summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ipfw
Commit message (Expand)AuthorAgeFilesLines
* Don't check malloc(M_WAITOK) results.glebius2012-03-311-4/+0
* - Permit number of ipfw tables to be changed in runtime.melifaro2012-03-253-13/+99
* Fix VNET build broken by r232865.melifaro2012-03-122-3/+3
* - Add ipfw eXtended tables permitting radix to be used for any kind of keys.melifaro2012-03-124-90/+630
* - Refresh dynamic tcp rule only if both sides answered keepalive packets.oleg2012-02-281-19/+27
* lookup_dyn_rule_locked(): style(9) cleanupoleg2012-02-281-64/+62
* Don't use `m' after m_megapullup.ae2012-02-221-1/+1
* Merge multi-FIB IPv6 support from projects/multi-fibv6/head/:bz2012-02-171-6/+6
* Make the 'tcpwin' option of ipfw(8) accept ranges and lists.glebius2012-02-062-3/+17
* a variable was erroneously declared as 32 bit instead of 64.luigi2012-01-271-1/+1
* Make #error messages string-literals and remove punctuation.bz2012-01-221-1/+1
* - add a missing "be" and "in"eadler2011-11-111-1/+1
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.ed2011-11-071-1/+1
* Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.ed2011-11-072-2/+2
* Always use the opt_*.h options for ipfw.ko, not just whenbz2011-11-046-26/+0
* - change "is is" to "is" or "it is"eadler2011-10-161-1/+1
* Unbreak no-ip and no-inet6 module builds with ipfw. For now continue tobz2011-09-271-3/+3
* Allow the ipfw.ko module built with a kernel to honor any IPFIREWALL_*jhb2011-09-126-6/+6
* Add support for IPv6 to ipfw fwd:bz2011-08-205-8/+76
* Hide IPv6 next header parsing warnings under the verbose sysctlbz2011-08-201-7/+12
* After r225032 fix logging in a similar way masking the the IPv6bz2011-08-201-2/+5
* If we detect an IPv6 fragment header and it is not the first fragment,bz2011-08-201-1/+1
* ipfw internally checks for offset == 0 to determine whether thebz2011-08-201-13/+8
* While not explicitly allowed by RFC 2460, in case there is nobz2011-08-201-5/+16
* Add new rule actions "call" and "return" to ipfw. They makeae2011-06-293-0/+125
* Update packet filter (pf) code to OpenBSD 4.5.bz2011-06-281-4/+0
* Add possibility to pass IPv6 packets to a divert(4) socket.glebius2011-06-271-3/+27
* Do not use SET_HOST_IPLEN() macro for IPv6 packets.ae2011-06-212-3/+3
* Implement "global" mode for ipfw nat. It is similar to natd(8)ae2011-06-142-8/+48
* Add IPv6 support to the ipfw uid/gid check. Pass an ip_fw_args structureae2011-06-141-37/+53
* Make a behaviour of the libalias based in-kernel NAT a bit closer toae2011-06-071-6/+16
* Implement a CPU-affine TCP and UDP connection lookup data structure,rwatson2011-06-061-0/+4
* Do not return EINVAL when user does `ipfw set N flush` on an empty set.ae2011-06-061-3/+4
* O_FORWARD_IP is only action which depends from the result of lookup ofae2011-06-011-1/+2
* Hide some debug messages under debug macro.ae2011-06-011-5/+5
* Hide useless warning under debug macro.ae2011-06-011-1/+2
* Decompose the current single inpcbinfo lock into two locks:rwatson2011-05-301-19/+31
* Wrap long line.ae2011-05-301-1/+2
* Add tablearg support for ipfw setfib.ae2011-05-302-4/+11
* Convert delay parameter back to ms when reporting to user.ae2011-05-062-1/+2
* Use size_t for sopt_valsize.glebius2011-04-211-1/+2
* MFp4 CH=191466:bz2011-04-201-0/+1
* - Rewrite functions that copyin/out NAT configuration, so that theyglebius2011-04-192-53/+74
* Add sysctl handlers for net.inet.ip.dummynet.hash_size, .pipe_byte_limitae2011-04-191-8/+52
* ipdn_bound_var() functions is designed to bound a variable betweenae2011-04-191-1/+5
* Use M_WAITOK instead M_WAIT for malloc. Remove unneded checks.ae2011-04-191-7/+1
* LibAliasInit() should allocate memory with M_WAITOK flag. Modify itglebius2011-04-181-14/+7
* Pullup up to TCP header length before matching against 'tcpopts'.glebius2011-04-181-2/+5
* Restore previous behaviour - always match rule when we doing tagging,ae2011-04-121-4/+7
* Fill up src_port and dst_port variables for SCTP over IPv4.ae2011-03-311-0/+6
OpenPOWER on IntegriCloud