aboutsummaryrefslogtreecommitdiff
path: root/sys/modules/ipfilter
Commit message (Collapse)AuthorAgeFilesLines
* ipfilter: Disable ipfs(8) by defaultCy Schubert2025-12-081-0/+7
| | | | | | | | | | | | | At the moment ipfs(8) is a tool that can be easily abused. Though the concept is sound the implementation needs some work. ipfs(8) should be considered experimental at the moment. This commit also makes ipfs support in the kernel optional. Reviewed by: emaste, glebius MFC after: 1 week Differential revision: https://reviews.freebsd.org/D53787
* Remove residual blank line at start of MakefileWarner Losh2024-07-151-1/+0
| | | | | | | This is a residual of the $FreeBSD$ removal. MFC After: 3 days (though I'll just run the command on the branches) Sponsored by: Netflix
* sys: Remove $FreeBSD$: one-line sh patternWarner Losh2023-08-161-1/+0
| | | | Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
* ipfilter: Move kernel bits to netpfilCy Schubert2021-12-201-2/+2
| | | | | | | | | | | | | | | | Through fixes and improvements our ipfilter sources have diverged enough to warrant move from contrib into sys/netpil. Now that I'm planning on implementing MSS clamping as in iptables it makes more sense to move ipfilter to netpfil. This is the first of three commits the ipfilter move. Suggested by glebius on two occaions. Suggested by and discussed with: glebius Reviewed by: glebius, kp (for #network) MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D33510
* modules: a lot: need opt_kern_tls.hKyle Evans2021-09-301-1/+1
| | | | This fixes the standalone build.
* Whitespace adjustment.Cy Schubert2019-06-061-1/+1
| | | | | | | MFC after: 3 days Notes: svn path=/head/; revision=348718
* Silence non-actionable warnings in vendor codeMatt Macy2018-05-191-1/+1
| | | | | | | | | We can't modify vendor code so there's no signal in warnings from it. Similarly -Waddress-of-packed-member is not useful on networking code as access to packed structures is fundamental to its operation. Notes: svn path=/head/; revision=333819
* sys/modules: normalize .CURDIR-relative paths to SRCTOPEnji Cooper2017-03-041-3/+3
| | | | | | | | | | | This simplifies make output/logic Tested with: `cd sys/modules; make ALL_MODULES=` on amd64 MFC after: 1 month Sponsored by: Dell EMC Isilon Notes: svn path=/head/; revision=314651
* Re-support CWARNFLAGS, lost when bsd.sys.mk was removed. Also, supportWarner Losh2015-01-031-1/+0
| | | | | | | | | | | CWARNFALGS.$file centrally so we don't have to have it in all the places. Remove a few warning flags that are no longer needed. Also, always use -Wno-unknown-pragma to (hopefully temporarily) work around #pragma ident in debug.h in the opensolaris code. Remove some stale warning suppression that's no longer necessary. Notes: svn path=/head/; revision=276606
* Move most of the 15 variations on generating opt_inet.h andWarner Losh2014-08-041-11/+0
| | | | | | | | | opt_inet6.h into kmod.mk by forcing almost everybody to eat the same dogfood. While at it, consolidate the opt_bpf.h and opt_mroute.h targets here too. Notes: svn path=/head/; revision=269540
* Use src.opts.mk in preference to bsd.own.mk except where we need stuffWarner Losh2014-05-061-1/+1
| | | | | | | from the latter. Notes: svn path=/head/; revision=265420
* Turn off warnings about unused variables for a bunch of files underDimitry Andric2013-12-291-3/+14
| | | | | | | | | contrib/ipfilter. MFC after: 3 days Notes: svn path=/head/; revision=260039
* Update ipfilter 4.1.28 --> 5.1.2.Cy Schubert2013-09-061-1/+2
| | | | | | | | Approved by: glebius (mentor) BSD Licensed by: Darren Reed <darrenr@reed.wattle.id.au> (author) Notes: svn path=/head/; revision=255332
* Disable several instances instances of clang's -Wself-assign warning.Dimitry Andric2011-12-301-0/+5
| | | | | | | | | | | | | | All of these are harmless, and are in fact used to shut up warnings from lint. While here, remove -Wno-missing-prototypes from the xfs module Makefile, as I could not reproduce those warnings either with gcc or clang. MFC after: 1 week Notes: svn path=/head/; revision=228994
