e679279326
The keep-state, limit and check-state now will have additional argument flowname. This flowname will be assigned to dynamic rule by keep-state or limit opcode. And then can be matched by check-state opcode or O_PROBE_STATE internal opcode. To reduce possible breakage and to maximize compatibility with old rulesets default flowname introduced. It will be assigned to the rules when user has omitted state name in keep-state and check-state opcodes. Also if name is ambiguous (can be evaluated as rule opcode) it will be replaced to default. Reviewed by: julian Obtained from: Yandex LLC MFC after: 1 month Relnotes: yes Sponsored by: Yandex LLC Differential Revision: https://reviews.freebsd.org/D6674 |
||
|---|---|---|
| .. | ||
| altq.c | ||
| dummynet.c | ||
| ipfw2.c | ||
| ipfw2.h | ||
| ipfw.8 | ||
| ipv6.c | ||
| main.c | ||
| Makefile | ||
| Makefile.depend | ||
| nat.c | ||
| nptv6.c | ||
| tables.c | ||