summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_fw.c
Commit message (Expand)AuthorAgeFilesLines
* Fix a potential panic when deleting ipfw rules and packets areLuigi Rizzo1998-10-141-1/+5
* Restore default behaviour for skipto rules, i.e. jump to the first ruleLuigi Rizzo1998-10-061-2/+7
* remove a diagnostic message and fix statistics when using ipfw onLuigi Rizzo1998-09-181-2/+11
* bring DUMMYNET and BRIDGE support into -stableLuigi Rizzo1998-09-171-41/+193
* MFC (rev 1.93): don't log ICMP type and subtype for non-zero offsetAlexander Langer1998-07-181-2/+5
* clean up some oversights on the last commitsJulian Elischer1998-07-061-3/+4
* MFC: merge in some minor cleanups for IP divertJulian Elischer1998-07-011-26/+25
* MFC: add option to fix divert infinite loopJulian Elischer1998-06-051-2/+37
* MFC (rev 1.79): Allow ICMP unreachable messages to be sent in responseAlexander Langer1998-03-291-4/+21
* MFC: correct handling of fragmented packets.Alexander Langer1998-02-131-3/+35
* MFC (rev 1.75): suppress display of TCP/UDP port numbers for fragmentedAlexander Langer1998-02-071-5/+13
* MFC (rev 1.70): missing parens.Alexander Langer1998-01-051-3/+3
* MFC (rev 1.69): ICMP type fix.Alexander Langer1998-01-051-2/+3
* MFC (rev 1.67): restore commented out logging.Alexander Langer1997-12-281-7/+8
* Obtained from: Whistle production treeJulian Elischer1997-12-191-9/+10
* Bring in compile time override of default rule from -current.Alexander Langer1997-11-221-8/+16
* Merge from -current: fixed logging of verbose limited packets.Alexander Langer1997-08-231-4/+5
* Merge from -current: ensure termination of interface name.Alexander Langer1997-08-061-1/+2
* YACFCJulian Elischer1997-06-201-198/+386
* Merge from -current: create default rule with IP_FW_F_IN | IP_FW_F_OUT.Alexander Langer1997-05-061-1/+2
* merge improvements from -currentAdam David1997-01-291-3/+5
* Removed nested include if <sys/socket.h> from <net/if.h> andBruce Evans1996-10-121-1/+2
* Log the interface name which received the packet.Alexander Langer1996-10-121-8/+9
* Fix the visibility of the sysctl variables.Alexander Langer1996-08-311-5/+5
* Completely rewrite handling of protocol field for firewalls, things arePaul Traina1996-08-131-90/+43
* Filter by IP protocol.Alexander Langer1996-08-051-21/+36
* Switch back to logging accepted packets with the text "Allow" insteadAlexander Langer1996-07-141-2/+2
* Adding changes to ipfw and the kernel to support ip packet diversion..Julian Elischer1996-07-101-37/+89
* Functionality for IPFIREWALL_VERBOSE logging:Nate Williams1996-07-091-1/+7
* Reject rules which try to mix ports with incompatible protocols.Alexander Langer1996-06-291-1/+11
* Allow fragment checking to work with specific protocols.Alexander Langer1996-06-251-16/+26
* Use IPFIREWALL_MODULE instead of ACTUALLY_LKM_NOT_KERNEL to indicateBruce Evans1996-06-231-4/+4
* Fix chain numbering bug when the highest line number installed >= 65435Alexander Langer1996-06-171-16/+27
* Don't try to include opt_ipfw.h in LKMsGary Palmer1996-06-131-1/+3
* Convert ipfw to use opt_ipfw.hGary Palmer1996-06-121-1/+4
* Big sweep over ipfw, picking up where Poul left off:Alexander Langer1996-06-091-66/+109
* Clean up various compiler warnings. Most (if not all) were benignGary Palmer1996-05-081-3/+8
* Several locations in sys/netinet/ip_fw.c are lacking or incorrectlyPoul-Henning Kamp1996-05-061-14/+18
* Add feature for tcp "established".Poul-Henning Kamp1996-04-031-11/+16
* Fix wrong logic, certain rules never matched.Poul-Henning Kamp1996-02-261-2/+2
* Make getsockopt() capable of handling more than one mbuf worth of data.Poul-Henning Kamp1996-02-241-17/+92
* The new firewall functionality:Poul-Henning Kamp1996-02-241-45/+49
* I overlooked this one.Poul-Henning Kamp1996-02-231-1/+6
* Big sweep over the IPFIREWALL and IPACCT code.Poul-Henning Kamp1996-02-231-718/+289
* Make the sorting of IPFW rules an option. You don't want it to sort them.Poul-Henning Kamp1996-02-031-1/+3
* Completed function declarations and/or added prototypes.Bruce Evans1995-12-021-1/+12
* New style sysctl & staticize alot of stuff.Poul-Henning Kamp1995-11-141-5/+5
* Second batch of cleanup changes.Poul-Henning Kamp1995-10-291-2/+2
* Support all the tcpflag options in firewall.Ugen J.S. Antsilevich1995-10-231-14/+43
* Well..finally..this is the first part..it should take care ofUgen J.S. Antsilevich1995-10-011-16/+91
generated by cgit v1.3 (git 2.53.0) at 2026-04-17 02:54:22 +0000