Skip site navigation (1)Skip section navigation (2)

CVS log for src/sys/netgraph/ng_ipfw.c

[BACK] Up to [FreeBSD] / src / sys / netgraph

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Revision 1.23: download - view: text, markup, annotated - select for diffs
Mon Jan 16 12:33:55 2012 UTC (3 weeks, 4 days ago) by glebius
Branches: MAIN
CVS tags: HEAD
Diff to: previous 1.22: preferred, colored
Changes since revision 1.22: +1 -1 lines
SVN rev 230214 on 2012-01-16 12:33:55Z by glebius

Add missing static.
Revision 1.21.2.1.2.1: download - view: text, markup, annotated - select for diffs
Fri Nov 11 04:20:22 2011 UTC (3 months ago) by kensmith
Branches: RELENG_9_0
CVS tags: RELENG_9_0_0_RELEASE
Diff to: previous 1.21.2.1: preferred, colored; next MAIN 1.22: preferred, colored
Changes since revision 1.21.2.1: +0 -0 lines
SVN rev 227445 on 2011-11-11 04:20:22Z by kensmith

Copy stable/9 to releng/9.0 as part of the FreeBSD 9.0-RELEASE release
cycle.

Approved by:	re (implicit)
Revision 1.22: download - view: text, markup, annotated - select for diffs
Mon Oct 10 09:33:07 2011 UTC (4 months ago) by melifaro
Branches: MAIN
Diff to: previous 1.21: preferred, colored
Changes since revision 1.21: +7 -9 lines
SVN rev 226186 on 2011-10-10 09:33:07Z by melifaro

Free mbuf in case when protocol in unknown in ng_ipfw_rcvdata().
This change fixes (theoretically) possible mbuf leak introduced in
r225586. Reorder code a bit and change return codes to be more specific

Reviewed by:	glebius
Approved by:    kib (mentor)
Revision 1.12.2.5: download - view: text, markup, annotated - select for diffs
Thu Sep 29 15:05:16 2011 UTC (4 months, 1 week ago) by ae
Branches: RELENG_8
Diff to: previous 1.12.2.4: preferred, colored; branchpoint 1.12: preferred, colored; next MAIN 1.13: preferred, colored
Changes since revision 1.12.2.4: +42 -12 lines
SVN rev 225876 on 2011-09-29 15:05:16Z by ae

MFC r225586:
  Add IPv6 support to the ng_ipfw(4) [1]. Also add ifdefs to be able
  build it with and without INET/INET6 support.

  Submitted by:	Alexander V. Chernikov <melifaro at yandex-team.ru> [1]
  Tested by:	Alexander V. Chernikov <melifaro at yandex-team.ru> [1]
Revision 1.21.2.1: download - view: text, markup, annotated - select for diffs
Fri Sep 23 00:51:37 2011 UTC (4 months, 2 weeks ago) by kensmith
Branches: RELENG_9
CVS tags: RELENG_9_0_BP
Branch point for: RELENG_9_0
Diff to: previous 1.21: preferred, colored; next MAIN 1.22: preferred, colored
Changes since revision 1.21: +0 -0 lines
SVN rev 225736 on 2011-09-23 00:51:37Z by kensmith

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by:	re (implicit)
Revision 1.21: download - view: text, markup, annotated - select for diffs
Thu Sep 15 12:28:17 2011 UTC (4 months, 3 weeks ago) by ae
Branches: MAIN
CVS tags: RELENG_9_BP
Branch point for: RELENG_9
Diff to: previous 1.20: preferred, colored
Changes since revision 1.20: +42 -12 lines
SVN rev 225586 on 2011-09-15 12:28:17Z by ae

Add IPv6 support to the ng_ipfw(4) [1]. Also add ifdefs to be able
build it with and without INET/INET6 support.

