summaryrefslogtreecommitdiffstats
path: root/sys/netinet/ipfw
Commit message (Expand)AuthorAgeFilesLines
* o Create directory sys/netpfil, where all packet filters shouldglebius2012-09-1427-17622/+0
* Merge the projects/pf/head branch, that was worked on for last six months,glebius2012-09-081-2/+12
* Introduce new link-layer PFIL hook V_link_pfil_hook.melifaro2012-09-043-28/+149
* Mark the ipfw interface type as not being ether. This fixes an issueeadler2012-09-011-2/+2
* s/lenght/length/ in commentsluigi2012-08-071-1/+1
* move functions outside the SYSBEGIN/SYSEND blockluigi2012-08-061-15/+22
* use FREE_PKT instead of m_freem to free an mbuf.luigi2012-08-061-1/+1
* replace __unused with a portable construct;luigi2012-08-021-3/+4
* replace inet_ntoa_r with the more standard inet_ntop().luigi2012-08-012-10/+12
* add a cast to avoid a signed/unsigned warning (to be removedluigi2012-08-011-1/+1
* Make ipfw0 logging pseudo-interface clonable. It can be created automaticallyhrs2012-07-091-27/+110
* Finally fix lookup (account remaining '\0') and deletionmelifaro2012-07-081-3/+6
* - Make ipfw's sched rules case insensitive, for user-friendliness.issyl02012-07-031-1/+1
* Fix interface matching by ipfw tablemelifaro2012-06-231-1/+2
* Validate IPv4 network mask being passed to ipfw kernel interface.melifaro2012-06-091-0/+3
* Revert r234834 per luigi@ request.melifaro2012-05-031-0/+81
* Move several enums and structures required for L2 filtering from ip_fw_privat...melifaro2012-04-301-81/+0
* Don't check malloc(M_WAITOK) results.glebius2012-03-311-4/+0
* - Permit number of ipfw tables to be changed in runtime.melifaro2012-03-253-13/+99
* Fix VNET build broken by r232865.melifaro2012-03-122-3/+3
* - Add ipfw eXtended tables permitting radix to be used for any kind of keys.melifaro2012-03-124-90/+630
* - Refresh dynamic tcp rule only if both sides answered keepalive packets.oleg2012-02-281-19/+27
* lookup_dyn_rule_locked(): style(9) cleanupoleg2012-02-281-64/+62
* Don't use `m' after m_megapullup.ae2012-02-221-1/+1
* Merge multi-FIB IPv6 support from projects/multi-fibv6/head/:bz2012-02-171-6/+6
* Make the 'tcpwin' option of ipfw(8) accept ranges and lists.glebius2012-02-062-3/+17
* a variable was erroneously declared as 32 bit instead of 64.luigi2012-01-271-1/+1
* Make #error messages string-literals and remove punctuation.bz2012-01-221-1/+1
* - add a missing "be" and "in"eadler2011-11-111-1/+1
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.ed2011-11-071-1/+1
* Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.ed2011-11-072-2/+2
* Always use the opt_*.h options for ipfw.ko, not just whenbz2011-11-046-26/+0
* - change "is is" to "is" or "it is"eadler2011-10-161-1/+1
* Unbreak no-ip and no-inet6 module builds with ipfw. For now continue tobz2011-09-271-3/+3
* Allow the ipfw.ko module built with a kernel to honor any IPFIREWALL_*jhb2011-09-126-6/+6
* Add support for IPv6 to ipfw fwd:bz2011-08-205-8/+76
* Hide IPv6 next header parsing warnings under the verbose sysctlbz2011-08-201-7/+12
* After r225032 fix logging in a similar way masking the the IPv6bz2011-08-201-2/+5
* If we detect an IPv6 fragment header and it is not the first fragment,bz2011-08-201-1/+1
* ipfw internally checks for offset == 0 to determine whether thebz2011-08-201-13/+8
* While not explicitly allowed by RFC 2460, in case there is nobz2011-08-201-5/+16
* Add new rule actions "call" and "return" to ipfw. They makeae2011-06-293-0/+125
* Update packet filter (pf) code to OpenBSD 4.5.bz2011-06-281-4/+0
* Add possibility to pass IPv6 packets to a divert(4) socket.glebius2011-06-271-3/+27
* Do not use SET_HOST_IPLEN() macro for IPv6 packets.ae2011-06-212-3/+3
* Implement "global" mode for ipfw nat. It is similar to natd(8)ae2011-06-142-8/+48
* Add IPv6 support to the ipfw uid/gid check. Pass an ip_fw_args structureae2011-06-141-37/+53
* Make a behaviour of the libalias based in-kernel NAT a bit closer toae2011-06-071-6/+16
* Implement a CPU-affine TCP and UDP connection lookup data structure,rwatson2011-06-061-0/+4
* Do not return EINVAL when user does `ipfw set N flush` on an empty set.ae2011-06-061-3/+4
OpenPOWER on IntegriCloud