src/sbin, branch upstream/11.0.0

Merge from stable/11 r304079:

2016-08-14T16:32:23Z

Restore "nat global" support. Now zero value of arg1 used to specify "tablearg", use the old "tablearg" value for "nat global". Introduce new macro IP_FW_NAT44_GLOBAL to replace hardcoded magic number to specify "nat global". Also replace 65535 magic number with corresponding macro. Fix typo in comments. PR: 211256 Approved by: re (kib)

MFC r303842:

2016-08-11T10:41:19Z

Fix constructing of setdscp opcode with tablearg keyword. setdscp's argument can have zero value that conflicts with IP_FW_TARG value. Always set high-order bit if parser doesn't find tablearg keyword. MFC r303845: Fix formatting of setfib opcode. Zero fib is correct value and it conflicts with IP_FW_TARG. Use bprint_uint_arg() only when opcode contains IP_FW_TARG, otherwise just print numeric value with cleared high-order bit. Approved by: re (kib)

MFC r303760:

2016-08-09T03:39:21Z

Fix a regression in pf.conf while parsing the 'interval' keyword. The bug was introduced by r287009. PR: 210924 Submitted by: kp@ Sponsored by: Rubicon Communications (Netgate) Pointy hat to: loos Approved by: re (gjb)

MFH (r303289): update example section

2016-08-05T15:30:05Z

PR: 211361 Approved by: re (gjb)

MFC r303615:

2016-08-04T11:26:52Z

An old tables implementation had all tables preallocated, so when user did `ipfw table N flush` it always worked, but now when table N doesn't exist the kernel returns ESRCH error. This isn't fatal error for flush and destroy commands. Do not call err(3) when errno is equal to ESRCH. Also warn only when quiet mode isn't enabled. This fixes a regression in behavior, when old rules are loaded from file. Also use correct value for switch in the table_swap(). Reported by: Kevin Oberman Approved by: re (kib)

MFC r302561,302565:

2016-07-18T04:16:53Z

Flush buffer after output. This fixes adding new data to already printed flows. PR: 210882 Approved by: re (kib)

Add new unmount(2) flag, MNT_NONBUSY, to check whether there are

2016-07-07T09:03:57Z

any open vnodes before proceeding. Make autounmound(8) use this flag. Without it, even an unsuccessfull unmount causes filesystem flush, which interferes with normal operation. Reviewed by: kib@ Approved by: re (gjb@) MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D7047

Fix a regression introduced on revision r271909, when using argument -g

2016-07-05T07:01:42Z

or several hops we have segmentation fault because we overwrite the same structure to store information for host and gateway. Submitted by: Maryse Levavasseur Reworked by: hrs Approved by: re (hrs) Differential Revision: https://reviews.freebsd.org/D6980

Hide warning about non-existent lookup tables and informational messages

2016-07-02T11:54:20Z

about modified table entry when quied mode enabled. Approved by: re (hrs) Obtained from: Yandex LLC

Do not coredump if the packet is too long in the global (non-interface

2016-06-28T20:10:30Z

associated) instance. The result is that the packet is dropped without an indication that smaller MTU is advisable, which is not optimal, but better than a NULL pointer deref. Approved by: re (glebius)