<feed xmlns='http://www.w3.org/2005/Atom'>
<title>src/sbin/ipfw, branch releng/7.3</title>
<subtitle>FreeBSD source tree</subtitle>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/'/>
<entry>
<title>MFC: r197312</title>
<updated>2009-10-12T12:54:34+00:00</updated>
<author>
<name>Christian Brueffer</name>
<email>brueffer@FreeBSD.org</email>
</author>
<published>2009-10-12T12:54:34+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=dcb9da0003a7492842590509c82914454506abed'/>
<id>dcb9da0003a7492842590509c82914454506abed</id>
<content type='text'>
Fix setfib(1) section number.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fix setfib(1) section number.
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC r195036: kill grammar nits.</title>
<updated>2009-08-06T08:55:54+00:00</updated>
<author>
<name>Maxim Konovalov</name>
<email>maxim@FreeBSD.org</email>
</author>
<published>2009-08-06T08:55:54+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=bd1ca1bb2536a8068714a04998c26fbb514b2df9'/>
<id>bd1ca1bb2536a8068714a04998c26fbb514b2df9</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: another prototype missed in previous commit</title>
<updated>2009-06-22T14:32:47+00:00</updated>
<author>
<name>Luigi Rizzo</name>
<email>luigi@FreeBSD.org</email>
</author>
<published>2009-06-22T14:32:47+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=77f0aa3ec8a44cc67432ca82a7572c9c0cf4e0b7'/>
<id>77f0aa3ec8a44cc67432ca82a7572c9c0cf4e0b7</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: various minor fixes including</title>
<updated>2009-06-22T14:21:14+00:00</updated>
<author>
<name>Luigi Rizzo</name>
<email>luigi@FreeBSD.org</email>
</author>
<published>2009-06-22T14:21:14+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=4448c1405bdb602c6074b204867b82958d95cd52'/>
<id>4448c1405bdb602c6074b204867b82958d95cd52</id>
<content type='text'>
- use a format string in a printf()
- move a variable declaration at the beginning of a block
- const-ify strings
- fix prototypes
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
- use a format string in a printf()
- move a variable declaration at the beginning of a block
- const-ify strings
- fix prototypes
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: sync the ipfw code with the version in HEAD.</title>
<updated>2009-02-20T00:39:39+00:00</updated>
<author>
<name>Luigi Rizzo</name>
<email>luigi@FreeBSD.org</email>
</author>
<published>2009-02-20T00:39:39+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=9e650b97c1cdd1077c56dcdee28694fe268b4d91'/>
<id>9e650b97c1cdd1077c56dcdee28694fe268b4d91</id>
<content type='text'>
The only new feature is that now one can write
"table all {flush | list}" to act on all tables.

Just for the records, there is one difference which probably
has no practical importance; two "tos" flags are represented
differently now:

@@ -182,8 +182,8 @@ static struct _s_x f_iptos[] = {
 	{ "throughput",	IPTOS_THROUGHPUT},
 	{ "reliability", IPTOS_RELIABILITY},
 	{ "mincost",	IPTOS_MINCOST},
-	{ "congestion",	IPTOS_CE},
-	{ "ecntransport", IPTOS_ECT},
+	{ "congestion",	IPTOS_ECN_CE},
+	{ "ecntransport", IPTOS_ECN_ECT0},
 	{ "ip tos option", 0},
 	{ NULL,	0 }
 };

IPTOS_ECT = IPTOS_ECN_ECT0 = 2 so 'ecntransport' is the same.

IPTOS_CE = 1, IPTOS_ECN_CE = 3 so 'congestion' is represented by a
different codepoint, but this also reflects a different specification
(RFC3168 obsoletes RFC2481) so the change is just adopting the new
spec.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The only new feature is that now one can write
"table all {flush | list}" to act on all tables.

Just for the records, there is one difference which probably
has no practical importance; two "tos" flags are represented
differently now:

@@ -182,8 +182,8 @@ static struct _s_x f_iptos[] = {
 	{ "throughput",	IPTOS_THROUGHPUT},
 	{ "reliability", IPTOS_RELIABILITY},
 	{ "mincost",	IPTOS_MINCOST},
-	{ "congestion",	IPTOS_CE},
-	{ "ecntransport", IPTOS_ECT},
+	{ "congestion",	IPTOS_ECN_CE},
+	{ "ecntransport", IPTOS_ECN_ECT0},
 	{ "ip tos option", 0},
 	{ NULL,	0 }
 };

IPTOS_ECT = IPTOS_ECN_ECT0 = 2 so 'ecntransport' is the same.

