<feed xmlns='http://www.w3.org/2005/Atom'>
<title>src/sys/modules/pf, branch releng/7.0</title>
<subtitle>FreeBSD source tree</subtitle>
<id>https://cgit-dev.freebsd.org/src/atom?h=releng%2F7.0</id>
<link rel='self' href='https://cgit-dev.freebsd.org/src/atom?h=releng%2F7.0'/>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/'/>
<updated>2007-07-03T12:46:08Z</updated>
<entry>
<title>Link pf 4.1 to the build:</title>
<updated>2007-07-03T12:46:08Z</updated>
<author>
<name>Max Laier</name>
<email>mlaier@FreeBSD.org</email>
</author>
<published>2007-07-03T12:46:08Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=60ee384760646565a24320d92c5219bc052ce947'/>
<id>urn:sha1:60ee384760646565a24320d92c5219bc052ce947</id>
<content type='text'>
 - move ftp-proxy from libexec to usr.sbin
 - add tftp-proxy
 - new altq mtag link

Approved by:	re (kensmith)
</content>
</entry>
<entry>
<title>Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point</title>
<updated>2006-09-12T04:25:13Z</updated>
<author>
<name>Christian S.J. Peron</name>
<email>csjp@FreeBSD.org</email>
</author>
<published>2006-09-12T04:25:13Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=d94f2a68f8c39a5abc9ba9c58e959f31bc90194d'/>
<id>urn:sha1:d94f2a68f8c39a5abc9ba9c58e959f31bc90194d</id>
<content type='text'>
exists to allow the mandatory access control policy to properly initialize
mbufs generated by the firewall. An example where this might happen is keep
alive packets, or ICMP error packets in response to other packets.

This takes care of kernel panics associated with un-initialize mbuf labels
when the firewall generates packets.

[1] I modified this patch from it's original version, the initial patch
    introduced a number of entry points which were programmatically
    equivalent. So I introduced only one. Instead, we should leverage
    mac_create_mbuf_netlayer() which is used for similar situations,
    an example being icmp_error()

    This will minimize the impact associated with the MFC

Submitted by:	mlaier [1]
MFC after:	1 week

This is a RELENG_6 candidate
</content>
</entry>
<entry>
<title>Reimplementation of world/kernel build options.  For details, see:</title>
<updated>2006-03-17T18:54:44Z</updated>
<author>
<name>Ruslan Ermilov</name>
<email>ru@FreeBSD.org</email>
</author>
<published>2006-03-17T18:54:44Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=e1fe3dba5ce2826061f6489765be9b4a341736a9'/>
<id>urn:sha1:e1fe3dba5ce2826061f6489765be9b4a341736a9</id>
<content type='text'>
http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html

The src.conf(5) manpage is to follow in a few days.

Brought to you by:	imp, jhb, kris, phk, ru (all bugs are mine)
</content>
</entry>
<entry>
<title>The `pf' and `pflog' sources do not depend on DEV_PF or DEV_PFLOG,</title>
<updated>2006-03-09T15:48:45Z</updated>
<author>
<name>Yaroslav Tykhiy</name>
<email>ytykhiy@gmail.com</email>
</author>
<published>2006-03-09T15:48:45Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=10dbb44a9f290c3557840dc72cdeb6e72477c1fa'/>
<id>urn:sha1:10dbb44a9f290c3557840dc72cdeb6e72477c1fa</id>
<content type='text'>
which is normal for own files of a device driver.

