freebsd-dev/sys/net
Andrew Thompson 85ce729794 Add a bridge interface flag called PRIVATE where any private port can not
communicate with another private port.

All unicast/broadcast/multicast layer2 traffic is blocked so it works much the
same way as using firewall rules but scales better and is generally easier as
firewall packages usually do not allow ARP blocking.

An example usage would be having a number of customers on separate vlans
bridged with a server network. All the vlans are marked private, they can all
communicate with the server network unhindered, but can not exchange any
traffic whatsoever with each other.

Approved by:	re (rwatson)
2007-08-01 00:33:52 +00:00
..
bpf_filter.c
bpf_jitter.c
bpf_jitter.h
bpf.c Replace references to NET_CALLOUT_MPSAFE with CALLOUT_MPSAFE, and remove 2007-07-28 07:31:30 +00:00
bpf.h
bpfdesc.h
bridgestp.c Check the correct port to see if synced is true. 2007-06-22 23:28:33 +00:00
bridgestp.h
bsd_comp.c
ethernet.h Sync ether_ioctl() with ioctl(2) and ifnet.if_ioctl 2007-05-29 12:40:45 +00:00
fddi.h
firewire.h
ieee8023ad_lacp.c Allow the LACP state to be queried from userland which at the moment is the 2007-07-05 09:18:57 +00:00
ieee8023ad_lacp.h Allow the LACP state to be queried from userland which at the moment is the 2007-07-05 09:18:57 +00:00
if_arc.h
if_arcsubr.c
if_arp.h
if_atm.h
if_atmsubr.c
if_bridge.c Add a bridge interface flag called PRIVATE where any private port can not 2007-08-01 00:33:52 +00:00
if_bridgevar.h Add a bridge interface flag called PRIVATE where any private port can not 2007-08-01 00:33:52 +00:00
if_clone.c
if_clone.h
if_disc.c Fix some statements in disc(4) and about it: 2007-03-26 09:10:28 +00:00
if_dl.h
if_edsc.c Give a hint that softc can contain many things besides ifp. 2007-03-26 09:05:10 +00:00
if_ef.c
if_enc.c
if_ethersubr.c First in a series of changes to remove the now-unused Giant compatibility 2007-07-27 11:59:57 +00:00
if_faith.c
if_fddisubr.c
if_fwsubr.c Remove GIANT_REQUIRED for upcoming changes in FireWire stack. 2007-06-05 14:15:45 +00:00
if_gif.c
if_gif.h
if_gre.c Sync comments to code: we now use priv_check() rather than suser() to 2007-06-26 23:01:01 +00:00
if_gre.h
if_iso88025subr.c
if_lagg.c - Propagate the largest set of interface capabilities supported by all lagg 2007-07-30 20:17:22 +00:00
if_lagg.h - Propagate the largest set of interface capabilities supported by all lagg 2007-07-30 20:17:22 +00:00
if_llc.h
if_loop.c
if_media.c
if_media.h Update 802.11 wireless support: 2007-06-11 03:36:55 +00:00
if_mib.c
if_mib.h
if_ppp.c Continue pre-7.0 privilege cleanup: update suser(9) comments to be priv(9) 2007-07-02 15:44:30 +00:00
if_ppp.h
if_pppvar.h
if_sl.c
if_slvar.h
if_sppp.h
if_spppfr.c
if_spppsubr.c Cast the ioctl define to the type of the variable being switched on. 2007-06-10 04:53:13 +00:00
if_stf.c
if_stf.h
if_tap.c
if_tap.h
if_tapvar.h
if_tun.c
if_tun.h
if_types.h Remove IPX over IP tunneling support, which allows IPX routing over IP 2007-06-13 14:01:43 +00:00
if_var.h The struct if_data members ifi_recvquota and ifi_xmitquota have been 2007-05-16 18:37:37 +00:00
if_vlan_var.h
if_vlan.c
if.c First in a series of changes to remove the now-unused Giant compatibility 2007-07-27 11:59:57 +00:00
if.h Add IFCAP_LRO flag for drivers to announce their TCP Large Receive Offload 2007-06-11 20:08:11 +00:00
iso88025.h
netisr.c First in a series of changes to remove the now-unused Giant compatibility 2007-07-27 11:59:57 +00:00
netisr.h
pfil.c
pfil.h Correct the definition of PFIL_HOOKED() so that it compares 2007-06-08 12:43:25 +00:00
pfkeyv2.h Commit the change from FAST_IPSEC to IPSEC. The FAST_IPSEC 2007-07-03 12:13:45 +00:00
ppp_comp.h
ppp_deflate.c
ppp_defs.h
ppp_tty.c
radix.c
radix.h
raw_cb.c
raw_cb.h
raw_usrreq.c
route.c Add missing \n to printf 2007-06-11 12:19:34 +00:00
route.h
rtsock.c Fix regression in rev. 1.140. 2007-03-27 19:36:12 +00:00
slcompress.c
slcompress.h
slip.h
zlib.c
zlib.h