aboutsummaryrefslogtreecommitdiff
path: root/sbin/ipfw
Commit message (Expand)AuthorAgeFilesLines
* Mention the nat command in the synopsis and in the action section.Paolo Pisati2007-02-151-0/+13
* Fix a parsing bug when specifying more than one address with dotted decimalMax Laier2007-01-071-2/+8
* Summer of Code 2005: improve libalias - part 2 of 2Paolo Pisati2006-12-292-9/+1022
* Add a note about rule syntax compared to the shell used so users do not getTom Rhodes2006-10-091-0/+4
* When addr/mask examples are given, show both a host and networkGiorgos Keramidas2006-10-041-5/+6
* o Check for a required "pathname" argument presence.Maxim Konovalov2006-09-291-0/+2
* Markup fixes.Ruslan Ermilov2006-09-181-2/+4
* Check the length of the ipv4 and ipv6 address lists. It must be lessJohn Hay2006-09-161-0/+4
* Use bzero() to clear the whole ipfw_insn_icmp6 structure in fill_icmp6types(),John Hay2006-09-161-1/+1
* A pipe bandwidth of 10MBits/s should probablyDavid Malone2006-08-231-1/+2
* Regigle parens to try and get the intended affect. This should fix peopleDavid Malone2006-08-201-6/+6
* Fix typo.Julian Elischer2006-08-201-1/+1
* comply with style policeJulian Elischer2006-08-182-18/+19
* Allow ipfw to forward to a destination that is specified by a table.Julian Elischer2006-08-172-11/+60
* Take IP_FIREWALL_EXTENDED out of the man page too.Julian Elischer2006-08-171-8/+0
* Use the SLIST_NEXT macro instead of sle_next.Stefan Farfeleder2006-08-051-2/+2
* Specify correct argument range for tag/untag keywords.Oleg Bulyzhin2006-07-251-2/+2
* Add support of 'tablearg' feature for:Oleg Bulyzhin2006-06-152-80/+128
* Print dynamic rules for IPv6 as well.Max Laier2006-06-021-5/+15
* Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9).Oleg Bulyzhin2006-05-242-9/+133
* For src/dest parsing take off the netmask before checking for AF withMax Laier2006-05-141-15/+31
* Update manpage for net.inet6.ip6.fw.enable sysctl.Max Laier2006-05-121-2/+4
* Amazing.. two screwups in one commit.Julian Elischer2006-03-311-1/+2
* I can't believe that no-one noticed that I broke ipfw table delJulian Elischer2006-03-311-1/+2
* Revert `proto ip' back to the previous behavior. The kernel side ofHajimu UMEMOTO2006-03-052-5/+3
* oops, mismerge from working sources.. not only add new code,Julian Elischer2006-02-141-2/+0
* Stop ipfw from aborting when asked to delete a table entry thatJulian Elischer2006-02-142-1/+13
* Fix a markup glitch.Ruslan Ermilov2006-02-031-1/+1
* Forget about ipfw1 and ipfw2. We aren't in RELENG_4 anymore.Gleb Smirnoff2006-01-131-139/+6
* Document 'tablearg' keyword.Gleb Smirnoff2006-01-131-1/+31
* [mdoc] add missing space before a punctuation type argument.Ruslan Ermilov2005-12-131-1/+1
* Add a new feature for optimizining ipfw rulesets - substitution of theGleb Smirnoff2005-12-131-46/+44
* Cleanup _FreeBSD_version.Gleb Smirnoff2005-12-091-3/+0
* We couldn't specify the rule for filtering tunnel traffic since anHajimu UMEMOTO2005-11-292-16/+62
* Catch up with ip_dummynet.h rev. 1.38 and fix build.Gleb Smirnoff2005-11-291-2/+2
* Garbage-collect now unused struct _ipfw_insn_pipe and flush_pipe_ptrs(),Gleb Smirnoff2005-11-291-1/+1
* -mdoc sweep.Ruslan Ermilov2005-11-181-3/+4
* Restore the documentation about uid, gid or prison based rules requiringChristian S.J. Peron2005-10-231-0/+10
* Redirect bridge(4) to if_bridge(4) and rename sysctl accordingly.Max Laier2005-09-281-4/+4
* * Add dynamic sysctl for net.inet6.ip6.fw.Bjoern A. Zeeb2005-08-132-3/+89
* Bump document date. Remove EOL whitespace introduced in previousColin Percival2005-07-011-3/+4
* Document some limitations of uid/gid rules.Colin Percival2005-07-011-0/+11
* Markup fixes.Ruslan Ermilov2005-06-141-4/+4
* add_proto() now fills proto for us so stop to 'guess' the protocol from theMax Laier2005-06-071-5/+2
* Better explain, then actually implement the IPFW ALTQ-rule first-matchBrian Feldman2005-06-041-2/+13
* Add support for IPv4 only rules to IPFW2 now that it supports IPv6 as well.Max Laier2005-06-032-26/+71
* Unbreak handling of "ip[v]6" protocol and option flag. No more segfaultsMax Laier2005-05-211-2/+1
* 'ngtee' also depends on net.inet.ip.fw.one_pass.Gleb Smirnoff2005-05-111-1/+3
* IPFW version 2 is the only option now in HEAD. Do not confuseGleb Smirnoff2005-05-041-45/+0
* Fix a the previous commit. I wanted to remove the if and always run theBrooks Davis2005-04-261-0/+1