DEV_FOO should be used if an unrelated kernel file needs to know of
the `foo' driver's static presence.  Obviously, module source files
should never use DEV_*.
</content>
</entry>
<entry>
<title>Make pflog a seperate module.  As a result pflog_packet() becomes a function</title>
<updated>2006-02-05T17:17:32Z</updated>
<author>
<name>Max Laier</name>
<email>mlaier@FreeBSD.org</email>
</author>
<published>2006-02-05T17:17:32Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=5bba2114d0aeb3adc36f08ea8c5a0712f29c2e76'/>
<id>urn:sha1:5bba2114d0aeb3adc36f08ea8c5a0712f29c2e76</id>
<content type='text'>
pointer that is declared in pf_ioctl.c

Requested by:	yar (as part of the module build reorg)
MFC after:	1 week
X-MFC with:	yar's module reorg
</content>
</entry>
<entry>
<title>Let modules use the kernel's opt_*.h files if built along with</title>
<updated>2005-10-14T23:30:17Z</updated>
<author>
<name>Yaroslav Tykhiy</name>
<email>ytykhiy@gmail.com</email>
</author>
<published>2005-10-14T23:30:17Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=822923447e454b30d310cb46903c9ddeca9f0a7a'/>
<id>urn:sha1:822923447e454b30d310cb46903c9ddeca9f0a7a</id>
<content type='text'>
the kernel by wrapping all targets for fake opt_*.h files in
.if defined(KERNBUILDDIR).  Thus, such fake files won't be
created at all if modules are built with the kernel.

Some modules undergo cleanup like removing unused or unneeded
options or .h files, without which they wouldn't build this way
or the other.

Reviewed by:	ru
Tested by:	no binary changes in modules built alone
Tested on:	i386 sparc64 amd64
</content>
</entry>
<entry>
<title>Let kmod.mk create an empty .h file.</title>
<updated>2005-06-05T05:30:37Z</updated>
<author>
<name>Ruslan Ermilov</name>
<email>ru@FreeBSD.org</email>
</author>
<published>2005-06-05T05:30:37Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=50fc7005c20823fdf77128bdf75390a3450192d0'/>
<id>urn:sha1:50fc7005c20823fdf77128bdf75390a3450192d0</id>
<content type='text'>
</content>
</entry>
<entry>
<title>NOINET6 -&gt; NO_INET6</title>
<updated>2004-12-21T10:49:29Z</updated>
<author>
<name>Ruslan Ermilov</name>
<email>ru@FreeBSD.org</email>
</author>
<published>2004-12-21T10:49:29Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=731db6a428d2389caf3795ff50f1895f04b80899'/>
<id>urn:sha1:731db6a428d2389caf3795ff50f1895f04b80899</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Removed -Wall from CFLAGS.</title>
<updated>2004-09-01T07:39:12Z</updated>
<author>
<name>Ruslan Ermilov</name>
<email>ru@FreeBSD.org</email>
</author>
<published>2004-09-01T07:39:12Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=5eadd7403e8fb0def69f6baae24594ca2e5e9bb7'/>
<id>urn:sha1:5eadd7403e8fb0def69f6baae24594ca2e5e9bb7</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Get rid of the RANDOM_IP_ID option and make it a sysctl.  NetBSD</title>
<updated>2004-08-14T15:32:40Z</updated>
<author>
<name>David Malone</name>
<email>dwmalone@FreeBSD.org</email>
</author>
<published>2004-08-14T15:32:40Z</published>
<link rel='alternate' type='text/html' href='https://cgit-dev.freebsd.org/src/commit/?id=1f44b0a1b539198ce55bf97e73d51ded20a55ab4'/>
<id>urn:sha1:1f44b0a1b539198ce55bf97e73d51ded20a55ab4</id>
<content type='text'>
have already done this, so I have styled the patch on their work:

        1) introduce a ip_newid() static inline function that checks
        the sysctl and then decides if it should return a sequential
        or random IP ID.

        2) named the sysctl net.inet.ip.random_id

        3) IPv6 flow IDs and fragment IDs are now always random.
        Flow IDs and frag IDs are significantly less common in the
        IPv6 world (ie. rarely generated per-packet), so there should
        be smaller performance concerns.

The sysctl defaults to 0 (sequential IP IDs).

Reviewed by:	andre, silby, mlaier, ume
Based on:	NetBSD
MFC after:	2 months
</content>
</entry>
</feed>
