freebsd-nq/sys/netinet/ipfw
Andrey V. Elsukov 1875bbfe54 Implement "global" mode for ipfw nat. It is similar to natd(8)
"globalport" option for multiple NAT instances.

If ipfw rule contains "global" keyword instead of nat_number, then
for each outgoing packet ipfw_nat looks up translation state in all
configured nat instances. If an entry is found, packet aliased
according to that entry, otherwise packet is passed unchanged.

User can specify "skip_global" option in NAT configuration to exclude
an instance from the lookup in global mode.

PR:		kern/157867
Submitted by:	Alexander V. Chernikov (previous version)
Tested by:	Eugene Grosbein
2011-06-14 13:35:24 +00:00
..
test Add a priority-based packet scheduler. 2010-03-21 16:30:32 +00:00
dn_heap.c fix a comment and final empty line 2010-07-15 14:37:02 +00:00
dn_heap.h don't use C++ keywords as variable names 2010-03-08 11:27:08 +00:00
dn_sched_fifo.c Bring in the most recent version of ipfw and dummynet, developed 2010-03-02 17:40:48 +00:00
dn_sched_prio.c Add a priority-based packet scheduler. 2010-03-21 16:30:32 +00:00
dn_sched_qfq.c Whitespace changes to reduce diffs wrt the most recent ipfw/dummynet code: 2010-09-28 22:46:13 +00:00
dn_sched_rr.c whitespace fixes (trailing whitespace, bad indentation 2010-04-19 16:17:30 +00:00
dn_sched_wf2q.c whitespace changes in preparation for future commits 2010-09-29 09:40:20 +00:00
dn_sched.h whitespace changes in preparation for future commits 2010-09-29 09:40:20 +00:00
dummynet.txt Bring in the most recent version of ipfw and dummynet, developed 2010-03-02 17:40:48 +00:00
ip_dn_glue.c Convert delay parameter back to ms when reporting to user. 2011-05-06 07:13:34 +00:00
ip_dn_io.c Add sysctl handlers for net.inet.ip.dummynet.hash_size, .pipe_byte_limit 2011-04-19 11:33:39 +00:00
ip_dn_private.h Whitespace changes to reduce diffs wrt the most recent ipfw/dummynet code: 2010-09-28 22:46:13 +00:00
ip_dummynet.c Hide some debug messages under debug macro. 2011-06-01 12:33:05 +00:00
ip_fw2.c Implement "global" mode for ipfw nat. It is similar to natd(8) 2011-06-14 13:35:24 +00:00
ip_fw_dynamic.c Hide useless warning under debug macro. 2011-06-01 12:05:35 +00:00
ip_fw_log.c o Some programs could send broadcast/multicast traffic to ipfw 2010-08-30 09:29:51 +00:00
ip_fw_nat.c Implement "global" mode for ipfw nat. It is similar to natd(8) 2011-06-14 13:35:24 +00:00
ip_fw_pfil.c After some off-list discussion, revert a number of changes to the 2010-11-22 19:32:54 +00:00
ip_fw_private.h - Rewrite functions that copyin/out NAT configuration, so that they 2011-04-19 15:06:33 +00:00
ip_fw_sockopt.c Do not return EINVAL when user does ipfw set N flush on an empty set. 2011-06-06 10:39:38 +00:00
ip_fw_table.c no need for ipfw_flush_tables(), we just need ipfw_destroy_tables() 2010-03-21 15:54:07 +00:00