Andrey V. Elsukov f7c4fdee1a Add "record-state", "set-limit" and "defer-action" rule options to ipfw. ... "record-state" is similar to "keep-state", but it doesn't produce implicit O_PROBE_STATE opcode in a rule. "set-limit" is like "limit", but it has the same feature as "record-state", it is single opcode without implicit O_PROBE_STATE opcode. "defer-action" is targeted to be used with dynamic states. When rule with this opcode is matched, the rule's action will not be executed, instead dynamic state will be created. And when this state will be matched by "check-state", then rule action will be executed. This allows create a more complicated rulesets. Submitted by: lev MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D1776		2018-07-09 11:35:18 +00:00
..
ipfw	Add "record-state", "set-limit" and "defer-action" rule options to ipfw.	2018-07-09 11:35:18 +00:00
pf	Revert r335833.	2018-07-04 03:36:46 +00:00