Alexander V. Chernikov 7e767c791f * Use different rule structures in kernel/userland.
* Switch kernel to use per-cpu counters for rules.
* Keep ABI/API.

Kernel changes:
* Each rules is now exported as TLV with optional extenable
  counter block (ip_fW_bcounter for base one) and
  ip_fw_rule for rule&cmd data.
* Counters needs to be explicitly requested by IPFW_CFG_GET_COUNTERS flag.
* Separate counters from rules in kernel and clean up ip_fw a bit.
* Pack each rule in IPFW_TLV_RULE_ENT tlv to ease parsing.
* Introduce versioning in container TLV (may be needed in future).
* Fix ipfw_cfg_lheader broken u64 alignment.

Userland changes:
* Use set_mask from cfg header when requesting config
* Fix incorrect read accouting in ipfw_show_config()
* Use IPFW_RULE_NOOPT flag instead of playing with _pad
* Fix "ipfw -d list": do not print counters for dynamic states
* Some small fixes
2014-07-08 23:11:15 +00:00
..
2014-05-18 22:30:12 +00:00
2013-11-01 10:29:10 +00:00
2014-03-14 06:29:43 +00:00
2012-10-12 09:24:24 +00:00
In
2013-11-30 12:51:19 +00:00
2012-09-06 07:03:56 +00:00
2013-07-03 18:48:43 +00:00
2012-11-25 14:25:08 +00:00
2013-09-02 22:48:41 +00:00