melifaro ce16a97371 Add net.inet.ip.fw.dyn_keep_states sysctl which ...

re-links dynamic states to default rule instead of
flushing on rule deletion.
This can be useful while performing ruleset reload
(think about `atomic` reload via changing sets).
Currently it is turned off by default.

MFC after:	2 weeks
Sponsored by:	Yandex LLC

2013-12-18 20:17:05 +00:00

..

test

…

dn_heap.c

…

dn_heap.h

…

dn_sched_fifo.c

…

dn_sched_prio.c

…

dn_sched_qfq.c

…

dn_sched_rr.c

…

dn_sched_wf2q.c

…

dn_sched.h

add a counter on the struct mq (a queue of mbufs),

2013-11-22 05:02:37 +00:00

dummynet.txt

…

ip_dn_glue.c

Mechanically substitute flags from historic mbuf allocator with

2012-12-05 08:04:20 +00:00

ip_dn_io.c

add a counter on the struct mq (a queue of mbufs),

2013-11-22 05:02:37 +00:00

ip_dn_private.h

add a counter on the struct mq (a queue of mbufs),

2013-11-22 05:02:37 +00:00

ip_dummynet.c

Provide includes that are needed in these files, and before were read

2013-10-26 18:18:50 +00:00

ip_fw2.c

Simplify O_NAT opcode handling.

2013-11-28 15:28:51 +00:00

ip_fw_dynamic.c

Add net.inet.ip.fw.dyn_keep_states sysctl which

2013-12-18 20:17:05 +00:00

ip_fw_log.c

make this code compile in userspace on OSX

2013-11-22 05:00:18 +00:00

ip_fw_nat.c

In sys/netpfil/ipfw/ip_fw_nat.c:vnet_ipfw_nat_uninit() we call "IPFW_WLOCK(chain);".

2013-11-25 20:20:34 +00:00

ip_fw_pfil.c

make ipfw_check_packet() and ipfw_check_frame() public,

2013-11-22 04:57:50 +00:00

ip_fw_private.h

Make ipfw nat init/unint work correctly for VIMAGE:

2013-08-24 11:59:51 +00:00

ip_fw_sockopt.c

Check ipfw table numbers in both user and kernel space before rule addition.

2013-11-28 10:28:28 +00:00

ip_fw_table.c

…