d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
109a7b5eec
freebsd-skq/sys
History
kp 109a7b5eec netpfil: Introduce PFIL_FWD flag 
Forwarded packets passed through PFIL_OUT, which made it difficult for
firewalls to figure out if they were forwarding or producing packets. This in
turn is an issue for pf for IPv6 fragment handling: it needs to call
ip6_output() or ip6_forward() to handle the fragments. Figuring out which was
difficult (and until now, incorrect).
Having pfil distinguish the two removes an ugly piece of code from pf.

Introduce a new variant of the netpfil callbacks with a flags variable, which
has PFIL_FWD set for forwarded packets. This allows pf to reliably work out if
a packet is forwarded.

Reviewed by:	ae, kevans
Differential Revision:	https://reviews.freebsd.org/D13715
2018-03-23 16:56:44 +00:00
..
amd64 Fixes for ptrace(PT_GETXSTATE_INFO) related to the padding in struct 2018-03-22 20:44:27 +00:00
arm This is MPSAFE on this platform, so don't take Giant out while running 2018-03-21 14:47:08 +00:00
arm64 Rename assym.s to assym.inc 2018-03-20 17:58:51 +00:00
bsm
cam Flag when we have a pending TUR. Don't schedule another one when we 2018-03-23 16:23:15 +00:00
cddl zfs: fix mismatch between format specifier and type 2018-03-23 09:42:47 +00:00
compat linuxkpi whitespace cleanup 2018-03-23 15:50:01 +00:00
conf MFV r331400: 8484 Implement aggregate sum and use for arc counters 2018-03-23 02:15:05 +00:00
contrib Import Blake2 algorithms (blake2b, blake2s) from libb2 2018-03-21 16:18:14 +00:00
crypto Import Blake2 algorithms (blake2b, blake2s) from libb2 2018-03-21 16:18:14 +00:00
ddb db_script_exec: use a saved script name when reporting commands executed 2018-03-04 13:27:21 +00:00
dev Convert the PCI ID selection from a simple if into a table. 2018-03-23 15:35:19 +00:00
dts sys/dts: Remove arm64 from subdir as it no longer exists. 2018-03-19 15:35:26 +00:00
fs Revert r313780 (UFS_ prefix) 2018-03-17 12:59:55 +00:00
gdb amd64: Protect the kernel text, data, and BSS by setting the RW/NX bits 2018-03-06 14:28:37 +00:00
geom Remove unneeded variable which was introduced in r328472. 2018-03-18 15:09:55 +00:00
gnu bwn(4): txpid2g/txpid5g[lh] are not defined after sromrev 7; the default 2018-02-13 17:43:54 +00:00
i386 There is no need to disable interrupts around npxsave call. 2018-03-23 15:46:53 +00:00
isa Revert r330780, it was improperly tested and results in taking a spin 2018-03-11 20:13:15 +00:00
kern Do not send signals to init directly from shutdown_nice(9), do it from 2018-03-22 20:47:25 +00:00
kgssapi kgssapi: Remove trivial deadcode 2018-02-14 00:12:03 +00:00
libkern iconv uses strlen directly on user supplied memory 2018-02-26 18:23:36 +00:00
mips Rename assym.s to assym.inc 2018-03-20 17:58:51 +00:00
modules Convert the PCI ID selection from a simple if into a table. 2018-03-23 15:35:19 +00:00
net netpfil: Introduce PFIL_FWD flag 2018-03-23 16:56:44 +00:00
net80211 net80211: wrap protection frame allocation into ieee80211_alloc_prot() 2018-03-09 11:33:56 +00:00
netgraph Correct pseudo misspelling in sys/ comments 2018-02-23 18:15:50 +00:00
netinet netpfil: Introduce PFIL_FWD flag 2018-03-23 16:56:44 +00:00
netinet6 netpfil: Introduce PFIL_FWD flag 2018-03-23 16:56:44 +00:00
netipsec Set the proper vnet in IPsec callback functions. 2018-03-20 17:05:23 +00:00
netpfil netpfil: Introduce PFIL_FWD flag 2018-03-23 16:56:44 +00:00
netsmb Unsign some values related to allocation. 2018-01-22 02:08:10 +00:00
nfs Modernize nfssvc(2) registartion. 2018-02-08 20:09:42 +00:00
nfsclient style: Remove remaining deprecated MALLOC/FREE macros 2018-01-25 22:25:13 +00:00
nfsserver sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
nlm Use syscall_helper_register() to register syscalls and initialize though 2018-02-10 01:09:22 +00:00
ofed Remove redundant integer cast in ibcore. The "ref_count" field already 2018-03-19 13:51:33 +00:00
opencrypto Import Blake2 algorithms (blake2b, blake2s) from libb2 2018-03-21 16:18:14 +00:00
powerpc Debug interrupts aren't instruction traps 2018-03-23 00:40:08 +00:00
riscv Rename assym.s to assym.inc 2018-03-20 17:58:51 +00:00
rpc Do pass removing some write-only variables from the kernel. 2017-12-25 04:48:39 +00:00
security audit(4): fix a typo in a comment 2018-03-17 17:56:08 +00:00
sparc64 Mark psycho interrupts as MPSAFE. It's safe to do so now that we don't 2018-03-21 14:47:17 +00:00
sys Start witness much earlier in boot so that we can shrink the pend list and 2018-03-22 19:11:43 +00:00
teken sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
tests
tools Avoid using \$. It's an unknown escape sequence. Some awks warn about 2018-01-28 05:13:08 +00:00
ufs Revert r313780 (UFS_ prefix) 2018-03-17 12:59:55 +00:00
vm Correct a couple of assertion messages in vm_page_reclaim_run(). 2018-03-23 14:38:56 +00:00
x86 Move the CR0.WP manipulation KPI to x86. 2018-03-20 20:20:49 +00:00
xdr sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
xen sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
Makefile