src-test/sbin/ipfw, branch release/5.2.0

Include opt_ipsec.h so IPSEC/FAST_IPSEC is defined and the appropriate

2003-12-02T00:23:45Z

code is compiled in to support the O_IPSEC operator. Previously no support was included and ipsec rules were always matching. Note that we do not return an error when an ipsec rule is added and the kernel does not have IPsec support compiled in; this is done intentionally but we may want to revisit this (document this in the man page). PR: 58899 Submitted by: Bjoern A. Zeeb Approved by: re (rwatson)

Replace the if_name and if_unit members of struct ifnet with new members

2003-10-31T18:32:15Z

if_xname, if_dname, and if_dunit. if_xname is the name of the interface and if_dname/unit are the driver name and instance. This change paves the way for interface renaming and enhanced pseudo device creation and configuration symantics. Approved By: re (in principle) Reviewed By: njl, imp Tested On: i386, amd64, sparc64 Obtained From: NetBSD (if_xname)

remove include of route.h now that ip_dummynet.h no longer exposes

2003-10-03T21:01:48Z

data structures that have an embedded struct route Sponsored by: FreeBSD Foundation

fix typo: s/sytem/system/

2003-09-26T12:22:28Z

Document the alternate way of matching MAC addresses: by a bitmask.

2003-09-10T06:41:16Z

PR: 56021 Submitted by: Glen Gibb MFC after: 1 month

Apply a bandaid to get this working on sparc64 again; the introduction

2003-09-04T15:57:37Z

of do_cmd() broke things, because this function assumes that a socklen_t is large enough to hold a pointer. A real solution to this problem would be a rewrite of do_cmd() to treat the optlen parameter consistently and not use it to carry a pointer or integer dependent on the context.

Check an arguments count before proceed in sysctl_handler().

2003-09-02T10:36:40Z

PR: bin/56298 Submitted by: Kang Liu MFC after: 2 weeks # We need a regression test suit for ipfw(2)/ipfw(8) badly.

Add a note that net.inet.ip.fw.autoinc_step is ipfw2-specific

2003-07-22T07:41:24Z

o Initialize do_pipe before command parsing.

2003-07-21T09:56:05Z

PR: bin/54649 Submitted by: Andy Gilligan MFC after: 3 days

Userland side of:

2003-07-15T23:08:44Z

Allow set 31 to be used for rules other than 65535. Set 31 is still special because rules belonging to it are not deleted by the "ipfw flush" command, but must be deleted explicitly with "ipfw delete set 31" or by individual rule numbers. This implement a flexible form of "persistent rules" which you might want to have available even after an "ipfw flush". Note that this change does not violate POLA, because you could not use set 31 in a ruleset before this change. Suggested by: Paul Richards