src-test2/sys/modules/ipfw, branch release/7.2.0_cvs FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=release%2F7.2.0_cvs 2009-05-01T02:51:58Z Copy releng/7.2 to release/7.2.0 for FreeBSD 7.2-RELEASE. 2009-05-01T02:51:58Z Ken Smith kensmith@FreeBSD.org 2009-05-01T02:51:58Z urn:sha1:b205d83df7763ca1f099bce5ac12a05862a626c4 Approved by: re (implicit) This commit was manufactured to restore the state of the 7.2-RELEASE image. Link pf 4.1 to the build: 2007-07-03T12:46:08Z Max Laier mlaier@FreeBSD.org 2007-07-03T12:46:08Z urn:sha1:60ee384760646565a24320d92c5219bc052ce947 - move ftp-proxy from libexec to usr.sbin - add tftp-proxy - new altq mtag link Approved by: re (kensmith) Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point 2006-09-12T04:25:13Z Christian S.J. Peron csjp@FreeBSD.org 2006-09-12T04:25:13Z urn:sha1:d94f2a68f8c39a5abc9ba9c58e959f31bc90194d exists to allow the mandatory access control policy to properly initialize mbufs generated by the firewall. An example where this might happen is keep alive packets, or ICMP error packets in response to other packets. This takes care of kernel panics associated with un-initialize mbuf labels when the firewall generates packets. [1] I modified this patch from it's original version, the initial patch introduced a number of entry points which were programmatically equivalent. So I introduced only one. Instead, we should leverage mac_create_mbuf_netlayer() which is used for similar situations, an example being icmp_error() This will minimize the impact associated with the MFC Submitted by: mlaier [1] MFC after: 1 week This is a RELENG_6 candidate Reimplementation of world/kernel build options. For details, see: 2006-03-17T18:54:44Z Ruslan Ermilov ru@FreeBSD.org 2006-03-17T18:54:44Z urn:sha1:e1fe3dba5ce2826061f6489765be9b4a341736a9 http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) Let kmod.mk create empty opt_*.h files. 2005-11-29T19:39:04Z Ruslan Ermilov ru@FreeBSD.org 2005-11-29T19:39:04Z urn:sha1:0d86ed2bc837a77b83a3d8427d8e001acd3a9fbb obey opt_inet6.h and opt_ipsec.h in kernel build directory. 2005-11-29T17:56:11Z Hajimu UMEMOTO ume@FreeBSD.org 2005-11-29T17:56:11Z urn:sha1:8846bbf3cec07539f1694cbf7ad0f4b722761312 Requested by: hrs IPDIVERT is a module now and tell the other parts of the kernel about it. 2004-10-25T20:02:34Z Andre Oppermann andre@FreeBSD.org 2004-10-25T20:02:34Z urn:sha1:84bb6a2e75f4c8e5b901d2070c3c8da7857ae516 IPDIVERT depends on IPFIREWALL being loaded or compiled into the kernel. Document how a standalone module can be built with divert(4) support. 2004-08-26T14:35:05Z Ruslan Ermilov ru@FreeBSD.org 2004-08-26T14:35:05Z urn:sha1:f2b9afaef9050587d1cd03731977de1b8d3d8076 Revert the last change to sys/modules/ipfw/Makefile and fix a 2004-08-26T14:18:30Z Ruslan Ermilov ru@FreeBSD.org 2004-08-26T14:18:30Z urn:sha1:9bfe6d472ae31826df9c48f3cc50733dbab70dcc standalone module build in a better way. Silence from: andre MFC after: 3 days Make this compile again in the standalone and the MODULES_WITH_WORLD 2004-08-23T03:38:21Z Warner Losh imp@FreeBSD.org 2004-08-23T03:38:21Z urn:sha1:e412451de3684402662c7acef1beb7ac57baba65 environments. Chances are good that this doesn't produce a good module, but I leave the proper defaults to the dummy opt_* files to the author.