tagging.green2004-10-031-0/+44
* Validate the action pointer to be within the rule size, so that trying togreen2004-09-301-0/+5
* Add an additional struct inpcb * argument to pfil(9) in order to enablemlaier2004-09-291-11/+32
OpenPOWER on IntegriCloud