IPTOS_CE = 1, IPTOS_ECN_CE = 3 so 'congestion' is represented by a
different codepoint, but this also reflects a different specification
(RFC3168 obsoletes RFC2481) so the change is just adopting the new
spec.
</pre>
</div>
</content>
</entry>
<entry>
<title>Manually merge r183889:183890: do nothing in show_nat() for a test mode (-n).</title>
<updated>2009-01-11T10:50:13+00:00</updated>
<author>
<name>Maxim Konovalov</name>
<email>maxim@FreeBSD.org</email>
</author>
<published>2009-01-11T10:50:13+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=e08e9ce6a0766e4da62dfd52c8af8842d02587b5'/>
<id>e08e9ce6a0766e4da62dfd52c8af8842d02587b5</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC r186297 and r186298:</title>
<updated>2009-01-08T22:32:35+00:00</updated>
<author>
<name>Paolo Pisati</name>
<email>piso@FreeBSD.org</email>
</author>
<published>2009-01-08T22:32:35+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=55e2d46c54bc6ebb32b63c779e6239c12e888c0d'/>
<id>55e2d46c54bc6ebb32b63c779e6239c12e888c0d</id>
<content type='text'>
Honor the quiet (-q) option while adding a nat rule.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Honor the quiet (-q) option while adding a nat rule.
</pre>
</div>
</content>
</entry>
<entry>
<title>MFH: 182818, 182823, 182825, 183012 - IPFW_DEFAULT_RULE related fixes.</title>
<updated>2008-09-23T10:36:37+00:00</updated>
<author>
<name>Roman Kurakin</name>
<email>rik@FreeBSD.org</email>
</author>
<published>2008-09-23T10:36:37+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=ba24f0da424a8298287eb07d86dff6359da17a07'/>
<id>ba24f0da424a8298287eb07d86dff6359da17a07</id>
<content type='text'>
 New Revision: 182818
 URL: http://svn.freebsd.org/changeset/base/182818

 Log:
  Export the IPFW_DEFAULT_RULE outside ip_fw2.c.  This number in not only
  the default rule number but also the maximum rule number.  User space
  software such as ipfw and natd should be aware of its value.  The
  software that already includes ip_fw.h should use the defined value.  All
  other a expected to use sysctl (as discussed on net@).

  MFC after: 5 days.
  Discussed on: net@

 Modified:
  head/sys/netinet/ip_fw.h
  head/sys/netinet/ip_fw2.c

 New Revision: 182823
 URL: http://svn.freebsd.org/changeset/base/182823

 Log:
  Use IPFW_DEFAULT_RULE instead of hardcoded value since now it is
  available.

  MFC after:    5 days.

 Modified:
  head/sbin/ipfw/ipfw2.c

 New Revision: 182825
 URL: http://svn.freebsd.org/changeset/base/182825

 Log:
  Check rule numbers against maximum value to avoid rules cleanup due
  to overflow.

  MFC after:    5 days.

 Modified:
  head/sbin/natd/natd.c

 New Revision: 183012
 URL: http://svn.freebsd.org/changeset/base/183012

 Log:
  Make the commet for the default rule number more clear.

  Submitted by:    yar@

 Modified:
  head/sys/netinet/ip_fw.h

Approved by:	re (kensmith)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
 New Revision: 182818
 URL: http://svn.freebsd.org/changeset/base/182818

 Log:
  Export the IPFW_DEFAULT_RULE outside ip_fw2.c.  This number in not only
  the default rule number but also the maximum rule number.  User space
  software such as ipfw and natd should be aware of its value.  The
  software that already includes ip_fw.h should use the defined value.  All
  other a expected to use sysctl (as discussed on net@).

  MFC after: 5 days.
  Discussed on: net@

 Modified:
  head/sys/netinet/ip_fw.h
  head/sys/netinet/ip_fw2.c

 New Revision: 182823
 URL: http://svn.freebsd.org/changeset/base/182823

 Log:
  Use IPFW_DEFAULT_RULE instead of hardcoded value since now it is
  available.

  MFC after:    5 days.

 Modified:
  head/sbin/ipfw/ipfw2.c

 New Revision: 182825
 URL: http://svn.freebsd.org/changeset/base/182825

 Log:
  Check rule numbers against maximum value to avoid rules cleanup due
  to overflow.

  MFC after:    5 days.

 Modified:
  head/sbin/natd/natd.c

 New Revision: 183012
 URL: http://svn.freebsd.org/changeset/base/183012

 Log:
  Make the commet for the default rule number more clear.

  Submitted by:    yar@

 Modified:
  head/sys/netinet/ip_fw.h

Approved by:	re (kensmith)
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC teh ability to use tablearg with a skipto.</title>
<updated>2008-08-19T19:58:42+00:00</updated>
<author>
<name>Julian Elischer</name>
<email>julian@FreeBSD.org</email>
</author>
<published>2008-08-19T19:58:42+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=45ff20c70f7cca225ef63f361f7c0a112b55516a'/>
<id>45ff20c70f7cca225ef63f361f7c0a112b55516a</id>
<content type='text'>
This was already supported in userland.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This was already supported in userland.
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC the fact that the setfib rule is not a terminal rule</title>
<updated>2008-07-24T18:58:39+00:00</updated>
<author>
<name>Julian Elischer</name>
<email>julian@FreeBSD.org</email>
</author>
<published>2008-07-24T18:58:39+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=2464d70d48cd4b70a9dc7a3d8fa6851ae8177787'/>
<id>2464d70d48cd4b70a9dc7a3d8fa6851ae8177787</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
