aboutsummaryrefslogtreecommitdiff
path: root/sys/netinet/ipfw
Commit message (Expand)AuthorAgeFilesLines
...
* more splitting of ip_fw2.c, now extract the 'table' routinesLuigi Rizzo2009-12-154-1209/+1398
* Start splitting ip_fw2.c and ip_fw.h into smaller components.Luigi Rizzo2009-12-157-1402/+1852
* implement a new match option,Luigi Rizzo2009-12-151-0/+31
* use div64 when converting back the burst value for userlandLuigi Rizzo2009-12-101-1/+1
* when draining a flowset free the entire chain, not just one packet.Luigi Rizzo2009-12-101-1/+1
* centralize the code to free a packet (or a chain) while in dummynet.Luigi Rizzo2009-12-101-32/+27
* Fix burst processing for WF2Q pipes - do not increase available burst sizeOleg Bulyzhin2009-12-051-1/+3
* adjust comment in previous commit after Julian's explanationLuigi Rizzo2009-12-051-8/+9
* remove a dead block of code, document how the ipfw clients areLuigi Rizzo2009-12-051-27/+28
* fix build with VNET enabledLuigi Rizzo2009-12-051-1/+1
* Use INET_ADDRSTRLEN and INET6_ADDRSTRLEN rather than hardHajimu UMEMOTO2009-12-041-5/+23
* preparation work to replace the monster switch in ipfw_chk() withLuigi Rizzo2009-12-031-137/+203
* Teach an IPv6 to the debug prints.Hajimu UMEMOTO2009-12-031-14/+62
* - initialize src_ip in the main loop to prevent a compiler warningLuigi Rizzo2009-12-021-5/+8
* small changes for portability and diff reduction wrt/ FreeBSD 7.Luigi Rizzo2009-12-021-15/+38
* Teach an IPv6 to send_pkt() and ipfw_tick().Hajimu UMEMOTO2009-12-021-112/+166
* style(9): add missing parenthesesOleg Bulyzhin2009-11-091-1/+1
* Fix two issues that can lead to exceeding configured pipe bandwidth:Oleg Bulyzhin2009-11-031-5/+16
* Virtualize the pfil hooks so that different jails may chose differentJulian Elischer2009-10-112-59/+75
* Fix another typo right next to the previous one, that amazingly, I didJulian Elischer2009-08-231-1/+1
* Fix typo in comment that has been bugging me for days.Julian Elischer2009-08-231-1/+1
* Fix ipfw's initialization functions to get the correct order of evaluationJulian Elischer2009-08-212-67/+119
* Fix ipfw crash on uid or gid check.Julian Elischer2009-08-141-1/+1
* Merge the remainder of kern_vimage.c and vimage.h into vnet.c andRobert Watson2009-08-013-3/+0
* Startup the vnet part of initialization a bit after the global part.Julian Elischer2009-07-281-2/+2
* Catch ipfw up to the rest of the vimage code.Julian Elischer2009-07-251-109/+163
* Remove unused VNET_SET() and related macros; only VNET_GET() isRobert Watson2009-07-162-24/+24
* Build on Jeff Roberson's linker-set based dynamic per-CPU allocatorRobert Watson2009-07-143-120/+98
* Update various IPFW-related modules to use if_addr_rlock()/Robert Watson2009-06-262-8/+8
* - fix dummynet 'fast' mode for WF2Q case.Oleg Bulyzhin2009-06-241-21/+51
* Rework the credential code to support larger values of NGROUPS andBrooks Davis2009-06-191-43/+18
* Since dn_pipe.numbytes is int64_t now - remove unnecessary overflow detectionOleg Bulyzhin2009-06-151-21/+7
* in ip_dn_ctl(), do not allocate a large structure on the stack,Luigi Rizzo2009-06-101-9/+11
* small simplifications to the code in charge of reaping deleted rules:Luigi Rizzo2009-06-101-16/+13
* Close long existed race with net.inet.ip.fw.one_pass = 0:Oleg Bulyzhin2009-06-093-76/+39
* After r193232 rt_tables in vnet.h are no longer indirectly dependent onBjoern A. Zeeb2009-06-081-1/+0
* move kernel ipfw-related sources to a separate directory,Luigi Rizzo2009-06-054-0/+8383