d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1f39c522b6
freebsd-skq/sbin
History
melifaro c614ff641f - Add ipfw eXtended tables permitting radix to be used for any kind of keys. 
- Add support for IPv6 and interface extended tables
- Make number of tables to be loader tunable in range 0..65534.
- Use IP_FW3 opcode for all new extended table cmds

No ABI changes are introduced. Old userland will see valid tables for
IPv4 tables and no entries otherwise. Flush works for any table.

IP_FW3 socket option is used to encapsulate all new opcodes:
 /* IP_FW3 header/opcodes */
 typedef struct _ip_fw3_opheader {
        uint16_t opcode;        /* Operation opcode */
        uint16_t reserved[3];   /* Align to 64-bit boundary */
 } ip_fw3_opheader;

New opcodes added:
 IP_FW_TABLE_XADD, IP_FW_TABLE_XDEL, IP_FW_TABLE_XGETSIZE, IP_FW_TABLE_XLIST

ipfw(8) table argument parsing behavior is changed:
 'ipfw table 999 add host' now assumes 'host' to be interface name instead of
 hostname.

New tunable:
 net.inet.ip.fw.tables_max controls number of table supported by ipfw in given
 VNET instance. 128 is still the default value.

New syntax:
ipfw add skipto tablearg ip from any to any via table(42) in
ipfw add skipto tablearg ip from any to any via table(4242) out

This is a bit hackish, special interface name '\1' is used to signal interface
table number is passed in p.glob field.

Sponsored by Yandex LLC

Reviewed by:    ae
Approved by:    ae (mentor)

