Alexander V. Chernikov 7e767c791f * Use different rule structures in kernel/userland. ... * Switch kernel to use per-cpu counters for rules. * Keep ABI/API. Kernel changes: * Each rules is now exported as TLV with optional extenable counter block (ip_fW_bcounter for base one) and ip_fw_rule for rule&cmd data. * Counters needs to be explicitly requested by IPFW_CFG_GET_COUNTERS flag. * Separate counters from rules in kernel and clean up ip_fw a bit. * Pack each rule in IPFW_TLV_RULE_ENT tlv to ease parsing. * Introduce versioning in container TLV (may be needed in future). * Fix ipfw_cfg_lheader broken u64 alignment. Userland changes: * Use set_mask from cfg header when requesting config * Fix incorrect read accouting in ipfw_show_config() * Use IPFW_RULE_NOOPT flag instead of playing with _pad * Fix "ipfw -d list": do not print counters for dynamic states * Some small fixes		2014-07-08 23:11:15 +00:00
..
ipfw	* Use different rule structures in kernel/userland.	2014-07-08 23:11:15 +00:00
pf	Fix pf(4) to build with MAXCPU set to 256. MAXCPU is actually a count,	2014-05-29 19:17:10 +00:00