src/sys/modules/ipfw, branch release/9.3.0FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=release%2F9.3.02012-11-22T12:11:32Z Partially merge r240494, which moved netinet/ipfw to netpfil/ipfw,2012-11-22T12:11:32ZGleb Smirnoffglebius@FreeBSD.org2012-11-22T12:11:32Zurn:sha1:f467fffdb9b2d6e3cc680ea56cb9e27d8375b9e1
to make it easier to merge ipfw commits back to stable/9.
MFC r227085:2011-11-06T17:31:57ZBjoern A. Zeebbz@FreeBSD.org2011-11-06T17:31:57Zurn:sha1:e9d5f270969a65647144f2454c4f50e39ca21d96
Always use the opt_*.h options for ipfw.ko, not just when
compiled into the kernel.
Do not try to build the module in case of no INET support but
keep #error calls for now in case we would compile it into the
kernel.
This should fix an issue where the module would fail to enable
IPv6 support from the rc framework, but also other INET and INET6
parts being silently compiled out without giving a warning in the
module case.
While here garbage collect unneeded opt_*.h includes.
opt_ipdn.h is not used anywhere but we need to leave the DUMMYNET
entry in options for conditional inclusion in kernel so keep the
file with the same name.
Reported by: pluknet
Reviewed by: plunket, jhb
Approved by: re (kib)
MFC r225793:2011-10-04T11:02:48ZBjoern A. Zeebbz@FreeBSD.org2011-10-04T11:02:48Zurn:sha1:1d07632de4fe5cf42fb48bc42e320d8fcc5a778a
Unbreak no-ip and no-inet6 module builds with ipfw. For now continue to
build the ip_fw_pfil.c hooks and ipfw even in case of no-ip under the
assumption that the private L2 hook (which hopefully eventually will be a
pfil hook as well) can still be useful.
Allow building the module without inet as well.
Approved by: re (kib)
Allow the ipfw.ko module built with a kernel to honor any IPFIREWALL_*2011-09-12T21:09:56ZJohn Baldwinjhb@FreeBSD.org2011-09-12T21:09:56Zurn:sha1:5bb3652f05028d5a171ed79fa3c40afb1ee09037
options defined in the kernel config. This more closely matches the
behavior of other modules which inherit configuration settings from the
kernel configuration during a kernel + modules build.
Reviewed by: luigi
Approved by: re (kib)
MFC after: 1 week
Do not build ip_fw_nat.c for ipfw.ko. It can be build as separate module.2011-03-29T06:42:52ZAndrey V. Elsukovae@FreeBSD.org2011-03-29T06:42:52Zurn:sha1:76f8c5c9253508293be77efe143494afc1389004
MFC after: 1 week
Now that ipfw is split into multiple files, we need2009-12-17T17:44:34ZLuigi Rizzoluigi@FreeBSD.org2009-12-17T17:44:34Zurn:sha1:8c5d93d4d48648aacade74ca9713c09d9e27ffb7
to list them all in the Makefile for the module,
otherwise it won't load due to missing symbols.
The problem only affected head with ipfw built as a module.
Reported by David Horn
After r193232 rt_tables in vnet.h are no longer indirectly dependent on2009-06-08T19:57:35ZBjoern A. Zeebbz@FreeBSD.org2009-06-08T19:57:35Zurn:sha1:8d8bc0182ea6f8f85409e76e53053487c7d23a84
the ROUTETABLES kernel option thus there is no need to include opt_route.h
anymore in all consumers of vnet.h and no longer depend on it for module
builds.
Remove the hidden include in flowtable.h as well and leave the two
explicit #includes in ip_input.c and ip_output.c.
Remove opt_mac.h generation for various kernel modules that no longer2009-06-06T17:01:44ZRobert Watsonrwatson@FreeBSD.org2009-06-06T17:01:44Zurn:sha1:d5fc25e5d6c52b306312784663ccad85923a9c76
require it.
Submitted by: pjd
move kernel ipfw-related sources to a separate directory,2009-06-05T19:22:47ZLuigi Rizzoluigi@FreeBSD.org2009-06-05T19:22:47Zurn:sha1:908e960ea6343acd9515d89d5d5696f9d8bf090c
adjust conf/files and modules' Makefiles accordingly.
No code or ABI changes so this and most of previous related
changes can be easily MFC'ed
MFC after: 5 days
Rather than using hidden includes (with cicular dependencies),2008-12-02T21:37:28ZBjoern A. Zeebbz@FreeBSD.org2008-12-02T21:37:28Zurn:sha1:4b79449e2fb67cb37c4c9f46d31791893a39ddd8
directly include only the header files needed. This reduces the
unneeded spamming of various headers into lots of files.
For now, this leaves us with very few modules including vnet.h
and thus needing to depend on opt_route.h.
Reviewed by: brooks, gnn, des, zec, imp
Sponsored by: The FreeBSD Foundation