summaryrefslogtreecommitdiffstats
path: root/sys/netpfil/ipfw
Commit message (Expand)AuthorAgeFilesLines
* Fix breakage in ipfw+VIMAGE after r261590.glebius2014-03-211-14/+6
* Summary: Two quick edits to the implementation notes as they're nognn2014-02-151-2/+2
* Under sys/netpfil/ipfw, surround two IPv6-specific static functions withdim2014-02-152-0/+4
* Reorder struct ip_fw_chain:melifaro2014-01-243-10/+12
* Revert r260548. We really should not use IPFW_WLOCK() heremelifaro2014-01-111-3/+3
* We don't need chain write lock since we're not modifying its contents.melifaro2014-01-111-3/+3
* Use rnh_matchaddr instead of rnh_lookup for longest-prefix match.melifaro2014-01-031-3/+3
* Add net.inet.ip.fw.dyn_keep_states sysctl whichmelifaro2013-12-181-1/+24
* Simplify O_NAT opcode handling.melifaro2013-11-281-19/+16
* Check ipfw table numbers in both user and kernel space before rule addition.melifaro2013-11-281-1/+1
* In sys/netpfil/ipfw/ip_fw_nat.c:vnet_ipfw_nat_uninit() we call "IPFW_WLOCK(ch...rodrigc2013-11-251-1/+1
* add a counter on the struct mq (a queue of mbufs),luigi2013-11-223-0/+32
* disable some ipfw match options when compiling in userspaceluigi2013-11-221-2/+10
* make this code compile in userspace on OSXluigi2013-11-221-0/+7
* more support for userspace compiling of this code:luigi2013-11-221-0/+10
* make ipfw_check_packet() and ipfw_check_frame() public,luigi2013-11-221-4/+4
* Remove net.link.ether.inet.useloopback sysctl tunable. It was always on byglebius2013-11-051-1/+1
* Include necessary headers that now are available due to pollutionglebius2013-10-281-0/+1
* Move new pf includes to the pf directory. The pfvar.h remainglebius2013-10-271-1/+2
* Provide includes that are needed in these files, and before were readglebius2013-10-262-0/+2
* The r48589 promised to remove implicit inclusion of if_var.h soon. Prepareglebius2013-10-264-0/+5
* Use the correct EtherType for logging IPv6 packets.philip2013-09-281-2/+9
* Make dummynet use new direct callout(9) execution mechanism. Since the onlymav2013-08-241-4/+6
* Make ipfw nat init/unint work correctly for VIMAGE:trociny2013-08-243-24/+58
* Use unified method for accessing / updating cached rule pointers.melifaro2013-05-041-40/+35
* Correct a few sizeof()seadler2013-05-011-1/+1
* Remove useless ifdef KLD_MODULE from dummynet module unload path. Thisglebius2013-04-291-7/+0
* Add const qualifier to the dst parameter of the ifnet if_output method.glebius2013-04-261-1/+1
* Fix ipfw rule validation partially broken by r248552.melifaro2013-04-011-4/+5
* When we are removing a specific set, call ipfw_expire_dyn_rules only once.ae2013-03-251-4/+5
* Add ipfw support for setting/matching DiffServ codepoints (DSCP).melifaro2013-03-203-4/+59
* Separate the locking macros that are used in the packet flow pathae2013-03-192-7/+9
* Fix callout expiring dynamic rules.melifaro2013-03-021-3/+3
* Add parentheses to IP_FW_ARG_TABLEARG() definition.melifaro2012-12-231-1/+1
* Use unified IP_FW_ARG_TABLEARG() macro for most tablearg checks.melifaro2012-12-234-25/+17
* Mechanically substitute flags from historic mbuf allocator withglebius2012-12-053-4/+4
* Use common macros for working with rule/dynamic counters.melifaro2012-11-304-27/+33
* Make ipfw dynamic states operations SMP-ready.melifaro2012-11-304-330/+638
* Simplify sending keepalives.melifaro2012-11-091-47/+38
* Add assertion to enforce 'nat global' locking requierements changed by r241908.melifaro2012-11-052-0/+2
* Use unified print_dyn_rule_flags() function for debugging messagesmelifaro2012-11-051-93/+27
* Remove the recently added sysctl variable net.pfil.forward.ae2012-11-022-4/+2
* Remove the IPFIREWALL_FORWARD kernel option and make possible to turnae2012-10-253-17/+7
* Switch the entire IPv4 stack to keep the IP packet headerglebius2012-10-224-16/+2
* Remove unnecessary chain read lock in ipfw nat 'global' code.melifaro2012-10-221-2/+7
* Make the "struct if_clone" opaque to users of the cloning API. Usersglebius2012-10-161-9/+9
* Revert previous commit...kevlo2012-10-102-2/+2
* Prefer NULL over 0 for pointerskevlo2012-10-092-2/+2
* Fix typo: s/unknow/unknownkevlo2012-10-091-2/+2
* Catch up with r241245 and do not return packet back in host byte order.glebius2012-10-081-4/+1
OpenPOWER on IntegriCloud