#
d0b2dbfa |
|
16-Aug-2023 |
Warner Losh <imp@FreeBSD.org> |
Remove $FreeBSD$: one-line sh pattern Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
|
#
0d71f9f3 |
|
26-Mar-2021 |
Kristof Provost <kp@FreeBSD.org> |
pfctl: Move ioctl abstraction functions into libpfctl Introduce a library to wrap the pf ioctl interface. MFC after: 4 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D29562
|
#
0d6c8174 |
|
26-Mar-2021 |
Kristof Provost <kp@FreeBSD.org> |
pfctl: Use the new DIOCGETRULENV ioctl Create wrapper functions to handle the parsing of the nvlist and move that code into pfctl_ioctl.c. At some point this should be moved into a libpfctl. MFC after: 4 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D29560
|
#
5c11c5a3 |
|
12-Mar-2021 |
Kristof Provost <kp@FreeBSD.org> |
pfctl: Move to DIOCADDRULENV Start using the new nvlist based ioctl to add rules. MFC after: 4 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D29558
|
#
fda7daf0 |
|
24-Dec-2020 |
Kristof Provost <kp@FreeBSD.org> |
pfctl: Stop sharing pf_ruleset.c with the kernel Now that we've split up the datastructures used by the kernel and userspace there's essentually no more overlap between the pf_ruleset.c code used by userspace and kernelspace. Copy the userspace bits to the pfctl directory and stop using the kernel file. Reviewed by: philip MFC after: 2 weeks Sponsored by: Orange Business Services Differential Revision: https://reviews.freebsd.org/D27764
|
#
6d76ed56 |
|
11-Aug-2018 |
Brad Davis <brd@FreeBSD.org> |
Move pf.os to sbin/pfctl/ Approved by: will (mentor) Glanced at by: kp Sponsored by: Essen Hackathon Differential Revision: https://reviews.freebsd.org/D16557
|
#
d511b20a |
|
02-Aug-2017 |
Enji Cooper <ngie@FreeBSD.org> |
Add HAS_TESTS to all Makefiles that are currently using the `SUBDIR.${MK_TESTS}+= tests` idiom. This is a follow up to r321912.
|
#
4b330699 |
|
02-Aug-2017 |
Enji Cooper <ngie@FreeBSD.org> |
Convert traditional ${MK_TESTS} conditional idiom for including test directories to SUBDIR.${MK_TESTS} idiom This is being done to pave the way for future work (and homogenity) in ^/projects/make-check-sandbox . No functional change intended. MFC after: 1 weeks
|
#
4d7709dd |
|
15-Jul-2017 |
Kristof Provost <kp@FreeBSD.org> |
pfctl parser tests Copy the most important test cases from OpenBSD's corresponding src/regress/sbin/pfctl, those that run pfctl on a test input file and check correctness of its output. We have also added some new tests using the same format. The tests consist of a collection of input files (pf*.in) and corresponding output files (pf*.ok). We run pfctl -nv on the input files and check that the output matches the output files. If any discrepancy is discovered during future development in the source tree, we know that a regression bug has been introduced into the tree. Submitted by: paggas Sponsored by: Google, Inc (GSoC 2017) Differential Revision: https://reviews.freebsd.org/D11322
|
#
22289a8c |
|
04-Mar-2017 |
Enji Cooper <ngie@FreeBSD.org> |
sbin: normalize paths using SRCTOP-relative paths or :H when possible This simplifies make logic/output MFC after: 1 month Sponsored by: Dell EMC Isilon
|
#
7de1daeb |
|
09-Feb-2016 |
Glen Barber <gjb@FreeBSD.org> |
Create packages for atm, ccdconfig, devd, ipf, ipfw, iscsi, natd, nandfs, pf, quotacheck, and routed. Add ping6 and rtsol to the runtime package. Sponsored by: The FreeBSD Foundation
|
#
13eb765f |
|
25-Nov-2014 |
Baptiste Daroussin <bapt@FreeBSD.org> |
Convert sbin/ to LIBADD Reduce overlinking
|
#
c6063d0d |
|
05-May-2014 |
Warner Losh <imp@FreeBSD.org> |
Use src.opts.mk in preference to bsd.own.mk except where we need stuff from the latter.