Submitted by:	Alexander V. Chernikov <melifaro at yandex-team.ru> [1]
Tested by:	Alexander V. Chernikov <melifaro at yandex-team.ru> [1]
Approved by:	re (bz)
MFC after:	2 weeks
Revision 1.9.12.1: download - view: text, markup, annotated - select for diffs
Tue Dec 21 17:10:29 2010 UTC (13 months, 2 weeks ago) by kensmith
Branches: RELENG_7_4
CVS tags: RELENG_7_4_0_RELEASE
Diff to: previous 1.9: preferred, colored; next MAIN 1.10: preferred, colored
Changes since revision 1.9: +0 -0 lines
SVN rev 216618 on 2010-12-21 17:10:29Z by kensmith

Copy stable/7 to releng/7.4 in preparation for FreeBSD-7.4 release.

Approved by:	re (implicit)
Revision 1.12.2.4.2.1: download - view: text, markup, annotated - select for diffs
Tue Dec 21 17:09:25 2010 UTC (13 months, 2 weeks ago) by kensmith
Branches: RELENG_8_2
CVS tags: RELENG_8_2_0_RELEASE
Diff to: previous 1.12.2.4: preferred, colored; next MAIN 1.12.2.5: preferred, colored
Changes since revision 1.12.2.4: +0 -0 lines
SVN rev 216617 on 2010-12-21 17:09:25Z by kensmith

Copy stable/8 to releng/8.2 in preparation for FreeBSD-8.2 release.

Approved by:	re (implicit)
Revision 1.12.2.4: download - view: text, markup, annotated - select for diffs
Thu Sep 16 15:11:17 2010 UTC (16 months, 3 weeks ago) by glebius
Branches: RELENG_8
CVS tags: RELENG_8_2_BP
Branch point for: RELENG_8_2
Diff to: previous 1.12.2.3: preferred, colored; branchpoint 1.12: preferred, colored
Changes since revision 1.12.2.3: +2 -1 lines
SVN rev 212738 on 2010-09-16 15:11:17Z by glebius

MFhead r210537:
  Fix operation of "netgraph" action in conjunction with the
  net.inet.ip.fw.one_pass sysctl.

  PR:           kern/148885
  Submitted by: Nickolay Dudorov <nnd mail.nsk.ru>
Revision 1.20: download - view: text, markup, annotated - select for diffs
Tue Jul 27 14:26:34 2010 UTC (18 months, 2 weeks ago) by glebius
Branches: MAIN
Diff to: previous 1.19: preferred, colored
Changes since revision 1.19: +2 -1 lines
SVN rev 210537 on 2010-07-27 14:26:34Z by glebius

Fix operation of "netgraph" action in conjunction with the
net.inet.ip.fw.one_pass sysctl.

The "ngtee" action is still broken.

PR:		kern/148885
Submitted by:	Nickolay Dudorov <nnd mail.nsk.ru>
Revision 1.12.2.3: download - view: text, markup, annotated - select for diffs
Thu Jul 8 12:21:25 2010 UTC (19 months ago) by glebius
Branches: RELENG_8
Diff to: previous 1.12.2.2: preferred, colored; branchpoint 1.12: preferred, colored
Changes since revision 1.12.2.2: +6 -8 lines
SVN rev 209796 on 2010-07-08 12:21:25Z by glebius

Merge 209633, 209722 from head:

  The struct ipfw_rule_ref follows the struct m_tag. Deal with this
  correctly. This fixes breakage of ng_ipfw(4) in r201527.

Submitted by:	Alexander Zagrebin <alexz visp.ru>

  Avoid double-free. In error cases ipfw(4) frees the mbuf(4), we don't
  need to.

PR:		kern/145462
Revision 1.19: download - view: text, markup, annotated - select for diffs
Tue Jul 6 10:45:38 2010 UTC (19 months ago) by glebius
Branches: MAIN
Diff to: previous 1.18: preferred, colored
Changes since revision 1.18: +1 -4 lines
SVN rev 209722 on 2010-07-06 10:45:38Z by glebius

Avoid double-free. In error cases ipfw(4) frees the mbuf(4), we don't
need to.

PR:		kern/145462
Revision 1.18: download - view: text, markup, annotated - select for diffs
Thu Jul 1 17:46:12 2010 UTC (19 months, 1 week ago) by glebius
Branches: MAIN
Diff to: previous 1.17: preferred, colored
Changes since revision 1.17: +5 -4 lines
SVN rev 209633 on 2010-07-01 17:46:12Z by glebius

The struct ipfw_rule_ref follows the struct m_tag. Deal with this
correctly. This fixes breakage of ng_ipfw(4) in r201527.

