src-test2/sys/modules/pfsync, branch release/10.0.0 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=release%2F10.0.0 2012-09-14T11:51:49Z o Create directory sys/netpfil, where all packet filters should 2012-09-14T11:51:49Z Gleb Smirnoff glebius@FreeBSD.org 2012-09-14T11:51:49Z urn:sha1:3b3a8eb937bf8045231e8364bfd1b94cd4a95979 reside, and move there ipfw(4) and pf(4). o Move most modified parts of pf out of contrib. Actual movements: sys/contrib/pf/net/*.c -> sys/netpfil/pf/ sys/contrib/pf/net/*.h -> sys/net/ contrib/pf/pfctl/*.c -> sbin/pfctl contrib/pf/pfctl/*.h -> sbin/pfctl contrib/pf/pfctl/pfctl.8 -> sbin/pfctl contrib/pf/pfctl/*.4 -> share/man/man4 contrib/pf/pfctl/*.5 -> share/man/man5 sys/netinet/ipfw -> sys/netpfil/ipfw The arguable movement is pf/net/*.h -> sys/net. There are future plans to refactor pf includes, so I decided not to break things twice. Not modified bits of pf left in contrib: authpf, ftp-proxy, tftp-proxy, pflogd. The ipfw(4) movement is planned to be merged to stable/9, to make head and stable match. Discussed with: bz, luigi In FreeBSD we always have bpf(4) API, either real or stub. No need 2011-12-22T18:31:47Z Gleb Smirnoff glebius@FreeBSD.org 2011-12-22T18:31:47Z urn:sha1:538c3a7cd0005d00237a2ef4a371ac9ea0af08fd in detecting presense of 'device bpf'. Update packet filter (pf) code to OpenBSD 4.5. 2011-06-28T11:57:25Z Bjoern A. Zeeb bz@FreeBSD.org 2011-06-28T11:57:25Z urn:sha1:e0bfbfce7922dd3c28eb072b599c6bb8f65f039e You need to update userland (world and ports) tools to be in sync with the kernel. Submitted by: mlaier Submitted by: eri Prepare for pf 3.5 import: 2004-06-16T22:59:06Z Max Laier mlaier@FreeBSD.org 2004-06-16T22:59:06Z urn:sha1:a306c902b8a24b04a2ecece767f48182fc31be1a - Remove pflog and pfsync modules. Things will change in such a fashion that there will be one module with pf+pflog that can be loaded into GENERIC without problems (which is what most people want). pfsync is no longer possible as a module. - Add multicast address for in-kernel multicast pfsync protocol. Protocol glue will follow once the import is done. - Add one more mbuf tag Make pf* modules respect NOINET6 from make.conf(5) in order to build them 2004-04-06T15:12:50Z Max Laier mlaier@FreeBSD.org 2004-04-06T15:12:50Z urn:sha1:1ffe5d762b1dba2d7bf54e412484286ccd02d1d4 for INET6-less kernel. Requested by: many Approved by: bms(mentor) Tweak existing header and other build infrastructure to be able to build 2004-02-26T03:53:54Z Max Laier mlaier@FreeBSD.org 2004-02-26T03:53:54Z urn:sha1:cc5934f5afcc7d243b43ff83f093676556c2488d pf/pflog/pfsync as modules. Do not list them in NOTES or modules/Makefile (i.e. do not connect it to any (automatic) builds - yet). Approved by: bms(mentor)