src/contrib/ipfilter/tools/ipnat.c, branch main

ipfilter: Move userland bits to sbin

2021-12-20T14:16:33Z

Through fixes and improvements our ipfilter sources have diverged enough to warrant move from contrib into sbin/ipf. Now that I'm planning on implementing MSS clamping as in iptables it makes more sense to move ipfilter to sbin. This is the second of three commits of the ipfilter move. Suggested by glebius on two occaions. Suggested by and discussed with: glebius Reviewed by: glebius, kp (for #network) MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D33510

Retire the K&R/STD C __P prototype declarations.

2021-02-02T01:19:15Z

In the old days when K&R C and STD C were each in use a workaround (read hack) was required to allow the same code to work on each without modification. All C compilers support STD C. We can finally put the __P prototype to rest. MFC after: 1 week

ipfilter: remove duplicate definition of 'thishost'

2020-03-29T02:26:58Z

thishost is already defined in lib/initparse.c; no need for this one. This fixes the ipfilter build with -fno-common. -fno-common will become the default in GCC10/LLVM11. MFC after: 3 days

ipfilter #ifdef cleanup.

2019-02-03T05:25:49Z

Remove #ifdefs for ancient and irrelevant operating systems from ipfilter. When ipfilter was written the UNIX and UNIX-like systems in use were diverse and plentiful. IRIX, Tru64 (OSF/1) don't exist any more. OpenBSD removed ipfilter shortly after the first time the ipfilter license terms changed in the early 2000's. ipfilter on AIX, HP/UX, and Linux never really caught on. Removal of code for operating systems that ipfilter will never run on again will simplify the code making it easier to fix bugs, complete partially implemented features, and extend ipfilter. Unsupported previous version FreeBSD code and some older NetBSD code has also been removed. What remains is supported FreeBSD, NetBSD, and illumos. FreeBSD and NetBSD have collaborated exchanging patches, while illumos has expressed willingness to have their ipfilter updated to 5.1.2, provided their zone-specific updates to their ipfilter are merged (which are of interest to FreeBSD to allow control of ipfilters in jails from the global zone). Reviewed by: glebius@ MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D19006

Stop including if_var.h from userland.

2015-04-06T09:42:23Z

Update ipfilter 4.1.28 --> 5.1.2.

2013-09-06T23:11:19Z

Approved by: glebius (mentor) BSD Licensed by: Darren Reed (author)

As per the developers handbook (5.3.1 step 1), prepare the vendor trees for

2013-07-19T05:41:57Z

import of new ipfilter vendor sources by flattening them. To keep the tags consistent with dist, the tags are also flattened. Approved by: glebius (Mentor)

Pullup IPFilter 4.1.28 from the vendor branch into HEAD.

2007-10-18T21:52:14Z

MFC after: 7 days

Import IPFilter 4.1.28

2007-10-18T21:42:51Z

Merge IPFilter 4.1.23 back to HEAD

2007-06-04T02:54:36Z

See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13