aboutsummaryrefslogtreecommitdiff
path: root/sys/netinet/ip_fw.h
Commit message (Expand)AuthorAgeFilesLines
* Move ipfw's nat code into its own kld: ipfw_nat.Paolo Pisati2008-02-291-0/+32
* Hide ipfw internal data structures behind IPFW_INTERNAL rather thanRobert Watson2008-01-251-0/+11
* Add support for filtering on Routing Header Type 0 andBjoern A. Zeeb2007-05-041-0/+2
* Summer of Code 2005: improve libalias - part 2 of 2Paolo Pisati2006-12-291-0/+60
* comply with style policeJulian Elischer2006-08-181-1/+0
* Allow ipfw to forward to a destination that is specified by a table.Julian Elischer2006-08-171-0/+2
* Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9).Oleg Bulyzhin2006-05-241-0/+6
* Reintroduce net.inet6.ip6.fw.enable sysctl to dis/enable the ipv6 processingMax Laier2006-05-121-0/+3
* When sending a packet from dummynet, indicate that we're forwardingRuslan Ermilov2006-02-141-2/+0
* Add a new feature for optimizining ipfw rulesets - substitution of theGleb Smirnoff2005-12-131-0/+2
* Garbage-collect now unused struct _ipfw_insn_pipe and flush_pipe_ptrs(),Gleb Smirnoff2005-11-291-15/+0
* * Add dynamic sysctl for net.inet6.ip6.fw.Bjoern A. Zeeb2005-08-131-0/+5
* Add support for IPv4 only rules to IPFW2 now that it supports IPv6 as well.Max Laier2005-06-031-0/+2
* IPFW version 2 is the only option in HEAD and RELENG_5.Gleb Smirnoff2005-05-041-1/+0
* Add IPv6 support to IPFW and Dummynet.Brooks Davis2005-04-181-0/+67
* Add a ng_ipfw node, implementing a quick and simple interface betweenGleb Smirnoff2005-02-051-0/+7
* o Clean up interface between ip_fw_chk() and its callers:Gleb Smirnoff2005-01-141-4/+12
* /* -> /*- for license, minor formatting changesWarner Losh2005-01-071-1/+1
* Add support to IPFW for matching by TCP data length.Brian Feldman2004-10-031-0/+1
* Add support to IPFW for classification based on "diverted" statusBrian Feldman2004-10-031-3/+6
* Add to IPFW the ability to do ALTQ classification/tagging.Brian Feldman2004-10-031-0/+10
* Add an additional struct inpcb * argument to pfil(9) in order to enableMax Laier2004-09-291-2/+3
* Bring back the sysctl 'net.inet.ip.fw.enable' to unbreak the startup scriptsAndre Oppermann2004-08-191-0/+1
* Convert ipfw to use PFIL_HOOKS. This is change is transparent to userlandAndre Oppermann2004-08-171-7/+15
* Put the 'antispoof' opcode in the proper place in the opcode list suchDavid E. O'Brien2004-08-161-1/+1
* Add the ability to associate ipfw rules with a specific prison ID.Christian S.J. Peron2004-08-121-1/+5
* New ipfw option "antispoof":Andre Oppermann2004-08-091-0/+1
* Introduce a new feature to IPFW2: lookup tables. These are usefulRuslan Ermilov2004-06-091-0/+19
* Add the option versrcreach to verify that a valid route to theAndre Oppermann2004-04-231-0/+1
* Re-remove MT_TAGs. The problems with dummynet have been fixed now.Max Laier2004-02-251-1/+0
* Backout MT_TAG removal (i.e. bring back MT_TAGs) for now, as dummynet isMax Laier2004-02-181-0/+1
* This set of changes eliminates the use of MT_TAG "pseudo mbufs", replacingMax Laier2004-02-131-1/+0
* Replace the if_name and if_unit members of struct ifnet with new membersBrooks Davis2003-10-311-1/+1
* Allow set 31 to be used for rules other than 65535.Luigi Rizzo2003-07-151-0/+1
* Correct some comments, add opcode O_IPSEC to match packetsLuigi Rizzo2003-07-041-12/+17
* Change handling to support strong alignment architectures such as alpha andBernd Walter2003-06-041-5/+17
* Add a 'verrevpath' option that verifies the interface that a packetCrist J. Clark2003-03-151-0/+2
* Oops, forgot to commit this file. This is part of the fixMaxime Henrion2002-10-241-0/+2
* One bugfix and one new feature.Luigi Rizzo2002-08-101-3/+3
* Fix a panic when doing "ipfw add pipe 1 log ..."Luigi Rizzo2002-07-171-1/+1
* Implement keepalives for dynamic rules, so they will not expireLuigi Rizzo2002-07-141-3/+5
* Remove one unused command name.Luigi Rizzo2002-07-081-1/+0
* Implement the last 2-3 missing instructions for ipfw,Luigi Rizzo2002-07-051-0/+1
* The new ipfw code.Luigi Rizzo2002-06-271-246/+289
* Remove (almost all) global variables that were used to holdLuigi Rizzo2002-06-221-3/+22
* Remove custom definitions (IP_FW_TCPF_SYN etc.) of TCP header flagsLuigi Rizzo2002-05-131-10/+0
* Cleanup the interface to ip_fw_chk, two of the input argumentsLuigi Rizzo2002-05-091-3/+19
* Remove __P.Alfred Perlstein2002-03-191-1/+1
* Implement matching IP precedence in ipfw(4).Yaroslav Tykhiy2001-12-211-1/+2
* MFS: sync the ipfw/dummynet/bridge code with the one recently mergedLuigi Rizzo2001-11-041-0/+1