Submitted by:	Alexander Zagrebin <alexz visp.ru>
Revision 1.12.2.2.2.1: download - view: text, markup, annotated - select for diffs
Mon Jun 14 02:09:06 2010 UTC (19 months, 4 weeks ago) by kensmith
Branches: RELENG_8_1
CVS tags: RELENG_8_1_0_RELEASE
Diff to: previous 1.12.2.2: preferred, colored; next MAIN 1.12.2.3: preferred, colored
Changes since revision 1.12.2.2: +0 -0 lines
SVN rev 209145 on 2010-06-14 02:09:06Z by kensmith

Copy stable/8 to releng/8.1 in preparation for 8.1-RC1.

Approved by:	re (implicit)
Revision 1.12.2.2: download - view: text, markup, annotated - select for diffs
Tue Mar 23 09:58:59 2010 UTC (22 months, 2 weeks ago) by luigi
Branches: RELENG_8
CVS tags: RELENG_8_1_BP
Branch point for: RELENG_8_1
Diff to: previous 1.12.2.1: preferred, colored; branchpoint 1.12: preferred, colored
Changes since revision 1.12.2.1: +21 -30 lines
SVN rev 205511 on 2010-03-23 09:58:59Z by luigi

MFC of a large number of ipfw and dummynet fixes and enhancements
done in CURRENT over the last 4 months.
HEAD and RELENG_8 are almost in sync now for ipfw, dummynet
the pfil hooks and related components.

Among the most noticeable changes:
- r200855 more efficient lookup of skipto rules, and remove O(N)
  blocks from critical sections in the kernel;
- r204591 large restructuring of the dummynet module, with support
  for multiple scheduling algorithms (4 available so far)
See the original commit logs for details.

Changes in the kernel/userland ABI should be harmless because the
kernel is able to understand previous requests from RELENG_8 and
RELENG_7. For this reason, this changeset would be applicable
to RELENG_7 as well, but i am not sure if it is worthwhile.
Revision 1.9.10.1: download - view: text, markup, annotated - select for diffs
Wed Feb 10 00:26:20 2010 UTC (2 years ago) by kensmith
Branches: RELENG_7_3
CVS tags: RELENG_7_3_0_RELEASE
Diff to: previous 1.9: preferred, colored; next MAIN 1.10: preferred, colored
Changes since revision 1.9: +0 -0 lines
SVN rev 203736 on 2010-02-10 00:26:20Z by kensmith

Copy stable/7 to releng/7.3 as part of the 7.3-RELEASE process.

Approved by:	re (implicit)
Revision 1.17: download - view: text, markup, annotated - select for diffs
Thu Jan 7 14:23:19 2010 UTC (2 years, 1 month ago) by luigi
Branches: MAIN
Diff to: previous 1.16: preferred, colored
Changes since revision 1.16: +1 -1 lines
SVN rev 201748 on 2010-01-07 14:23:19Z by luigi

ip_var.h now needs to be before ip_fw_private.h
Revision 1.16: download - view: text, markup, annotated - select for diffs
Mon Jan 4 19:01:22 2010 UTC (2 years, 1 month ago) by luigi
Branches: MAIN
Diff to: previous 1.15: preferred, colored
Changes since revision 1.15: +19 -30 lines
SVN rev 201527 on 2010-01-04 19:01:22Z by luigi

Various cleanup done in ipfw3-head branch including:
- use a uniform mtag format for all packets that exit and re-enter
  the firewall in the middle of a rulechain. On reentry, all tags
  containing reinject info are renamed to MTAG_IPFW_RULE so the
  processing is simpler.

- make ipfw and dummynet use ip_len and ip_off in network format
  everywhere. Conversion is done only once instead of tracking
  the format in every place.

- use a macro FREE_PKT to dispose of mbufs. This eases portability.

On passing i also removed a few typos, staticise or localise variables,
remove useless declarations and other minor things.

Overall the code shrinks a bit and is hopefully more readable.

