summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_fw.h
Commit message (Expand)AuthorAgeFilesLines
* Add support for IPv6 to ipfw fwd:Bjoern A. Zeeb2011-08-201-0/+10
* Add new rule actions "call" and "return" to ipfw. They makeAndrey V. Elsukov2011-06-291-0/+8
* - Rewrite functions that copyin/out NAT configuration, so that theyGleb Smirnoff2011-04-191-2/+0
* The first customer of the SO_USER_COOKIE option:Luigi Rizzo2010-11-121-0/+3
* + implement (two lines) the kernel side of 'lookup dscp N' to use theLuigi Rizzo2010-03-151-6/+9
* Bring in the most recent version of ipfw and dummynet, developedLuigi Rizzo2010-03-021-10/+12
* merge code from ipfw3-head to reduce contention on the ipfw lockLuigi Rizzo2009-12-221-1/+1
* Start splitting ip_fw2.c and ip_fw.h into smaller components.Luigi Rizzo2009-12-151-129/+0
* change the type of the opcode from enum *:8 to u_int8_tLuigi Rizzo2009-12-021-1/+1
* Fix ipfw's initialization functions to get the correct order of evaluationJulian Elischer2009-08-211-2/+4
* Remove unused VNET_SET() and related macros; only VNET_GET() isRobert Watson2009-07-161-4/+4
* Build on Jeff Roberson's linker-set based dynamic per-CPU allocatorRobert Watson2009-07-141-82/+9
* Close long existed race with net.inet.ip.fw.one_pass = 0:Oleg Bulyzhin2009-06-091-9/+13
* Several ipfw options and actions use a 16-bit argument to indicateLuigi Rizzo2009-06-051-5/+17
* More cleanup in preparation of ipfw relocation (no actual code change):Luigi Rizzo2009-06-051-8/+0
* Make indentation more uniform accross vnet container structs.Marko Zec2009-05-021-27/+27
* Permit buiding kernels with options VIMAGE, restricted to only a singleMarko Zec2009-04-301-2/+0
* First pass at separating per-vnet initializer functionsMarko Zec2009-04-061-0/+2
* Implement an ipfw action to reassemble ip packets: reass.Paolo Pisati2009-04-011-1/+3
* fw_debug has been unused for ages, so remove it from the listLuigi Rizzo2009-03-021-1/+1
* remove dependency on eventhandler.h, we only need a forward declarationLuigi Rizzo2009-02-161-1/+2
* Second round of putting global variables, which were virtualizedBjoern A. Zeeb2008-12-131-1/+1
* Conditionally compile out V_ globals while instantiating the appropriateMarko Zec2008-12-101-5/+8
* Fix content and spelling of comment on _ipfw_insn.len -- a count ofRobert Watson2008-10-101-1/+1
* Step 1.5 of importing the network stack virtualization infrastructureMarko Zec2008-10-021-0/+81
* Export IPFW_TABLES_MAX value for compiled in defaults.Roman Kurakin2008-09-211-1/+6
* Make the commet for the default rule number more clear.Roman Kurakin2008-09-141-1/+4
* Export the IPFW_DEFAULT_RULE outside ip_fw2.c. This number in not onlyRoman Kurakin2008-09-061-0/+5
* Add code to allow the system to handle multiple routing tables.Julian Elischer2008-05-091-0/+4
* Fix a comment typo.Robert Watson2008-04-291-1/+1
* Move ipfw's nat code into its own kld: ipfw_nat.Paolo Pisati2008-02-291-0/+32
* Hide ipfw internal data structures behind IPFW_INTERNAL rather thanRobert Watson2008-01-251-0/+11
* Add support for filtering on Routing Header Type 0 andBjoern A. Zeeb2007-05-041-0/+2
* Summer of Code 2005: improve libalias - part 2 of 2Paolo Pisati2006-12-291-0/+60
* comply with style policeJulian Elischer2006-08-181-1/+0
* Allow ipfw to forward to a destination that is specified by a table.Julian Elischer2006-08-171-0/+2
* Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9).Oleg Bulyzhin2006-05-241-0/+6
* Reintroduce net.inet6.ip6.fw.enable sysctl to dis/enable the ipv6 processingMax Laier2006-05-121-0/+3
* When sending a packet from dummynet, indicate that we're forwardingRuslan Ermilov2006-02-141-2/+0
* Add a new feature for optimizining ipfw rulesets - substitution of theGleb Smirnoff2005-12-131-0/+2
* Garbage-collect now unused struct _ipfw_insn_pipe and flush_pipe_ptrs(),Gleb Smirnoff2005-11-291-15/+0
* * Add dynamic sysctl for net.inet6.ip6.fw.Bjoern A. Zeeb2005-08-131-0/+5
* Add support for IPv4 only rules to IPFW2 now that it supports IPv6 as well.Max Laier2005-06-031-0/+2
* IPFW version 2 is the only option in HEAD and RELENG_5.Gleb Smirnoff2005-05-041-1/+0
* Add IPv6 support to IPFW and Dummynet.Brooks Davis2005-04-181-0/+67
* Add a ng_ipfw node, implementing a quick and simple interface betweenGleb Smirnoff2005-02-051-0/+7
* o Clean up interface between ip_fw_chk() and its callers:Gleb Smirnoff2005-01-141-4/+12
* /* -> /*- for license, minor formatting changesWarner Losh2005-01-071-1/+1
* Add support to IPFW for matching by TCP data length.Brian Feldman2004-10-031-0/+1
* Add support to IPFW for classification based on "diverted" statusBrian Feldman2004-10-031-3/+6