aboutsummaryrefslogtreecommitdiff
path: root/sbin/ipfw
Commit message (Expand)AuthorAgeFilesLines
* Extended pf(4) ioctl interface and pfctl(8) to allow bandwidths ofPatrick Kelsey2018-08-221-0/+3
* Restore the behaviour changed in r337536, when bad `ipfw delete` commandAndrey V. Elsukov2018-08-102-4/+9
* If -q flag is specified, do not complain when we are trying to deleteAndrey V. Elsukov2018-08-091-3/+9
* Add "record-state", "set-limit" and "defer-action" rule options to ipfw.Andrey V. Elsukov2018-07-093-26/+172
* Allow jail names (not just IDs) to be specified for: cpuset(1), ipfw(8),Jamie Gritton2018-07-033-9/+9
* Remove extra "ipfw" from example.Andrey V. Elsukov2018-06-281-4/+4
* Fix the printing of rule comments.Andrey V. Elsukov2018-05-101-3/+3
* Update NAT64 documentation, now we support any IPv6 prefixes.Andrey V. Elsukov2018-05-091-9/+11
* Bring in some last changes in NAT64 implementation:Andrey V. Elsukov2018-05-093-16/+20
* Fix indenting in ipv6.c file, use tabs instead of mixing tabs and spaces.Andrey V. Elsukov2018-04-121-176/+171
* Remove printing of "not" keyword from print_ip6() function.Andrey V. Elsukov2018-04-123-13/+9
* Remove printing of "not" keyword from print_ip() function.Andrey V. Elsukov2018-04-121-3/+2
* Fix typo.Oleg Bulyzhin2018-04-111-1/+1
* Rework ipfw rules parsing and printing code.Andrey V. Elsukov2018-03-283-751/+785
* Remove note that `fwd tablearg` is supported only by IPv4. IPv6 isAndrey V. Elsukov2018-03-191-2/+2
* Do not try to reassemble IPv6 fragments in "reass" rule.Andrey V. Elsukov2018-03-121-2/+2
* ipfw(8): Fix endianness for Legacy and Ipv4 table hostname valuesConrad Meyer2018-03-081-3/+6
* fix typo in ipfw(8). No functional change.Alan Somers2018-02-271-1/+1
* DSCP values passed to setdscp need to be lowercase.Nick Hibma2018-02-131-22/+22
* Fix a few more speelling errorsEitan Adler2017-12-281-1/+1
* Fix rule number truncation, use uint16_t type to specify rulenum.Andrey V. Elsukov2017-12-241-3/+4
* Revert r327005 - SPDX tags for license similar to BSD-2-Clause.Pedro F. Giffuni2017-12-207-15/+1
* SPDX: These are fundamentally BSD-2-Clause.Pedro F. Giffuni2017-12-197-7/+21
* Add to ipfw support for sending an SCTP packet containing an ABORT chunk.Michael Tuexen2017-11-263-1/+27
* DIRDEPS_BUILD: Update dependencies.Bryan Drewery2017-10-311-1/+0
* Return 'errno' value from the table_do_modify_record(), it is expectedAndrey V. Elsukov2017-10-131-0/+2
* Whitespace changes: Remove leading spaces followed by a tab.Michael Tuexen2017-10-021-7/+7
* Fix a bug which avoided that rules for matching port numbers for SCTPMichael Tuexen2017-10-021-3/+3
* ipfw: Note that bandwidth can take G suffix in the manpageEmmanuel Vadot2017-06-231-1/+1
* ipfw: dummynet: Add 'G' and 'g' suffix for bandwidth configuration/displayEmmanuel Vadot2017-06-231-0/+5
* sbin/ipfw: strcpy, strncpy => strlcpyAlan Somers2017-06-131-9/+10
* ipfw.8: Note that the ipfw_nat kernel module must be loaded or that theEmmanuel Vadot2017-06-011-0/+5
* Allow zero port specification in table entries with type flow.Andrey V. Elsukov2017-05-171-10/+6
* Add `ipfw table all destroy` support.Andrey V. Elsukov2017-05-022-9/+37
* In parse_range() validate both range values instead of checkingAndrey V. Elsukov2017-05-021-1/+1
* Add sets support for ipfw table info/list/flush commands.Andrey V. Elsukov2017-05-021-5/+6
* Properly initialize ipfw_range_tlv variable to fix possible EINVALAndrey V. Elsukov2017-05-021-7/+7
* In fill_ip6(), the value of the pointer av changes before it isMarius Strobl2017-04-231-2/+3
* Add ipfw_pmod kernel module.Andrey V. Elsukov2017-04-033-1/+40
* Add O_EXTERNAL_DATA opcode support.Andrey V. Elsukov2017-04-031-0/+16
* Change the syntax of ipfw's named states.Andrey V. Elsukov2017-03-152-59/+45
* Fix a bug in r272840; given that the optlen parameter of setsockopt(2)Marius Strobl2016-12-282-4/+6
* Fix 'ipfw delete set N':Oleg Bulyzhin2016-11-291-1/+1
* Add missing support of named lookup tables to the IPv6 code.Andrey V. Elsukov2016-11-153-25/+20
* Add support for non-contiguous IPv6 masks in ipfw(8) rules.Andrey V. Elsukov2016-10-182-21/+45
* Remove the kernel optoion for IPSEC_FILTERTUNNEL, which was deprecatedBjoern A. Zeeb2016-08-211-3/+2
* Add an ability to attach comment to check-state rules.Andrey V. Elsukov2016-08-141-1/+10
* Do not warn about ambiguous state name when we inspect a comment token.Andrey V. Elsukov2016-08-141-7/+10
* Make statistics nat64lsn, nat64stl an nptv6 output netstat-like:Andrey V. Elsukov2016-08-143-43/+87
* Add `stats reset` command implementation to NPTv6 moduleAndrey V. Elsukov2016-08-132-3/+31