summaryrefslogtreecommitdiff
path: root/sbin/ipfw
Commit message (Expand)AuthorAgeFilesLines
* Update the IPFW man page to reflect reality. mpsafenet=0 is no longerChristian S.J. Peron2004-12-101-10/+0
* Remove a duplicate line from an apparent merge error in rev 1.63.Brooks Davis2004-11-251-1/+0
* Be more clear that "bridged" is a synonym for "layer2".Ceri Davies2004-11-031-1/+2
* Refuse to unload the ipdivert module unless the 'force' flag is given to kldu...Andre Oppermann2004-10-221-4/+4
* Add a note to the man page warning users about possible lock orderChristian S.J. Peron2004-10-091-0/+10
* Reference altq(4) instead of pf.conf(5).Brian Feldman2004-10-081-2/+2
* Commit forgotten documentation for "diverted" rules.Brian Feldman2004-10-081-1/+2
* Remove blindly-copied extra include path.Brian Feldman2004-10-031-1/+0
* Add support to IPFW for matching by TCP data length.Brian Feldman2004-10-032-0/+29
* Add the documentation for IPFW's diverted(-loopback|-output) matches.Brian Feldman2004-10-031-0/+8
* Add support to IPFW for classification based on "diverted" statusBrian Feldman2004-10-031-0/+35
* Remove accidentally-added O_DIVERTED section.Brian Feldman2004-10-031-17/+0
* Add to IPFW the ability to do ALTQ classification/tagging.Brian Feldman2004-10-033-33/+258
* Since "d" is an array of 32 bit values, it is moreChristian S.J. Peron2004-09-211-1/+1
* Prepare for 5.x soon becoming -STABLE.Ruslan Ermilov2004-09-191-8/+8
* Make 'ipfw tee' behave as inteded and designed. A tee'd packet is copiedAndre Oppermann2004-09-131-13/+2
* Currently when ipfw(8) generates the micro-instructions for rules whichChristian S.J. Peron2004-09-111-3/+3
* o Initialize a local variable and make gcc happy.Maxim Konovalov2004-09-101-0/+2
* o Restore a historical ipfw1 logamount behaviour: rules with 'log'Maxim Konovalov2004-08-291-0/+7
* Fix 'show' command for pipes and queues.Pawel Jakub Dawidek2004-08-231-1/+7
* Remove trailing whitespace and change "prisoniD" to "prisonID".Christian S.J. Peron2004-08-131-2/+2
* Add the ability to associate ipfw rules with a specific prison ID.Christian S.J. Peron2004-08-122-0/+26
* New ipfw option "antispoof":Andre Oppermann2004-08-092-3/+49
* Extend versrcreach by checking against the rt_flags for RTF_REJECT andAndre Oppermann2004-07-211-2/+2
* Mechanically kill hard sentence breaks.Ruslan Ermilov2004-07-021-38/+56
* Fixed a bug spotted by compiling with -Wall.Ruslan Ermilov2004-06-101-1/+1
* Introduce a new feature to IPFW2: lookup tables. These are usefulRuslan Ermilov2004-06-092-4/+169
* o Move NEED1 macro to the top of the source file.Christian S.J. Peron2004-06-021-6/+6
* o Fix usage example.Maxim Konovalov2004-05-231-1/+1
* Remove spurious semicolons.Stefan Farfeleder2004-05-181-2/+2
* Remove redundant sanity check before add_mac() when addingChristian S.J. Peron2004-05-091-2/+0
* Add the option versrcreach to verify that a valid route to theAndre Oppermann2004-04-232-2/+28
* o Fix an incorrect parsing of 0.0.0.0/0 expression.Maxim Konovalov2004-04-091-1/+1
* Backout revision 1.140; it seems that the previous version is clearCeri Davies2004-03-271-2/+1
* o The lenght of the port list is limited to 30 entries in ipfw2 not to 15.Maxim Konovalov2004-03-261-1/+1
* Clarify the description of the "established" option.Ceri Davies2004-03-221-1/+2
* o Pass a correct argument to errx(3).Maxim Konovalov2004-01-241-1/+1
* grammarMike Makonnen2004-01-231-6/+6
* o -c (compact) flag is ipfw2 feature.Maxim Konovalov2004-01-151-0/+2
* o -f (force) in conjunction with -p (preprocessor) is ipfw2 feature.Maxim Konovalov2004-01-151-0/+3
* o Legitimate -f (force) flags for -p (preprocessor) case.Maxim Konovalov2003-12-242-4/+9
* Add a -b flag to /sbin/ipfw to print only action and comment for eachLuigi Rizzo2003-12-122-2/+24
* Include opt_ipsec.h so IPSEC/FAST_IPSEC is defined and the appropriateSam Leffler2003-12-021-1/+8
* Replace the if_name and if_unit members of struct ifnet with new membersBrooks Davis2003-10-311-15/+5
* remove include of route.h now that ip_dummynet.h no longer exposesSam Leffler2003-10-031-1/+0
* fix typo: s/sytem/system/Ralf S. Engelschall2003-09-261-1/+1
* Document the alternate way of matching MAC addresses: by a bitmask.Peter Pentchev2003-09-101-2/+22
* Apply a bandaid to get this working on sparc64 again; the introductionThomas Moestl2003-09-041-4/+4
* Check an arguments count before proceed in sysctl_handler().Maxim Konovalov2003-09-021-1/+1
* Add a note that net.inet.ip.fw.autoinc_step is ipfw2-specificLuigi Rizzo2003-07-221-0/+4