I have tested functionality for all but ng_ipfw and if_bridge/if_ethersubr.
For ng_ipfw i am actually waiting for feedback from glebius@ because
we might have some small changes to make.
For if_bridge and if_ethersubr feedback would be welcome
(there are still some redundant parts in these two modules that
I would like to remove, but first i need to check functionality).
Revision 1.15: download - view: text, markup, annotated - select for diffs
Mon Dec 28 10:47:04 2009 UTC (2 years, 1 month ago) by luigi
Branches: MAIN
Diff to: previous 1.14: preferred, colored
Changes since revision 1.14: +3 -3 lines
SVN rev 201122 on 2009-12-28 10:47:04Z by luigi

bring in several cleanups tested in ipfw3-head branch, namely:

r201011
- move most of ng_ipfw.h into ip_fw_private.h, as this code is
  ipfw-specific. This removes a dependency on ng_ipfw.h from some files.

- move many equivalent definitions of direction (IN, OUT) for
  reinjected packets into ip_fw_private.h

- document the structure of the packet tags used for dummynet
  and netgraph;

r201049
- merge some common code to attach/detach hooks into
  a single function.

r201055
- remove some duplicated code in ip_fw_pfil. The input
  and output processing uses almost exactly the same code so
  there is no need to use two separate hooks.
  ip_fw_pfil.o goes from 2096 to 1382 bytes of .text

r201057 (see the svn log for full details)
- macros to make the conversion of ip_len and ip_off
  between host and network format more explicit

r201113 (the remaining parts)
- readability fixes -- put braces around some large for() blocks,
  localize variables so the compiler does not think they are uninitialized,
  do not insist on precise allocation size if we have more than we need.

r201119
- when doing a lookup, keys must be in big endian format because
  this is what the radix code expects (this fixes a bug in the
  recently-introduced 'lookup' option)

No ABI changes in this commit.

MFC after:	1 week
Revision 1.14: download - view: text, markup, annotated - select for diffs
Tue Dec 22 19:01:47 2009 UTC (2 years, 1 month ago) by luigi
Branches: MAIN
Diff to: previous 1.13: preferred, colored
Changes since revision 1.13: +2 -1 lines
SVN rev 200855 on 2009-12-22 19:01:47Z by luigi

merge code from ipfw3-head to reduce contention on the ipfw lock
and remove all O(N) sequences from kernel critical sections in ipfw.

In detail:

 1. introduce a IPFW_UH_LOCK to arbitrate requests from
     the upper half of the kernel. Some things, such as 'ipfw show',
     can be done holding this lock in read mode, whereas insert and
     delete require IPFW_UH_WLOCK.

  2. introduce a mapping structure to keep rules together. This replaces
     the 'next' chain currently used in ipfw rules. At the moment
     the map is a simple array (sorted by rule number and then rule_id),
     so we can find a rule quickly instead of having to scan the list.
     This reduces many expensive lookups from O(N) to O(log N).

  3. when an expensive operation (such as insert or delete) is done
     by userland, we grab IPFW_UH_WLOCK, create a new copy of the map
     without blocking the bottom half of the kernel, then acquire
     IPFW_WLOCK and quickly update pointers to the map and related info.
     After dropping IPFW_LOCK we can then continue the cleanup protected
     by IPFW_UH_LOCK. So userland still costs O(N) but the kernel side
     is only blocked for O(1).

  4. do not pass pointers to rules through dummynet, netgraph, divert etc,
     but rather pass a <slot, chain_id, rulenum, rule_id> tuple.
     We validate the slot index (in the array of #2) with chain_id,
     and if successful do a O(1) dereference; otherwise, we can find
     the rule in O(log N) through <rulenum, rule_id>

All the above does not change the userland/kernel ABI, though there
are some disgusting casts between pointers and uint32_t

Operation costs now are as follows:

  Function				Old	Now	  Planned
-------------------------------------------------------------------
  + skipto X, non cached		O(N)	O(log N)
  + skipto X, cached			O(1)	O(1)
XXX dynamic rule lookup			O(1)	O(log N)  O(1)
  + skipto tablearg			O(N)	O(1)
  + reinject, non cached		O(N)	O(log N)
  + reinject, cached			O(1)	O(1)
  + kernel blocked during setsockopt()	O(N)	O(1)
-------------------------------------------------------------------

