freebsd-skq/sbin/ipfw
Andrey V. Elsukov aac74aeac7 Add ipfw_pmod kernel module.
The module is designed for modification of a packets of any protocols.
For now it implements only TCP MSS modification. It adds the external
action handler for "tcp-setmss" action.

A rule with tcp-setmss action does additional check for protocol and
TCP flags. If SYN flag is present, it parses TCP options and modifies
MSS option if its value is greater than configured value in the rule.
Then it adjustes TCP checksum if needed. After handling the search
continues with the next rule.

Obtained from:	Yandex LLC
MFC after:	2 weeks
Relnotes:	yes
Sponsored by:	Yandex LLC
No objection from: #network
Differential Revision:	https://reviews.freebsd.org/D10150
2017-04-03 03:07:48 +00:00
..
altq.c Merge buffer-printing changes from from projects/ipfw as preparation 2014-08-23 17:37:18 +00:00
dummynet.c Flush buffer after output. This fixes adding new data to already 2016-07-11 12:44:58 +00:00
ipfw2.c Add ipfw_pmod kernel module. 2017-04-03 03:07:48 +00:00
ipfw2.h Add ipfw_pmod kernel module. 2017-04-03 03:07:48 +00:00
ipfw.8 Add ipfw_pmod kernel module. 2017-04-03 03:07:48 +00:00
ipv6.c Add missing support of named lookup tables to the IPv6 code. 2016-11-15 07:13:16 +00:00
main.c Add ipfw_nat64 module that implements stateless and stateful NAT64. 2016-08-13 16:09:49 +00:00
Makefile Add ipfw_nat64 module that implements stateless and stateful NAT64. 2016-08-13 16:09:49 +00:00
Makefile.depend Add META_MODE support. 2015-06-13 19:20:56 +00:00
nat64lsn.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
nat64stl.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
nat.c Code cleanup unused-but-set-variable spotted by gcc. 2015-08-25 15:32:08 +00:00
nptv6.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
tables.c Add ipfw_nat64 module that implements stateless and stateful NAT64. 2016-08-13 16:09:49 +00:00