src-test2/sys/modules/ipfw, branch release/10.0.0FreeBSD source treehttps://cgit-dev.freebsd.org/src-test2/atom?h=release%2F10.0.02012-09-14T11:51:49Zo Create directory sys/netpfil, where all packet filters should2012-09-14T11:51:49ZGleb Smirnoffglebius@FreeBSD.org2012-09-14T11:51:49Zurn:sha1:3b3a8eb937bf8045231e8364bfd1b94cd4a95979
reside, and move there ipfw(4) and pf(4).
o Move most modified parts of pf out of contrib.
Actual movements:
sys/contrib/pf/net/*.c -> sys/netpfil/pf/
sys/contrib/pf/net/*.h -> sys/net/
contrib/pf/pfctl/*.c -> sbin/pfctl
contrib/pf/pfctl/*.h -> sbin/pfctl
contrib/pf/pfctl/pfctl.8 -> sbin/pfctl
contrib/pf/pfctl/*.4 -> share/man/man4
contrib/pf/pfctl/*.5 -> share/man/man5
sys/netinet/ipfw -> sys/netpfil/ipfw
The arguable movement is pf/net/*.h -> sys/net. There are
future plans to refactor pf includes, so I decided not to
break things twice.
Not modified bits of pf left in contrib: authpf, ftp-proxy,
tftp-proxy, pflogd.
The ipfw(4) movement is planned to be merged to stable/9,
to make head and stable match.
Discussed with: bz, luigi
Always use the opt_*.h options for ipfw.ko, not just when2011-11-04T16:24:19ZBjoern A. Zeebbz@FreeBSD.org2011-11-04T16:24:19Zurn:sha1:8813217a6733813ba75c307c0c9d39ecbfcdd77f
compiled into the kernel.
Do not try to build the module in case of no INET support but
keep #error calls for now in case we would compile it into the
kernel.
This should fix an issue where the module would fail to enable
IPv6 support from the rc framework, but also other INET and INET6
parts being silently compiled out without giving a warning in the
module case.
While here garbage collect unneeded opt_*.h includes.
opt_ipdn.h is not used anywhere but we need to leave the DUMMYNET
entry in options for conditional inclusion in kernel so keep the
file with the same name.
Reported by: pluknet
Reviewed by: plunket, jhb
MFC After: 3 days
Unbreak no-ip and no-inet6 module builds with ipfw. For now continue to2011-09-27T13:27:17ZBjoern A. Zeebbz@FreeBSD.org2011-09-27T13:27:17Zurn:sha1:75e54d60177c67d95b41308147dc7d66088cea35
build the ip_fw_pfil.c hooks and ipfw even in case of no-ip under the
assumption that the private L2 hook (which hopefully eventually will be a
pfil hook as well) can still be useful.
Allow building the module without inet as well.
Glanced at by: jhb
MFC after: 3 days
Allow the ipfw.ko module built with a kernel to honor any IPFIREWALL_*2011-09-12T21:09:56ZJohn Baldwinjhb@FreeBSD.org2011-09-12T21:09:56Zurn:sha1:5bb3652f05028d5a171ed79fa3c40afb1ee09037
options defined in the kernel config. This more closely matches the
behavior of other modules which inherit configuration settings from the
kernel configuration during a kernel + modules build.
Reviewed by: luigi
Approved by: re (kib)
MFC after: 1 week
Do not build ip_fw_nat.c for ipfw.ko. It can be build as separate module.2011-03-29T06:42:52ZAndrey V. Elsukovae@FreeBSD.org2011-03-29T06:42:52Zurn:sha1:76f8c5c9253508293be77efe143494afc1389004
MFC after: 1 week
Now that ipfw is split into multiple files, we need2009-12-17T17:44:34ZLuigi Rizzoluigi@FreeBSD.org2009-12-17T17:44:34Zurn:sha1:8c5d93d4d48648aacade74ca9713c09d9e27ffb7
to list them all in the Makefile for the module,
otherwise it won't load due to missing symbols.
The problem only affected head with ipfw built as a module.
Reported by David Horn
After r193232 rt_tables in vnet.h are no longer indirectly dependent on2009-06-08T19:57:35ZBjoern A. Zeebbz@FreeBSD.org2009-06-08T19:57:35Zurn:sha1:8d8bc0182ea6f8f85409e76e53053487c7d23a84
the ROUTETABLES kernel option thus there is no need to include opt_route.h
anymore in all consumers of vnet.h and no longer depend on it for module
builds.
Remove the hidden include in flowtable.h as well and leave the two
explicit #includes in ip_input.c and ip_output.c.
Remove opt_mac.h generation for various kernel modules that no longer2009-06-06T17:01:44ZRobert Watsonrwatson@FreeBSD.org2009-06-06T17:01:44Zurn:sha1:d5fc25e5d6c52b306312784663ccad85923a9c76
require it.
Submitted by: pjd
move kernel ipfw-related sources to a separate directory,2009-06-05T19:22:47ZLuigi Rizzoluigi@FreeBSD.org2009-06-05T19:22:47Zurn:sha1:908e960ea6343acd9515d89d5d5696f9d8bf090c
adjust conf/files and modules' Makefiles accordingly.
No code or ABI changes so this and most of previous related
changes can be easily MFC'ed
MFC after: 5 days
Rather than using hidden includes (with cicular dependencies),2008-12-02T21:37:28ZBjoern A. Zeebbz@FreeBSD.org2008-12-02T21:37:28Zurn:sha1:4b79449e2fb67cb37c4c9f46d31791893a39ddd8
directly include only the header files needed. This reduces the
unneeded spamming of various headers into lots of files.
For now, this leaves us with very few modules including vnet.h
and thus needing to depend on opt_route.h.
Reviewed by: brooks, gnn, des, zec, imp
Sponsored by: The FreeBSD Foundation