summaryrefslogtreecommitdiff
path: root/sys/netinet/ipfw
Commit message (Expand)AuthorAgeFilesLines
* IFC @231845Bjoern A. Zeeb2012-02-172-3/+17
|\
| * Make the 'tcpwin' option of ipfw(8) accept ranges and lists.Gleb Smirnoff2012-02-062-3/+17
* | Make ipfw verify_path6() multi-FIB aware.Bjoern A. Zeeb2012-02-031-6/+6
|/
* a variable was erroneously declared as 32 bit instead of 64.Luigi Rizzo2012-01-271-1/+1
* Make #error messages string-literals and remove punctuation.Bjoern A. Zeeb2012-01-221-1/+1
* - add a missing "be" and "in"Eitan Adler2011-11-111-1/+1
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten2011-11-071-1/+1
* Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.Ed Schouten2011-11-072-2/+2
* Always use the opt_*.h options for ipfw.ko, not just whenBjoern A. Zeeb2011-11-046-26/+0
* - change "is is" to "is" or "it is"Eitan Adler2011-10-161-1/+1
* Unbreak no-ip and no-inet6 module builds with ipfw. For now continue toBjoern A. Zeeb2011-09-271-3/+3
* Allow the ipfw.ko module built with a kernel to honor any IPFIREWALL_*John Baldwin2011-09-126-6/+6
* Add support for IPv6 to ipfw fwd:Bjoern A. Zeeb2011-08-205-8/+76
* Hide IPv6 next header parsing warnings under the verbose sysctlBjoern A. Zeeb2011-08-201-7/+12
* After r225032 fix logging in a similar way masking the the IPv6Bjoern A. Zeeb2011-08-201-2/+5
* If we detect an IPv6 fragment header and it is not the first fragment,Bjoern A. Zeeb2011-08-201-1/+1
* ipfw internally checks for offset == 0 to determine whether theBjoern A. Zeeb2011-08-201-13/+8
* While not explicitly allowed by RFC 2460, in case there is noBjoern A. Zeeb2011-08-201-5/+16
* Add new rule actions "call" and "return" to ipfw. They makeAndrey V. Elsukov2011-06-293-0/+125
* Update packet filter (pf) code to OpenBSD 4.5.Bjoern A. Zeeb2011-06-281-4/+0
* Add possibility to pass IPv6 packets to a divert(4) socket.Gleb Smirnoff2011-06-271-3/+27
* Do not use SET_HOST_IPLEN() macro for IPv6 packets.Andrey V. Elsukov2011-06-212-3/+3
* Implement "global" mode for ipfw nat. It is similar to natd(8)Andrey V. Elsukov2011-06-142-8/+48
* Add IPv6 support to the ipfw uid/gid check. Pass an ip_fw_args structureAndrey V. Elsukov2011-06-141-37/+53
* Make a behaviour of the libalias based in-kernel NAT a bit closer toAndrey V. Elsukov2011-06-071-6/+16
* Implement a CPU-affine TCP and UDP connection lookup data structure,Robert Watson2011-06-061-0/+4
* Do not return EINVAL when user does `ipfw set N flush` on an empty set.Andrey V. Elsukov2011-06-061-3/+4
* O_FORWARD_IP is only action which depends from the result of lookup ofAndrey V. Elsukov2011-06-011-1/+2
* Hide some debug messages under debug macro.Andrey V. Elsukov2011-06-011-5/+5
* Hide useless warning under debug macro.Andrey V. Elsukov2011-06-011-1/+2
* Decompose the current single inpcbinfo lock into two locks:Robert Watson2011-05-301-19/+31
* Wrap long line.Andrey V. Elsukov2011-05-301-1/+2
* Add tablearg support for ipfw setfib.Andrey V. Elsukov2011-05-302-4/+11
* Convert delay parameter back to ms when reporting to user.Andrey V. Elsukov2011-05-062-1/+2
* Use size_t for sopt_valsize.Gleb Smirnoff2011-04-211-1/+2
* MFp4 CH=191466:Bjoern A. Zeeb2011-04-201-0/+1
* - Rewrite functions that copyin/out NAT configuration, so that theyGleb Smirnoff2011-04-192-53/+74
* Add sysctl handlers for net.inet.ip.dummynet.hash_size, .pipe_byte_limitAndrey V. Elsukov2011-04-191-8/+52
* ipdn_bound_var() functions is designed to bound a variable betweenAndrey V. Elsukov2011-04-191-1/+5
* Use M_WAITOK instead M_WAIT for malloc. Remove unneded checks.Andrey V. Elsukov2011-04-191-7/+1
* LibAliasInit() should allocate memory with M_WAITOK flag. Modify itGleb Smirnoff2011-04-181-14/+7
* Pullup up to TCP header length before matching against 'tcpopts'.Gleb Smirnoff2011-04-181-2/+5
* Restore previous behaviour - always match rule when we doing tagging,Andrey V. Elsukov2011-04-121-4/+7
* Fill up src_port and dst_port variables for SCTP over IPv4.Andrey V. Elsukov2011-03-311-0/+6
* Fix malloc types.Andrey V. Elsukov2011-03-311-2/+2
* Fix a memory leak. Memory that is allocated for schedulers hash tableAndrey V. Elsukov2011-03-311-2/+3
* Fix typos - remove duplicate "the".Rebecca Cran2011-02-211-1/+1
* Bump dummynet module version to meet dummynet schedulers' requirements,Sergey Kandaurov2011-02-161-1/+1
* correct the 'output_time' of packets generated by dummynet.Luigi Rizzo2011-02-051-1/+1
* Use a blocking malloc() to initialize the dummynet taskq.John Baldwin2011-01-131-1/+1