* Reimplementation of world/kernel build options. For details, see:Ruslan Ermilov2006-03-171-1/+3
| | | | | | | | | | | http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) Notes: svn path=/head/; revision=156813
* Let modules use the kernel's opt_*.h files if built along withYaroslav Tykhiy2005-10-141-1/+2
| | | | | | | | | | | | | | | | | the kernel by wrapping all targets for fake opt_*.h files in .if defined(KERNBUILDDIR). Thus, such fake files won't be created at all if modules are built with the kernel. Some modules undergo cleanup like removing unused or unneeded options or .h files, without which they wouldn't build this way or the other. Reviewed by: ru Tested by: no binary changes in modules built alone Tested on: i386 sparc64 amd64 Notes: svn path=/head/; revision=151350
* Fix standalone module build.Ruslan Ermilov2005-06-031-0/+6
| | | | | | | Reported by: Boris Samorodov <bsam@ipt.ru> Notes: svn path=/head/; revision=146934
* new files and compile defines to build new ipfilterDarren Reed2005-04-251-2/+3
| | | | Notes: svn path=/head/; revision=145523
* Don't define PFIL_HOOKS. It's no longer required in RELENG_5 or HEAD.Scott Long2004-12-251-1/+1
| | | | Notes: svn path=/head/; revision=139283
* NOINET6 -> NO_INET6Ruslan Ermilov2004-12-211-1/+1
| | | | Notes: svn path=/head/; revision=139115
* Recognise NOINET6 as an indication to not build IPv6 enabled source evenDarren Reed2004-06-081-1/+2
| | | | | | | | | if FreeBSD header files, etc, support it. Submitted by: Sergey Mokryshev <mokr@mokr.net> Notes: svn path=/head/; revision=130253
* IPv6 is on by default in GENERIC so enable IPv6 in IPFilter too by default.Darren Reed2004-04-201-0/+2
| | | | | | | | PR: kern/57730 Submitted by: FUKAUMI Naoki <fukaumi@soum.co.jp> Notes: svn path=/head/; revision=128476
* update to reflect PFIL_HOOKS api changesSam Leffler2003-09-231-1/+1
| | | | | | | Supported by: FreeBSD Foundation Notes: svn path=/head/; revision=120387
* Drop <bsd.man.mk> support from <bsd.kmod.mk>.Ruslan Ermilov2002-01-111-1/+0
| | | | | | | Not objected to by: -current Notes: svn path=/head/; revision=89260
* Relocate IPFilter from sys/netinet to sys/contrib/ipfilter.Jonathan Lemon2001-06-071-1/+2
| | | | Notes: svn path=/head/; revision=77854
* Use a consistent style and one much closer to the rest of /usr/srcDavid E. O'Brien2001-01-061-1/+3
| | | | Notes: svn path=/head/; revision=70711
* Fix typoGregory Neil Shapiro2000-09-041-1/+1
| | | | Notes: svn path=/head/; revision=65423
* Back out opt_ipfilter.h creation I add recently and add -DIPFILTER=1Andrey A. Chernov2000-08-011-5/+2
| | | | | | | | | to CFLAGS instead According to other sources, opt_ipfilter.h not supposed to be included for modules Notes: svn path=/head/; revision=64082
* Fix prev. commit: NIPFILTER -> IPFILTERAndrey A. Chernov2000-08-011-1/+1
| | | | Notes: svn path=/head/; revision=64079
* Generate opt_ipfilter.h to fix 'make depend'Andrey A. Chernov2000-07-311-1/+4
| | | | Notes: svn path=/head/; revision=64077
* Use .include <bsd.kmod.mk> to get to ../../*/conf/kmod.mk instead ofPeter Wemm2000-05-271-1/+1
| | | | | | | encoding the relative path. Notes: svn path=/head/; revision=60966
* Pull in sys/conf/kmod.mk, rather than /usr/share/mk/bsd.kmod.mk.Peter Wemm2000-05-041-1/+1
| | | | | | | | | | This means that the kernel can be totally self contained now and is not dependent on the last buildworld to update /usr/share/mk. This might also make it easier to build 5.x kernels on 4.0 boxes etc, assuming gensetdefs and config(8) are updated. Notes: svn path=/head/; revision=59951
* Add forgotten ip_fil.c and fil.c to kld versionGuido van Rooij1999-12-062-183/+1
| | | | | | | Remove mlfk_ipl.c from here: no sources allowed in these directories! Notes: svn path=/head/; revision=54220
* Add ipfilter kld and wire it in.Guido van Rooij1999-11-232-0/+195
Notes: svn path=/head/; revision=53646