src - FreeBSD source tree

	Commit message (Expand)	Author	Age	Files	Lines
*	o Create directory sys/netpfil, where all packet filters should	Gleb Smirnoff	2012-09-14	27	-17622/+0
*	Merge the projects/pf/head branch, that was worked on for last six months,	Gleb Smirnoff	2012-09-08	1	-2/+12
*	Introduce new link-layer PFIL hook V_link_pfil_hook.	Alexander V. Chernikov	2012-09-04	3	-28/+149
*	Mark the ipfw interface type as not being ether. This fixes an issue	Eitan Adler	2012-09-01	1	-2/+2
*	s/lenght/length/ in comments	Luigi Rizzo	2012-08-07	1	-1/+1
*	move functions outside the SYSBEGIN/SYSEND block	Luigi Rizzo	2012-08-06	1	-15/+22
*	use FREE_PKT instead of m_freem to free an mbuf.	Luigi Rizzo	2012-08-06	1	-1/+1
*	replace __unused with a portable construct;	Luigi Rizzo	2012-08-02	1	-3/+4
*	replace inet_ntoa_r with the more standard inet_ntop().	Luigi Rizzo	2012-08-01	2	-10/+12
*	add a cast to avoid a signed/unsigned warning (to be removed	Luigi Rizzo	2012-08-01	1	-1/+1
*	Make ipfw0 logging pseudo-interface clonable. It can be created automatically	Hiroki Sato	2012-07-09	1	-27/+110
*	Finally fix lookup (account remaining '\0') and deletion	Alexander V. Chernikov	2012-07-08	1	-3/+6
*	- Make ipfw's sched rules case insensitive, for user-friendliness.	Isabell Long	2012-07-03	1	-1/+1
*	Fix interface matching by ipfw table	Alexander V. Chernikov	2012-06-23	1	-1/+2
*	Validate IPv4 network mask being passed to ipfw kernel interface.	Alexander V. Chernikov	2012-06-09	1	-0/+3
*	Revert r234834 per luigi@ request.	Alexander V. Chernikov	2012-05-03	1	-0/+81
*	Move several enums and structures required for L2 filtering from ip_fw_privat...	Alexander V. Chernikov	2012-04-30	1	-81/+0
*	Don't check malloc(M_WAITOK) results.	Gleb Smirnoff	2012-03-31	1	-4/+0
*	- Permit number of ipfw tables to be changed in runtime.	Alexander V. Chernikov	2012-03-25	3	-13/+99
*	Fix VNET build broken by r232865.	Alexander V. Chernikov	2012-03-12	2	-3/+3
*	- Add ipfw eXtended tables permitting radix to be used for any kind of keys.	Alexander V. Chernikov	2012-03-12	4	-90/+630
*	- Refresh dynamic tcp rule only if both sides answered keepalive packets.	Oleg Bulyzhin	2012-02-28	1	-19/+27
*	lookup_dyn_rule_locked(): style(9) cleanup	Oleg Bulyzhin	2012-02-28	1	-64/+62
*	Don't use `m' after m_megapullup.	Andrey V. Elsukov	2012-02-22	1	-1/+1
*	IFC @231845	Bjoern A. Zeeb	2012-02-17	2	-3/+17
\|\
\| *	Make the 'tcpwin' option of ipfw(8) accept ranges and lists.	Gleb Smirnoff	2012-02-06	2	-3/+17
* \|	Make ipfw verify_path6() multi-FIB aware.	Bjoern A. Zeeb	2012-02-03	1	-6/+6
\|/
*	a variable was erroneously declared as 32 bit instead of 64.	Luigi Rizzo	2012-01-27	1	-1/+1
*	Make #error messages string-literals and remove punctuation.	Bjoern A. Zeeb	2012-01-22	1	-1/+1
*	- add a missing "be" and "in"	Eitan Adler	2011-11-11	1	-1/+1
*	Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.	Ed Schouten	2011-11-07	1	-1/+1
*	Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.	Ed Schouten	2011-11-07	2	-2/+2
*	Always use the opt_*.h options for ipfw.ko, not just when	Bjoern A. Zeeb	2011-11-04	6	-26/+0
*	- change "is is" to "is" or "it is"	Eitan Adler	2011-10-16	1	-1/+1
*	Unbreak no-ip and no-inet6 module builds with ipfw. For now continue to	Bjoern A. Zeeb	2011-09-27	1	-3/+3
*	Allow the ipfw.ko module built with a kernel to honor any IPFIREWALL_*	John Baldwin	2011-09-12	6	-6/+6
*	Add support for IPv6 to ipfw fwd:	Bjoern A. Zeeb	2011-08-20	5	-8/+76
*	Hide IPv6 next header parsing warnings under the verbose sysctl	Bjoern A. Zeeb	2011-08-20	1	-7/+12
*	After r225032 fix logging in a similar way masking the the IPv6	Bjoern A. Zeeb	2011-08-20	1	-2/+5
*	If we detect an IPv6 fragment header and it is not the first fragment,	Bjoern A. Zeeb	2011-08-20	1	-1/+1
*	ipfw internally checks for offset == 0 to determine whether the	Bjoern A. Zeeb	2011-08-20	1	-13/+8
*	While not explicitly allowed by RFC 2460, in case there is no	Bjoern A. Zeeb	2011-08-20	1	-5/+16
*	Add new rule actions "call" and "return" to ipfw. They make	Andrey V. Elsukov	2011-06-29	3	-0/+125
*	Update packet filter (pf) code to OpenBSD 4.5.	Bjoern A. Zeeb	2011-06-28	1	-4/+0
*	Add possibility to pass IPv6 packets to a divert(4) socket.	Gleb Smirnoff	2011-06-27	1	-3/+27
*	Do not use SET_HOST_IPLEN() macro for IPv6 packets.	Andrey V. Elsukov	2011-06-21	2	-3/+3
*	Implement "global" mode for ipfw nat. It is similar to natd(8)	Andrey V. Elsukov	2011-06-14	2	-8/+48
*	Add IPv6 support to the ipfw uid/gid check. Pass an ip_fw_args structure	Andrey V. Elsukov	2011-06-14	1	-37/+53
*	Make a behaviour of the libalias based in-kernel NAT a bit closer to	Andrey V. Elsukov	2011-06-07	1	-6/+16
*	Implement a CPU-affine TCP and UDP connection lookup data structure,	Robert Watson	2011-06-06	1	-0/+4