src/sys/modules/ipfw, branch releng/8.1FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=releng%2F8.12010-03-24T15:11:10ZMFC r200636, list all files needed to build the ipfw module2010-03-24T15:11:10ZLuigi Rizzoluigi@FreeBSD.org2010-03-24T15:11:10Zurn:sha1:183fd3c950efaafb6509dd17724ff518728caab6
Submitted by: Alexander Wittig
After r193232 rt_tables in vnet.h are no longer indirectly dependent on2009-06-08T19:57:35ZBjoern A. Zeebbz@FreeBSD.org2009-06-08T19:57:35Zurn:sha1:8d8bc0182ea6f8f85409e76e53053487c7d23a84
the ROUTETABLES kernel option thus there is no need to include opt_route.h
anymore in all consumers of vnet.h and no longer depend on it for module
builds.
Remove the hidden include in flowtable.h as well and leave the two
explicit #includes in ip_input.c and ip_output.c.
Remove opt_mac.h generation for various kernel modules that no longer2009-06-06T17:01:44ZRobert Watsonrwatson@FreeBSD.org2009-06-06T17:01:44Zurn:sha1:d5fc25e5d6c52b306312784663ccad85923a9c76
require it.
Submitted by: pjd
move kernel ipfw-related sources to a separate directory,2009-06-05T19:22:47ZLuigi Rizzoluigi@FreeBSD.org2009-06-05T19:22:47Zurn:sha1:908e960ea6343acd9515d89d5d5696f9d8bf090c
adjust conf/files and modules' Makefiles accordingly.
No code or ABI changes so this and most of previous related
changes can be easily MFC'ed
MFC after: 5 days
Rather than using hidden includes (with cicular dependencies),2008-12-02T21:37:28ZBjoern A. Zeebbz@FreeBSD.org2008-12-02T21:37:28Zurn:sha1:4b79449e2fb67cb37c4c9f46d31791893a39ddd8
directly include only the header files needed. This reduces the
unneeded spamming of various headers into lots of files.
For now, this leaves us with very few modules including vnet.h
and thus needing to depend on opt_route.h.
Reviewed by: brooks, gnn, des, zec, imp
Sponsored by: The FreeBSD Foundation
Link pf 4.1 to the build:2007-07-03T12:46:08ZMax Laiermlaier@FreeBSD.org2007-07-03T12:46:08Zurn:sha1:60ee384760646565a24320d92c5219bc052ce947
- move ftp-proxy from libexec to usr.sbin
- add tftp-proxy
- new altq mtag link
Approved by: re (kensmith)
Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point2006-09-12T04:25:13ZChristian S.J. Peroncsjp@FreeBSD.org2006-09-12T04:25:13Zurn:sha1:d94f2a68f8c39a5abc9ba9c58e959f31bc90194d
exists to allow the mandatory access control policy to properly initialize
mbufs generated by the firewall. An example where this might happen is keep
alive packets, or ICMP error packets in response to other packets.
This takes care of kernel panics associated with un-initialize mbuf labels
when the firewall generates packets.
[1] I modified this patch from it's original version, the initial patch
introduced a number of entry points which were programmatically
equivalent. So I introduced only one. Instead, we should leverage
mac_create_mbuf_netlayer() which is used for similar situations,
an example being icmp_error()
This will minimize the impact associated with the MFC
Submitted by: mlaier [1]
MFC after: 1 week
This is a RELENG_6 candidate
Reimplementation of world/kernel build options. For details, see:2006-03-17T18:54:44ZRuslan Ermilovru@FreeBSD.org2006-03-17T18:54:44Zurn:sha1:e1fe3dba5ce2826061f6489765be9b4a341736a9
http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html
The src.conf(5) manpage is to follow in a few days.
Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)
Let kmod.mk create empty opt_*.h files.2005-11-29T19:39:04ZRuslan Ermilovru@FreeBSD.org2005-11-29T19:39:04Zurn:sha1:0d86ed2bc837a77b83a3d8427d8e001acd3a9fbbobey opt_inet6.h and opt_ipsec.h in kernel build directory.2005-11-29T17:56:11ZHajimu UMEMOTOume@FreeBSD.org2005-11-29T17:56:11Zurn:sha1:8846bbf3cec07539f1694cbf7ad0f4b722761312
Requested by: hrs