The only (very small) regression is on dynamic rule lookup and this will
be fixed in a day or two, without changing the userland/kernel ABI

Supported by: Valeria Paoli
MFC after:	1 month
Revision 1.13: download - view: text, markup, annotated - select for diffs
Tue Dec 15 18:33:12 2009 UTC (2 years, 1 month ago) by luigi
Branches: MAIN
Diff to: previous 1.12: preferred, colored
Changes since revision 1.12: +1 -0 lines
SVN rev 200582 on 2009-12-15 18:33:12Z by luigi

add ip_fw_private.h to ng_ipfw.c, forgotten in previous commit;
comment out remove ip_fw.h from ng_bridge.c, as it seems unused.

MFC after:	1 month
Revision 1.12.2.1.2.1: download - view: text, markup, annotated - select for diffs
Sun Oct 25 01:10:29 2009 UTC (2 years, 3 months ago) by kensmith
Branches: RELENG_8_0
CVS tags: RELENG_8_0_0_RELEASE
Diff to: previous 1.12.2.1: preferred, colored; next MAIN 1.12.2.2: preferred, colored
Changes since revision 1.12.2.1: +0 -0 lines
SVN rev 198460 on 2009-10-25 01:10:29Z by kensmith

Copy stable/8 to releng/8.0 as part of 8.0-RELEASE release procedure.

Approved by:	re (implicit)
Revision 1.12.2.1: download - view: text, markup, annotated - select for diffs
Mon Aug 3 08:13:06 2009 UTC (2 years, 6 months ago) by kensmith
Branches: RELENG_8
CVS tags: RELENG_8_0_BP
Branch point for: RELENG_8_0
Diff to: previous 1.12: preferred, colored
Changes since revision 1.12: +0 -0 lines
SVN rev 196045 on 2009-08-03 08:13:06Z by kensmith

Copy head to stable/8 as part of 8.0 Release cycle.

Approved by:	re (Implicit)
Revision 1.12: download - view: text, markup, annotated - select for diffs
Tue Jun 9 21:27:11 2009 UTC (2 years, 8 months ago) by oleg
Branches: MAIN
CVS tags: RELENG_8_BP
Branch point for: RELENG_8
Diff to: previous 1.11: preferred, colored
Changes since revision 1.11: +2 -0 lines
SVN rev 193859 on 2009-06-09 21:27:11Z by oleg

Close long existed race with net.inet.ip.fw.one_pass = 0:
If packet leaves ipfw to other kernel subsystem (dummynet, netgraph, etc)
it carries pointer to matching ipfw rule. If this packet then reinjected back
to ipfw, ruleset processing starts from that rule. If rule was deleted
meanwhile, due to existed race condition panic was possible (as well as
other odd effects like parsing rules in 'reap list').

P.S. this commit changes ABI so userland ipfw related binaries should be
recompiled.

MFC after:	1 month
Tested by:	Mikolaj Golub
Revision 1.9.8.1: download - view: text, markup, annotated - select for diffs
Wed Apr 15 03:14:26 2009 UTC (2 years, 9 months ago) by kensmith
Branches: RELENG_7_2
CVS tags: RELENG_7_2_0_RELEASE
Diff to: previous 1.9: preferred, colored; next MAIN 1.10: preferred, colored
Changes since revision 1.9: +0 -0 lines
SVN rev 191087 on 2009-04-15 03:14:26Z by kensmith

Create releng/7.2 from stable/7 in preparation for 7.2-RELEASE.

Approved by:	re (implicit)
Revision 1.11: download - view: text, markup, annotated - select for diffs
Wed Dec 10 23:12:39 2008 UTC (3 years, 2 months ago) by zec
Branches: MAIN
Diff to: previous 1.10: preferred, colored
Changes since revision 1.10: +2 -0 lines
SVN rev 185895 on 2008-12-10 23:12:39Z by zec

Conditionally compile out V_ globals while instantiating the appropriate
container structures, depending on VIMAGE_GLOBALS compile time option.

