Andre Oppermann 099dd0430b Bring back the full packet destination manipulation for 'ipfw fwd' ... with the kernel compile time option: options IPFIREWALL_FORWARD_EXTENDED This option has to be specified in addition to IPFIRWALL_FORWARD. With this option even packets targeted for an IP address local to the host can be redirected. All restrictions to ensure proper behaviour for locally generated packets are turned off. Firewall rules have to be carefully crafted to make sure that things like PMTU discovery do not break. Document the two kernel options. PR: kern/71910 PR: kern/73129 MFC after: 1 week		2005-02-22 17:40:40 +00:00
..
libalias
accf_data.c
accf_http.c
icmp6.h
icmp_var.h
if_atm.c
if_atm.h
if_ether.c	Add CARP (Common Address Redundancy Protocol), which allows multiple	2005-02-22 13:04:05 +00:00
if_ether.h	Add CARP (Common Address Redundancy Protocol), which allows multiple	2005-02-22 13:04:05 +00:00
igmp_var.h
igmp.c
igmp.h
in_cksum.c
in_gif.c
in_gif.h
in_pcb.c	We can make code simplier after last change.	2005-02-22 08:35:24 +00:00
in_pcb.h
in_proto.c	Add CARP (Common Address Redundancy Protocol), which allows multiple	2005-02-22 13:04:05 +00:00
in_rmx.c
in_systm.h
in_var.h
in.c
in.h	Add CARP (Common Address Redundancy Protocol), which allows multiple	2005-02-22 13:04:05 +00:00
ip6.h
ip_carp.c	Remove promisc counter from parent interface in carp_clone_destroy(),	2005-02-22 16:24:55 +00:00
ip_carp.h	Add CARP (Common Address Redundancy Protocol), which allows multiple	2005-02-22 13:04:05 +00:00
ip_divert.c
ip_divert.h
ip_dummynet.c
ip_dummynet.h
ip_ecn.c
ip_ecn.h
ip_encap.c
ip_encap.h
ip_fastfwd.c
ip_fw2.c	Jump to common action checks after doing specific once. This fixes adding	2005-02-06 11:13:59 +00:00
ip_fw_pfil.c	Add a ng_ipfw node, implementing a quick and simple interface between	2005-02-05 12:06:33 +00:00
ip_fw.h	Add a ng_ipfw node, implementing a quick and simple interface between	2005-02-05 12:06:33 +00:00
ip_gre.c
ip_gre.h
ip_icmp.c
ip_icmp.h
ip_id.c
ip_input.c	Bring back the full packet destination manipulation for 'ipfw fwd'	2005-02-22 17:40:40 +00:00
ip_mroute.c
ip_mroute.h
ip_output.c	Bring back the full packet destination manipulation for 'ipfw fwd'	2005-02-22 17:40:40 +00:00
ip_var.h
ip.h
ipprotosw.h
pim_var.h
pim.h
raw_ip.c
tcp_debug.c
tcp_debug.h
tcp_fsm.h
tcp_hostcache.c
tcp_input.c	Remove 2 (SACK) fields from the tcpcb. These are only used by a	2005-02-17 23:04:56 +00:00
tcp_output.c
tcp_reass.c	Remove 2 (SACK) fields from the tcpcb. These are only used by a	2005-02-17 23:04:56 +00:00
tcp_sack.c	Remove 2 (SACK) fields from the tcpcb. These are only used by a	2005-02-17 23:04:56 +00:00
tcp_seq.h
tcp_subr.c	o Add handling of an IPv4-mapped IPv6 address.	2005-02-14 07:37:51 +00:00
tcp_syncache.c
tcp_timer.c
tcp_timer.h
tcp_timewait.c	o Add handling of an IPv4-mapped IPv6 address.	2005-02-14 07:37:51 +00:00
tcp_usrreq.c	In the current world order, solisten() implements the state transition of	2005-02-21 21:58:17 +00:00
tcp_var.h	Remove 2 (SACK) fields from the tcpcb. These are only used by a	2005-02-17 23:04:56 +00:00
tcp.h
tcpip.h
udp_usrreq.c	In in_pcbconnect_setup() jailed sockets are treated specially: if local	2005-02-22 07:50:02 +00:00
udp_var.h
udp.h