summaryrefslogtreecommitdiffstats
path: root/sys/netpfil/ipfw
Commit message (Expand)AuthorAgeFilesLines
* Pull in r267961 and r267973 again. Fix for issues reported will follow.hselasky2014-06-281-1/+0
* Revert r267961, r267973:gjb2014-06-271-0/+1
* Extend the meaning of the CTLFLAG_TUN flag to automatically check ifhselasky2014-06-271-1/+0
* DNOLD_IS_ECN introduced by r266941 is not required.hiren2014-06-011-3/+0
* ECN marking implenetation for dummynet.hiren2014-06-013-5/+81
* Since ipfw nat configures all options in one step, we should set all bitsae2014-05-181-1/+1
* Fix wrong formatting of 0.0.0.0/X table records in ipfw(8).melifaro2014-05-171-0/+1
* Define startup order the same way as it is in dummynet.trociny2014-04-261-2/+2
* Set oif only for outgoing packets.ae2014-04-161-1/+1
* Free resources and error cases; re-indent a curly brace while here.brueffer2014-04-131-3/+7
* Fix breakage in ipfw+VIMAGE after r261590.glebius2014-03-211-14/+6
* Summary: Two quick edits to the implementation notes as they're nognn2014-02-151-2/+2
* Under sys/netpfil/ipfw, surround two IPv6-specific static functions withdim2014-02-152-0/+4
* Reorder struct ip_fw_chain:melifaro2014-01-243-10/+12
* Revert r260548. We really should not use IPFW_WLOCK() heremelifaro2014-01-111-3/+3
* We don't need chain write lock since we're not modifying its contents.melifaro2014-01-111-3/+3
* Use rnh_matchaddr instead of rnh_lookup for longest-prefix match.melifaro2014-01-031-3/+3
* Add net.inet.ip.fw.dyn_keep_states sysctl whichmelifaro2013-12-181-1/+24
* Simplify O_NAT opcode handling.melifaro2013-11-281-19/+16
* Check ipfw table numbers in both user and kernel space before rule addition.melifaro2013-11-281-1/+1
* In sys/netpfil/ipfw/ip_fw_nat.c:vnet_ipfw_nat_uninit() we call "IPFW_WLOCK(ch...rodrigc2013-11-251-1/+1
* add a counter on the struct mq (a queue of mbufs),luigi2013-11-223-0/+32
* disable some ipfw match options when compiling in userspaceluigi2013-11-221-2/+10
* make this code compile in userspace on OSXluigi2013-11-221-0/+7
* more support for userspace compiling of this code:luigi2013-11-221-0/+10
* make ipfw_check_packet() and ipfw_check_frame() public,luigi2013-11-221-4/+4
* Remove net.link.ether.inet.useloopback sysctl tunable. It was always on byglebius2013-11-051-1/+1
* Include necessary headers that now are available due to pollutionglebius2013-10-281-0/+1
* Move new pf includes to the pf directory. The pfvar.h remainglebius2013-10-271-1/+2
* Provide includes that are needed in these files, and before were readglebius2013-10-262-0/+2
* The r48589 promised to remove implicit inclusion of if_var.h soon. Prepareglebius2013-10-264-0/+5
* Use the correct EtherType for logging IPv6 packets.philip2013-09-281-2/+9
* Make dummynet use new direct callout(9) execution mechanism. Since the onlymav2013-08-241-4/+6
* Make ipfw nat init/unint work correctly for VIMAGE:trociny2013-08-243-24/+58
* Use unified method for accessing / updating cached rule pointers.melifaro2013-05-041-40/+35
* Correct a few sizeof()seadler2013-05-011-1/+1
* Remove useless ifdef KLD_MODULE from dummynet module unload path. Thisglebius2013-04-291-7/+0
* Add const qualifier to the dst parameter of the ifnet if_output method.glebius2013-04-261-1/+1
* Fix ipfw rule validation partially broken by r248552.melifaro2013-04-011-4/+5
* When we are removing a specific set, call ipfw_expire_dyn_rules only once.ae2013-03-251-4/+5
* Add ipfw support for setting/matching DiffServ codepoints (DSCP).melifaro2013-03-203-4/+59
* Separate the locking macros that are used in the packet flow pathae2013-03-192-7/+9
* Fix callout expiring dynamic rules.melifaro2013-03-021-3/+3
* Add parentheses to IP_FW_ARG_TABLEARG() definition.melifaro2012-12-231-1/+1
* Use unified IP_FW_ARG_TABLEARG() macro for most tablearg checks.melifaro2012-12-234-25/+17
* Mechanically substitute flags from historic mbuf allocator withglebius2012-12-053-4/+4
* Use common macros for working with rule/dynamic counters.melifaro2012-11-304-27/+33
* Make ipfw dynamic states operations SMP-ready.melifaro2012-11-304-330/+638
* Simplify sending keepalives.melifaro2012-11-091-47/+38
* Add assertion to enforce 'nat global' locking requierements changed by r241908.melifaro2012-11-052-0/+2
OpenPOWER on IntegriCloud