Make VIMAGE_GLOBALS a new compile-time option, which by default will not
be defined, resulting in instatiations of global variables selected for
V_irtualization (enclosed in #ifdef VIMAGE_GLOBALS blocks) to be
effectively compiled out.  Instantiate new global container structures
to hold V_irtualized variables: vnet_net_0, vnet_inet_0, vnet_inet6_0,
vnet_ipsec_0, vnet_netgraph_0, and vnet_gif_0.

Update the VSYM() macro so that depending on VIMAGE_GLOBALS the V_
macros resolve either to the original globals, or to fields inside
container structures, i.e. effectively

#ifdef VIMAGE_GLOBALS
#define V_rt_tables rt_tables
#else
#define V_rt_tables vnet_net_0._rt_tables
#endif

Update SYSCTL_V_*() macros to operate either on globals or on fields
inside container structs.

Extend the internal kldsym() lookups with the ability to resolve
selected fields inside the virtualization container structs.  This
applies only to the fields which are explicitly registered for kldsym()
visibility via VNET_MOD_DECLARE() and vnet_mod_register(), currently
this is done only in sys/net/if.c.

Fix a few broken instances of MODULE_GLOBAL() macro use in SCTP code,
and modify the MODULE_GLOBAL() macro to resolve to V_ macros, which in
turn result in proper code being generated depending on VIMAGE_GLOBALS.

De-virtualize local static variables in sys/contrib/pf/net/pf_subr.c
which were prematurely V_irtualized by automated V_ prepending scripts
during earlier merging steps.  PF virtualization will be done
separately, most probably after next PF import.

Convert a few variable initializations at instantiation to
initialization in init functions, most notably in ipfw.  Also convert
TUNABLE_INT() initializers for V_ variables to TUNABLE_FETCH_INT() in
initializer functions.

Discussed at:	devsummit Strassburg
Reviewed by:	bz, julian
Approved by:	julian (mentor)
Obtained from:	//depot/projects/vimage-commit2/...
X-MFC after:	never
Sponsored by:	NLnet Foundation, The FreeBSD Foundation
Revision 1.9.6.1: download - view: text, markup, annotated - select for diffs
Tue Nov 25 02:59:29 2008 UTC (3 years, 2 months ago) by kensmith
Branches: RELENG_7_1
CVS tags: RELENG_7_1_0_RELEASE
Diff to: previous 1.9: preferred, colored; next MAIN 1.10: preferred, colored
Changes since revision 1.9: +0 -0 lines
SVN rev 185281 on 2008-11-25 02:59:29Z by kensmith

Create releng/7.1 in preparation for moving into RC phase of 7.1 release
cycle.

Approved by:	re (implicit)
Revision 1.10: download - view: text, markup, annotated - select for diffs
Thu Oct 23 15:53:51 2008 UTC (3 years, 3 months ago) by des
Branches: MAIN
Diff to: previous 1.9: preferred, colored
Changes since revision 1.9: +2 -2 lines
SVN rev 184205 on 2008-10-23 15:53:51Z by des

Retire the MALLOC and FREE macros.  They are an abomination unto style(9).

MFC after:	3 months
Revision 1.8.2.1.8.1: download - view: text, markup, annotated - select for diffs
Thu Oct 2 02:57:24 2008 UTC (3 years, 4 months ago) by kensmith
Branches: RELENG_6_4
CVS tags: RELENG_6_4_0_RELEASE
Diff to: previous 1.8.2.1: preferred, colored; next MAIN 1.9: preferred, colored
Changes since revision 1.8.2.1: +0 -0 lines
SVN rev 183531 on 2008-10-02 02:57:24Z by kensmith

Create releng/6.4 from stable/6 in preparation for 6.4-RC1.

Approved by:	re (implicit)
Revision 1.8.2.1: download - view: text, markup, annotated - select for diffs
Fri Feb 17 16:46:47 2006 UTC (5 years, 11 months ago) by ru
Branches: RELENG_6
CVS tags: RELENG_6_4_BP, RELENG_6_3_BP, RELENG_6_3_0_RELEASE, RELENG_6_3, RELENG_6_2_BP, RELENG_6_2_0_RELEASE, RELENG_6_2, RELENG_6_1_BP, RELENG_6_1_0_RELEASE, RELENG_6_1
Branch point for: RELENG_6_4
Diff to: previous 1.8: preferred, colored; next MAIN 1.9: preferred, colored
Changes since revision 1.8: +1 -3 lines
MFC: Fix a bug that prevented passing IP fragments through a dummynet.

