89bf7e80ea
r258708: Check ipfw table numbers in both user and kernel space before rule addition. Found by: Saychik Pavel <umka@localka.net> r258711: Simplify O_NAT opcode handling. r260247: Use rnh_matchaddr instead of rnh_lookup for longest-prefix match. rnh_lookup is effectively the same as rnh_matchaddr if called with empy network mask. r261117: Reorder struct ip_fw_chain: * move rarely-used fields down * move uh_lock to different cacheline * remove some usused fields |
||
---|---|---|
.. | ||
altq.c | ||
dummynet.c | ||
ipfw2.c | ||
ipfw2.h | ||
ipfw.8 | ||
ipv6.c | ||
main.c | ||
Makefile | ||
nat.c |