aboutsummaryrefslogtreecommitdiff
path: root/sys/netinet/ipfw
Commit message (Expand)AuthorAgeFilesLines
...
* Following up on a request from Ermal Luci to makeLuigi Rizzo2010-01-071-47/+1
* some header shuffling to help decoupling ip_divert from ipfwLuigi Rizzo2010-01-075-11/+6
* put ip_len in correct order for ip_output().Luigi Rizzo2010-01-071-1/+2
* this file does not require ip_dummynet.hLuigi Rizzo2010-01-051-1/+0
* Various cleanup done in ipfw3-head branch including:Luigi Rizzo2010-01-048-245/+181
* we really need htonl() here, see the comment a few lines above in the code.Luigi Rizzo2009-12-291-1/+1
* bring the NGM_IPFW_COOKIE back into ng_ipfw.h, libnetgraph expectsLuigi Rizzo2009-12-282-1/+1
* bring in several cleanups tested in ipfw3-head branch, namely:Luigi Rizzo2009-12-288-433/+286
* readability fixes -- add braces on large blocks, remove unnecessaryLuigi Rizzo2009-12-281-28/+31
* explain details of operation of table lookups, and improve portabilityLuigi Rizzo2009-12-281-4/+16
* diverted packet must re-enter _after_ the matching rule,Luigi Rizzo2009-12-271-1/+1
* fix poor indentation resulting from a mergeLuigi Rizzo2009-12-241-14/+14
* mostly style changes, such as removal of trailing whitespace,Luigi Rizzo2009-12-231-183/+152
* fix build with the new fast lookup structure.Luigi Rizzo2009-12-231-79/+56
* fix build on 64-bit architectures.Luigi Rizzo2009-12-231-15/+15
* merge code from ipfw3-head to reduce contention on the ipfw lockLuigi Rizzo2009-12-226-387/+392
* some mostly cosmetic changes in preparation for upcoming work:Luigi Rizzo2009-12-224-92/+89
* Added proper attribution.Ruslan Ermilov2009-12-181-1/+1
* Add some experimental code to log traffic with tcpdump,Luigi Rizzo2009-12-173-3/+79
* simplify and document lookup_next_rule()Luigi Rizzo2009-12-171-43/+22
* simplify the code that finds the next rule after reinjectionsLuigi Rizzo2009-12-171-18/+16
* remove a duplicate sysctl entryLuigi Rizzo2009-12-161-4/+2
* bring back a couple of #include that are supplied by nesting,Luigi Rizzo2009-12-162-1/+2
* Various cosmetic cleanup of the files:Luigi Rizzo2009-12-169-143/+183
* Quick fix to make this compile:Warner Losh2009-12-161-6/+0
* more splitting of ip_fw2.c, now extract the 'table' routinesLuigi Rizzo2009-12-154-1209/+1398
* Start splitting ip_fw2.c and ip_fw.h into smaller components.Luigi Rizzo2009-12-157-1402/+1852
* implement a new match option,Luigi Rizzo2009-12-151-0/+31
* use div64 when converting back the burst value for userlandLuigi Rizzo2009-12-101-1/+1
* when draining a flowset free the entire chain, not just one packet.Luigi Rizzo2009-12-101-1/+1
* centralize the code to free a packet (or a chain) while in dummynet.Luigi Rizzo2009-12-101-32/+27
* Fix burst processing for WF2Q pipes - do not increase available burst sizeOleg Bulyzhin2009-12-051-1/+3
* adjust comment in previous commit after Julian's explanationLuigi Rizzo2009-12-051-8/+9
* remove a dead block of code, document how the ipfw clients areLuigi Rizzo2009-12-051-27/+28
* fix build with VNET enabledLuigi Rizzo2009-12-051-1/+1
* Use INET_ADDRSTRLEN and INET6_ADDRSTRLEN rather than hardHajimu UMEMOTO2009-12-041-5/+23
* preparation work to replace the monster switch in ipfw_chk() withLuigi Rizzo2009-12-031-137/+203
* Teach an IPv6 to the debug prints.Hajimu UMEMOTO2009-12-031-14/+62
* - initialize src_ip in the main loop to prevent a compiler warningLuigi Rizzo2009-12-021-5/+8
* small changes for portability and diff reduction wrt/ FreeBSD 7.Luigi Rizzo2009-12-021-15/+38
* Teach an IPv6 to send_pkt() and ipfw_tick().Hajimu UMEMOTO2009-12-021-112/+166
* style(9): add missing parenthesesOleg Bulyzhin2009-11-091-1/+1
* Fix two issues that can lead to exceeding configured pipe bandwidth:Oleg Bulyzhin2009-11-031-5/+16
* Virtualize the pfil hooks so that different jails may chose differentJulian Elischer2009-10-112-59/+75
* Fix another typo right next to the previous one, that amazingly, I didJulian Elischer2009-08-231-1/+1
* Fix typo in comment that has been bugging me for days.Julian Elischer2009-08-231-1/+1
* Fix ipfw's initialization functions to get the correct order of evaluationJulian Elischer2009-08-212-67/+119
* Fix ipfw crash on uid or gid check.Julian Elischer2009-08-141-1/+1
* Merge the remainder of kern_vimage.c and vimage.h into vnet.c andRobert Watson2009-08-013-3/+0
* Startup the vnet part of initialization a bit after the global part.Julian Elischer2009-07-281-2/+2