Approved by:	re (scottl)
Revision 1.9: download - view: text, markup, annotated - select for diffs
Tue Feb 14 15:22:24 2006 UTC (5 years, 11 months ago) by ru
Branches: MAIN
CVS tags: RELENG_7_BP, RELENG_7_4_BP, RELENG_7_3_BP, RELENG_7_2_BP, RELENG_7_1_BP, RELENG_7_0_BP, RELENG_7_0_0_RELEASE, RELENG_7_0, RELENG_7
Branch point for: RELENG_7_4, RELENG_7_3, RELENG_7_2, RELENG_7_1
Diff to: previous 1.8: preferred, colored
Changes since revision 1.8: +1 -3 lines
Unbreak this.
Revision 1.8: download - view: text, markup, annotated - select for diffs
Sun May 29 12:20:41 2005 UTC (6 years, 8 months ago) by glebius
Branches: MAIN
CVS tags: RELENG_6_BP, RELENG_6_0_BP, RELENG_6_0_0_RELEASE, RELENG_6_0
Branch point for: RELENG_6
Diff to: previous 1.7: preferred, colored
Changes since revision 1.7: +5 -1 lines
Fix check for leading zero, so that it does not block two zeroes
in hook name.
Revision 1.7: download - view: text, markup, annotated - select for diffs
Fri Feb 11 23:17:50 2005 UTC (6 years, 11 months ago) by glebius
Branches: MAIN
Diff to: previous 1.6: preferred, colored
Changes since revision 1.6: +4 -4 lines
style: fix indentation and spacing.

Submitted by:	ru
Revision 1.6: download - view: text, markup, annotated - select for diffs
Fri Feb 11 23:07:22 2005 UTC (6 years, 11 months ago) by glebius
Branches: MAIN
Diff to: previous 1.5: preferred, colored
Changes since revision 1.5: +5 -2 lines
Do not trust ipfw: check m_len always, not only after m_dup.

Submitted by:	ru
Revision 1.5: download - view: text, markup, annotated - select for diffs
Fri Feb 11 22:28:58 2005 UTC (6 years, 11 months ago) by glebius
Branches: MAIN
Diff to: previous 1.4: preferred, colored
Changes since revision 1.4: +4 -3 lines
- do m_pullup() after m_dup()
- clean style in previous commit

Suggested by:	ru
Revision 1.4: download - view: text, markup, annotated - select for diffs
Fri Feb 11 21:26:39 2005 UTC (7 years ago) by glebius
Branches: MAIN
Diff to: previous 1.3: preferred, colored
Changes since revision 1.3: +7 -1 lines
pullup to sizeof struct ip before sending to ip_output.

Suggested by:	ru
Revision 1.3: download - view: text, markup, annotated - select for diffs
Fri Feb 11 20:53:41 2005 UTC (7 years ago) by glebius
Branches: MAIN
Diff to: previous 1.2: preferred, colored
Changes since revision 1.2: +12 -9 lines
Packets from ipfw come with IP header in host byte order. Netgraph works
with net byte order. Change byte order to net in ng_ipfw_input(), change
byte order to host before ip_output(), do not change before ip_input().

In collaboration with:	ru
Revision 1.2: download - view: text, markup, annotated - select for diffs
Mon Feb 7 11:16:07 2005 UTC (7 years ago) by glebius
Branches: MAIN
Diff to: previous 1.1: preferred, colored
Changes since revision 1.1: +8 -6 lines
Improve parsing of hook name.

Submitted by:	ru
Revision 1.1: download - view: text, markup, annotated - select for diffs
Sat Feb 5 12:06:33 2005 UTC (7 years ago) by glebius
Branches: MAIN
Add a ng_ipfw node, implementing a quick and simple interface between
ipfw(4) and netgraph(4) facilities.

Reviewed by:	andre, brooks, julian
Diff request

This form allows you to request diffs between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

Log view options