| Commit message (Expand) | Author | Age | Files | Lines |
* | - Rewrite functions that copyin/out NAT configuration, so that they | Gleb Smirnoff | 2011-04-19 | 1 | -2/+0 |
* | The first customer of the SO_USER_COOKIE option: | Luigi Rizzo | 2010-11-12 | 1 | -0/+3 |
* | + implement (two lines) the kernel side of 'lookup dscp N' to use the | Luigi Rizzo | 2010-03-15 | 1 | -6/+9 |
* | Bring in the most recent version of ipfw and dummynet, developed | Luigi Rizzo | 2010-03-02 | 1 | -10/+12 |
* | merge code from ipfw3-head to reduce contention on the ipfw lock | Luigi Rizzo | 2009-12-22 | 1 | -1/+1 |
* | Start splitting ip_fw2.c and ip_fw.h into smaller components. | Luigi Rizzo | 2009-12-15 | 1 | -129/+0 |
* | change the type of the opcode from enum *:8 to u_int8_t | Luigi Rizzo | 2009-12-02 | 1 | -1/+1 |
* | Fix ipfw's initialization functions to get the correct order of evaluation | Julian Elischer | 2009-08-21 | 1 | -2/+4 |
* | Remove unused VNET_SET() and related macros; only VNET_GET() is | Robert Watson | 2009-07-16 | 1 | -4/+4 |
* | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | Robert Watson | 2009-07-14 | 1 | -82/+9 |
* | Close long existed race with net.inet.ip.fw.one_pass = 0: | Oleg Bulyzhin | 2009-06-09 | 1 | -9/+13 |
* | Several ipfw options and actions use a 16-bit argument to indicate | Luigi Rizzo | 2009-06-05 | 1 | -5/+17 |
* | More cleanup in preparation of ipfw relocation (no actual code change): | Luigi Rizzo | 2009-06-05 | 1 | -8/+0 |
* | Make indentation more uniform accross vnet container structs. | Marko Zec | 2009-05-02 | 1 | -27/+27 |
* | Permit buiding kernels with options VIMAGE, restricted to only a single | Marko Zec | 2009-04-30 | 1 | -2/+0 |
* | First pass at separating per-vnet initializer functions | Marko Zec | 2009-04-06 | 1 | -0/+2 |
* | Implement an ipfw action to reassemble ip packets: reass. | Paolo Pisati | 2009-04-01 | 1 | -1/+3 |
* | fw_debug has been unused for ages, so remove it from the list | Luigi Rizzo | 2009-03-02 | 1 | -1/+1 |
* | remove dependency on eventhandler.h, we only need a forward declaration | Luigi Rizzo | 2009-02-16 | 1 | -1/+2 |
* | Second round of putting global variables, which were virtualized | Bjoern A. Zeeb | 2008-12-13 | 1 | -1/+1 |
* | Conditionally compile out V_ globals while instantiating the appropriate | Marko Zec | 2008-12-10 | 1 | -5/+8 |
* | Fix content and spelling of comment on _ipfw_insn.len -- a count of | Robert Watson | 2008-10-10 | 1 | -1/+1 |
* | Step 1.5 of importing the network stack virtualization infrastructure | Marko Zec | 2008-10-02 | 1 | -0/+81 |
* | Export IPFW_TABLES_MAX value for compiled in defaults. | Roman Kurakin | 2008-09-21 | 1 | -1/+6 |
* | Make the commet for the default rule number more clear. | Roman Kurakin | 2008-09-14 | 1 | -1/+4 |
* | Export the IPFW_DEFAULT_RULE outside ip_fw2.c. This number in not only | Roman Kurakin | 2008-09-06 | 1 | -0/+5 |
* | Add code to allow the system to handle multiple routing tables. | Julian Elischer | 2008-05-09 | 1 | -0/+4 |
* | Fix a comment typo. | Robert Watson | 2008-04-29 | 1 | -1/+1 |
* | Move ipfw's nat code into its own kld: ipfw_nat. | Paolo Pisati | 2008-02-29 | 1 | -0/+32 |
* | Hide ipfw internal data structures behind IPFW_INTERNAL rather than | Robert Watson | 2008-01-25 | 1 | -0/+11 |
* | Add support for filtering on Routing Header Type 0 and | Bjoern A. Zeeb | 2007-05-04 | 1 | -0/+2 |
* | Summer of Code 2005: improve libalias - part 2 of 2 | Paolo Pisati | 2006-12-29 | 1 | -0/+60 |
* | comply with style police | Julian Elischer | 2006-08-18 | 1 | -1/+0 |
* | Allow ipfw to forward to a destination that is specified by a table. | Julian Elischer | 2006-08-17 | 1 | -0/+2 |
* | Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9). | Oleg Bulyzhin | 2006-05-24 | 1 | -0/+6 |
* | Reintroduce net.inet6.ip6.fw.enable sysctl to dis/enable the ipv6 processing | Max Laier | 2006-05-12 | 1 | -0/+3 |
* | When sending a packet from dummynet, indicate that we're forwarding | Ruslan Ermilov | 2006-02-14 | 1 | -2/+0 |
* | Add a new feature for optimizining ipfw rulesets - substitution of the | Gleb Smirnoff | 2005-12-13 | 1 | -0/+2 |
* | Garbage-collect now unused struct _ipfw_insn_pipe and flush_pipe_ptrs(), | Gleb Smirnoff | 2005-11-29 | 1 | -15/+0 |
* | * Add dynamic sysctl for net.inet6.ip6.fw. | Bjoern A. Zeeb | 2005-08-13 | 1 | -0/+5 |
* | Add support for IPv4 only rules to IPFW2 now that it supports IPv6 as well. | Max Laier | 2005-06-03 | 1 | -0/+2 |
* | IPFW version 2 is the only option in HEAD and RELENG_5. | Gleb Smirnoff | 2005-05-04 | 1 | -1/+0 |
* | Add IPv6 support to IPFW and Dummynet. | Brooks Davis | 2005-04-18 | 1 | -0/+67 |
* | Add a ng_ipfw node, implementing a quick and simple interface between | Gleb Smirnoff | 2005-02-05 | 1 | -0/+7 |
* | o Clean up interface between ip_fw_chk() and its callers: | Gleb Smirnoff | 2005-01-14 | 1 | -4/+12 |
* | /* -> /*- for license, minor formatting changes | Warner Losh | 2005-01-07 | 1 | -1/+1 |
* | Add support to IPFW for matching by TCP data length. | Brian Feldman | 2004-10-03 | 1 | -0/+1 |
* | Add support to IPFW for classification based on "diverted" status | Brian Feldman | 2004-10-03 | 1 | -3/+6 |
* | Add to IPFW the ability to do ALTQ classification/tagging. | Brian Feldman | 2004-10-03 | 1 | -0/+10 |
* | Add an additional struct inpcb * argument to pfil(9) in order to enable | Max Laier | 2004-09-29 | 1 | -2/+3 |