d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
99e5e64504
freebsd-skq/sys
History
Luigi Rizzo 99e5e64504 sys/netinet/ip_fw2.c: 
Implement the M_SKIP_FIREWALL bit in m_flags to avoid loops
    for firewall-generated packets (the constant has to go in sys/mbuf.h).

    Better comments on keepalive generation, and enforce dyn_rst_lifetime
    and dyn_fin_lifetime to be less than dyn_keepalive_period.

    Enforce limits (up to 64k) on the number of dynamic buckets, and
    retry allocation with smaller sizes.

    Raise default number of dynamic rules to 4096.

    Improved handling of set of rules -- now you can atomically
    enable/disable multiple sets, move rules from one set to another,
    and swap sets.

sbin/ipfw/ipfw2.c:

    userland support for "noerror" pipe attribute.

    userland support for sets of rules.

    minor improvements on rule parsing and printing.

sbin/ipfw/ipfw.8:

    more documentation on ipfw2 extensions, differences from ipfw1
    (so we can use the same manpage for both), stateful rules,
    and some additional examples.
    Feedback and more examples needed here.
2002-08-16 10:31:47 +00:00
..
alpha In order to better support flexible and extensible access control, 2002-08-15 20:55:08 +00:00
amd64 In order to better support flexible and extensible access control, 2002-08-15 20:55:08 +00:00
arm Create a new header <machine/_stdint.h> for storing MD parts of 2002-07-29 17:41:23 +00:00
boot mdoc(7) police: Get rid of hard sentence breaks. 2002-08-13 15:09:33 +00:00
cam Remove cam_extend.[ch] after all references to them were removed. 2002-08-15 20:55:38 +00:00
coda Fix typo in the last revision. 2002-08-04 19:34:38 +00:00
compat In order to better support flexible and extensible access control, 2002-08-15 20:55:08 +00:00
conf Remove usage of cam_extend.c, replace with dev->si_drv1 2002-08-15 20:54:03 +00:00
contrib Resolve conflicts arising from the ACPI CA 20020725 import. 2002-07-30 19:35:32 +00:00
crypto Fix some really pedantic GCC warnings. 2002-07-15 13:45:15 +00:00
ddb When talking about c_db_sym_t, mention that it is not just like db_sym_t: 2002-08-14 17:56:47 +00:00
dev MFNetBSD: 2002-08-16 09:10:43 +00:00
fs When a cluster entry for ``.'' is set to 0, msdosfs fails to handle it 2002-08-16 05:13:42 +00:00
geom Don't use the static thread.. it is going away. 2002-06-29 07:47:20 +00:00
gnu In order to better support flexible and extensible access control, 2002-08-15 20:55:08 +00:00
i4b add support properly displaying and logging incoming telephone numbers (MSNs) 2002-08-12 07:53:55 +00:00
i386 In order to better support flexible and extensible access control, 2002-08-15 20:55:08 +00:00
ia64 Correct a minor whitespace nit that sneaked in with my previous commit. 2002-08-15 21:41:20 +00:00
isa Clock frequencies reported by sysctl should be unsigned values. Discovered 2002-06-22 16:30:18 +00:00
isofs/cd9660 Introduce typedefs for the member functions of struct vfsops and employ 2002-08-13 10:05:50 +00:00
kern Rewrote the space check algorithm in sbreserve() so that the extremely 2002-08-16 05:08:46 +00:00
libkern Convert GNU variadic macros to the ISO 9X variety. 2002-07-15 13:34:50 +00:00
modules Remove cam_extend.c from sources to unbreak modules. 2002-08-15 21:41:59 +00:00
net Move mac.h include to match the MAC tree location. Both locations 2002-08-15 19:02:17 +00:00
netatalk Introduce experimental support for MAC in the AppleTalk/EtherTalk stack. 2002-08-15 18:58:44 +00:00
netatm - Remove UM_* user land memory macros since they are no longer used. 2002-06-24 22:31:17 +00:00
netgraph Make the consumers of the linker_load_file() function use 2002-08-02 20:56:07 +00:00
netinet sys/netinet/ip_fw2.c: 2002-08-16 10:31:47 +00:00
netinet6 Introduce support for Mandatory Access Control and extensible 2002-08-02 20:49:14 +00:00
netipx Make spxnames a const char * to quieten some warnings in netstat. 2002-07-27 23:15:08 +00:00
netkey - fixed the order of searching SA table for packets. 2002-07-10 16:39:38 +00:00
netnatm Back out my lats commit of locking down a socket, it conflicts with hsu's work. 2002-05-31 11:52:35 +00:00
netncp Wire the sysctl output buffer before grabbing any locks to prevent 2002-07-28 19:59:31 +00:00
netns Fix bug which has been there since rev 1.1 where && was used instead of &. 2002-06-09 03:57:34 +00:00
netsmb Wire the sysctl output buffer before grabbing any locks to prevent 2002-07-28 19:59:31 +00:00
nfs Remove unused include. 2002-03-20 10:12:07 +00:00
nfsclient Remove a case of exposing 'struct ucred' to userspace. Use a struct xucred 2002-08-15 21:52:22 +00:00
nfsserver - Replace v_flag with v_iflag and v_vflag 2002-08-04 10:29:36 +00:00
pc98 MFi386: revisions 1.354 and 1.356. 2002-08-13 12:25:01 +00:00
pccard Add 16-bit before bus to keep the words card and bus apart. 2002-07-31 20:01:11 +00:00
pci UHCI_DEBUG -> USB_DEBUG. 2002-08-15 22:41:20 +00:00
posix4 Part 1 of KSE-III 2002-06-29 17:26:22 +00:00
powerpc In order to better support flexible and extensible access control, 2002-08-15 20:55:08 +00:00
rpc
security Rename mac_check_socket_receive() to mac_check_socket_deliver() so that 2002-08-15 18:51:27 +00:00
sparc64 Use symbolic constants instead of magic address constants. 2002-08-16 01:37:49 +00:00
sys make the strings for tcptimers, tanames and prurequests const to silence 2002-08-16 09:07:59 +00:00
tools - Add automatic post vop debug checks. These work in both the success and 2002-07-30 08:52:00 +00:00
ufs In order to better support flexible and extensible access control, 2002-08-15 20:55:08 +00:00
vm o Assert that the page queues lock is held in vm_page_activate(). 2002-08-11 00:21:40 +00:00
Makefile Milestone #1 in cross-arch make releases. 2002-04-26 17:55:27 +00:00