MFC after:      4 weeks
2012-03-12 14:07:57 +00:00
..
adjkerntz Fix a variety of grammar and style nits 2012-03-09 01:32:05 +00:00
atacontrol Add a "kern.features.ata_cam" sysctl in the kernel when the ATA_CAM kernel 2011-10-09 21:42:02 +00:00
atm In sbin/atm/atmconfig/diag.c, fix a few warnings about format strings 2011-12-17 00:26:45 +00:00
badsect Add missing static keywords for global variables to tools in sbin/. 2011-11-04 13:36:02 +00:00
bsdlabel Globally replace u_int*_t from (non-contributed) man pages. 2012-02-12 18:29:56 +00:00
camcontrol Fix build when RELEASE_CRUNCH is defined. 2012-01-29 09:12:34 +00:00
ccdconfig Add missing static keywords for global variables to tools in sbin/. 2011-11-04 13:36:02 +00:00
clri Switch the default WARNS level for sbin/ to 6. 2009-10-19 16:00:24 +00:00
comcontrol ANSIfy almost all applications that use WARNS=6. 2009-12-29 22:53:27 +00:00
conscontrol Changed "conscontrol unset" to accept an existing virtual 2011-04-18 20:28:07 +00:00
ddb Correct subcommand name 'unset' -> 'unscript'. 2011-06-18 22:32:55 +00:00
devd Fix build. 2012-01-06 15:01:05 +00:00
devfs Spelling fixes for sbin/ 2012-01-07 16:09:33 +00:00
dhclient Spelling fixes for sbin/ 2012-01-07 16:09:33 +00:00
dmesg Add missing static keywords for global variables to tools in sbin/. 2011-11-04 13:36:02 +00:00
dump Replace index() and rindex() calls with strchr() and strrchr(). 2012-01-03 18:51:58 +00:00
dumpfs Add missing -l flag to usage(). 2011-12-26 16:47:45 +00:00
dumpon Switch the default WARNS level for sbin/ to 6. 2009-10-19 16:00:24 +00:00
fdisk Fix multi-line comment formatting. 2011-11-07 07:50:35 +00:00
fdisk_pc98 Add reference to gpart(8). 2011-11-06 20:39:35 +00:00
ffsinfo Remove trailing whitespace. 2011-11-09 21:01:50 +00:00
fsck Add missing static keywords for global variables to tools in sbin/. 2011-11-04 13:36:02 +00:00
fsck_ffs Be more helpful about alternate superblocks. 2012-02-10 12:01:19 +00:00
fsck_msdosfs Add missing static keywords for global variables to tools in sbin/. 2011-11-04 13:36:02 +00:00
fsdb Partially undo r228693, by removing NO_WFORMAT.clang in fsdb's Makefile, 2012-03-09 21:02:39 +00:00
fsirand Fix warning when compiling with gcc46: 2012-01-10 02:59:43 +00:00
gbde Use NO_WCAST_ALIGN for sbin/gbde, this is more appropriate to fix the 2011-12-17 00:14:40 +00:00
geom Fix a variety of grammar issues and style nits. 2012-03-04 16:37:44 +00:00
ggate Because ggatel(8) operates on local GEOM providers, use unlimited queue size in 2011-04-02 06:59:05 +00:00
growfs After r232548, clang complains about the apparent '=-' operator (a 2012-03-12 11:15:44 +00:00
gvinum Fix warning when compiling with gcc46: 2012-01-10 02:59:26 +00:00
hastctl For functions that return -1 on failure check exactly for -1 and not for 2012-01-10 22:39:07 +00:00
hastd Nice range comparison. 2012-02-11 16:41:52 +00:00
ifconfig Fix typo and bump the document date which I also forgot. 2012-03-07 06:25:17 +00:00
init Fix whitespace. 2012-03-11 22:30:06 +00:00
ipf Use both NO_WFORMAT and NO_WARRAY_BOUNDS for sbin/ipf, it would be too 2011-12-17 00:54:09 +00:00
ipfw - Add ipfw eXtended tables permitting radix to be used for any kind of keys. 2012-03-12 14:07:57 +00:00
iscontrol Whitespace cleanup: 2012-02-25 15:21:43 +00:00
kldconfig Raise WARNS for various tools where possible. 2010-01-17 21:56:27 +00:00
kldload Make flags in usage() and SYNOPSYS more style(9)-ish. 2010-08-30 07:29:27 +00:00
kldstat In printfile(), exit the process instead of only printing the warning. 2010-11-13 16:49:07 +00:00
kldunload Switch the default WARNS level for sbin/ to 6. 2009-10-19 16:00:24 +00:00
ldconfig ANSIfy ldconfig and the aout bits it still uses from rtld-aout. 2009-12-29 21:07:17 +00:00
mca sysctlbyname() returns -1 on error and sets errno. It does 2010-07-03 22:02:29 +00:00
md5 - new sentence should start on new line. 2011-11-13 17:07:43 +00:00
mdconfig Rewrite option parsing in mdconfig(8). This makes it more user-friendly 2012-01-27 11:48:44 +00:00
mdmfs Spelling fixes for sbin/ 2012-01-07 16:09:33 +00:00
mknod Fix some more warnings found by clang. 2010-11-22 20:10:48 +00:00
mksnap_ffs Note that a UFS filesystem can have up to 20 active snapshots. 2011-02-15 07:25:54 +00:00
mount Don't print the nmount(2) provided error message if it is empty. 2012-01-20 12:59:12 +00:00
mount_cd9660 Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_ext2fs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_hpfs mdoc: consistently spell our email addresses <foo@FreeBSD.org> 2010-05-19 08:57:53 +00:00
mount_msdosfs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_nfs Add a timeout on positive name cache entries in the NFS client. That is, 2012-01-25 20:05:58 +00:00
mount_ntfs Remove trailing whitespace. 2012-01-28 13:41:34 +00:00
mount_nullfs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_reiserfs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_std Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_udf Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
mount_unionfs Change checkpath() to not exit on error. This is a prerequisite for 2012-01-16 19:34:21 +00:00
natd Add missing static keywords for global variables to tools in sbin/. 2011-11-04 13:36:02 +00:00
newfs Fix warning when compiling with gcc46: 2012-01-10 02:59:09 +00:00
newfs_msdos Globally replace u_int*_t from (non-contributed) man pages. 2012-02-12 18:29:56 +00:00
nfsiod - Display current settings when run without options. 2009-12-26 08:36:02 +00:00
nos-tun nos-tun(8): make WARNS=3 clean 2010-03-10 18:51:13 +00:00
pfctl Switch the default WARNS level for sbin/ to 6. 2009-10-19 16:00:24 +00:00
pflogd Update packet filter (pf) code to OpenBSD 4.5. 2011-06-28 11:57:25 +00:00
ping Small style fixes: 2010-06-20 12:52:33 +00:00
ping6 Fix warning when compiling with gcc46: 2012-01-10 02:59:01 +00:00
quotacheck Update to current version of head. 2010-04-28 05:33:59 +00:00
rcorder Add more static keywords to rcorder(8). 2011-12-11 20:48:40 +00:00
reboot Add BSD copyright notice. 2012-02-07 14:06:30 +00:00
recoverdisk Fix mdoc date from previous commit. 2012-01-06 11:42:03 +00:00
resolvconf Add resolvconf(8) which manages resolv.conf. 2011-03-18 12:18:52 +00:00
restore mdoc: make pages render with mandoc 2010-10-21 12:27:13 +00:00
route Fix a possible infinite loop in "route flush" on 64-bit archs. 2012-02-04 17:53:22 +00:00
routed Fix a style bug 2012-01-13 06:56:59 +00:00
rtsol Add dump.c to the rtsol build. It is needed now that sec2str is non-static 2011-06-08 21:59:07 +00:00
savecore Remove duplicated header files 2011-06-24 07:29:04 +00:00
sconfig Switch the default WARNS level for sbin/ to 6. 2009-10-19 16:00:24 +00:00
setkey mdoc: fix markup 2011-06-02 09:56:42 +00:00
shutdown Replace index() and rindex() calls with strchr() and strrchr(). 2012-01-03 18:51:58 +00:00
spppcontrol mdoc: order prologue macros consistently by Dd/Dt/Os 2010-04-14 19:08:06 +00:00
sunlabel mdoc: drop even more redundant .Pp calls 2010-10-19 12:35:40 +00:00
swapon Add missing static keywords for global variables to tools in sbin/. 2011-11-04 13:36:02 +00:00
sysctl If the -d flag is specified, ignore any new values specified and only 2011-12-01 15:01:23 +00:00
tunefs Fix warning when compiling with gcc46: 2012-01-10 02:58:52 +00:00
umount Add missing static keywords for global variables to tools in sbin/. 2011-11-04 13:36:02 +00:00
Makefile Add resolvconf(8) which manages resolv.conf. 2011-03-18 12:18:52 +00:00
Makefile.amd64 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.arm MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.i386 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.ia64 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.inc Switch the default WARNS level for sbin/ to 6. 2009-10-19 16:00:24 +00:00
Makefile.mips MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.pc98 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.sparc64 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00