|
#
f870cb7f |
|
26-Dec-2013 |
Bjoern A. Zeeb <bz@FreeBSD.org> |
Use feature_present(3) to determine whether to open an INET or an INET6 socket when needed to allow pfctl to work on noinet and noinet6 kernels (and try to provide a fallback using AF_LINK as best effort). Adjust the Makefile to also respect relevant src.conf(5) options for compile time decisions on INET and INET6 support. Reviewed by: glebius (no objections) MFC after: 1 week
|
#
3b3a8eb9 |
|
14-Sep-2012 |
Gleb Smirnoff <glebius@FreeBSD.org> |
o Create directory sys/netpfil, where all packet filters should reside, and move there ipfw(4) and pf(4). o Move most modified parts of pf out of contrib. Actual movements: sys/contrib/pf/net/*.c -> sys/netpfil/pf/ sys/contrib/pf/net/*.h -> sys/net/ contrib/pf/pfctl/*.c -> sbin/pfctl contrib/pf/pfctl/*.h -> sbin/pfctl contrib/pf/pfctl/pfctl.8 -> sbin/pfctl contrib/pf/pfctl/*.4 -> share/man/man4 contrib/pf/pfctl/*.5 -> share/man/man5 sys/netinet/ipfw -> sys/netpfil/ipfw The arguable movement is pf/net/*.h -> sys/net. There are future plans to refactor pf includes, so I decided not to break things twice. Not modified bits of pf left in contrib: authpf, ftp-proxy, tftp-proxy, pflogd. The ipfw(4) movement is planned to be merged to stable/9, to make head and stable match. Discussed with: bz, luigi
|
#
a7d5f7eb |
|
19-Oct-2010 |
Jamie Gritton <jamie@FreeBSD.org> |
A new jail(8) with a configuration file, to replace the work currently done by /etc/rc.d/jail.
|
#
fe0506d7 |
|
09-Mar-2010 |
Marcel Moolenaar <marcel@FreeBSD.org> |
Create the altix project branch. The altix project will add support for the SGI Altix 350 to FreeBSD/ia64. The hardware used for porting is a two-module system, consisting of a base compute module and a CPU expansion module. SGI's NUMAFlex architecture can be an excellent platform to test CPU affinity and NUMA-aware features in FreeBSD.
|
#
106d8391 |
|
19-Oct-2009 |
Ruslan Ermilov <ru@FreeBSD.org> |
Switch the default WARNS level for sbin/ to 6. Submitted by: Ulrich Spörlein
|
#
d7f03759 |
|
19-Oct-2008 |
Ulf Lilleengen <lulf@FreeBSD.org> |
- Import the HEAD csup code which is the basis for the cvsmode work.
|
#
60ee3847 |
|
02-Jul-2007 |
Max Laier <mlaier@FreeBSD.org> |
Link pf 4.1 to the build: - move ftp-proxy from libexec to usr.sbin - add tftp-proxy - new altq mtag link Approved by: re (kensmith)
|
#
e4a92744 |
|
12-Apr-2006 |
Ruslan Ermilov <ru@FreeBSD.org> |
Add missing library dependencies.
|
#
a8a77063 |
|
03-May-2005 |
Max Laier <mlaier@FreeBSD.org> |
Adapt Makefiles for pfctl(8) and authpf(8) to 3.7 sources.
|
#
bda6cef0 |
|
03-Oct-2004 |
Max Laier <mlaier@FreeBSD.org> |
Remove -I from CFLAGS. This splipped in with the 3.5 import (as I was building on a box with older pfvar.h installed). Didn't intend to commit it. Requested by: ru (on a C&P to ipfw's Makefile)
|
#
1f85322c |
|
07-Jul-2004 |
Ruslan Ermilov <ru@FreeBSD.org> |
Removed redundant and unsafe BINDIR redefinition.
|
#
22ac3ead |
|
16-Jun-2004 |
Max Laier <mlaier@FreeBSD.org> |
Commit userland part of pf version 3.5 from OpenBSD (OPENBSD_3_5_BASE).
|
#
278445ba |
|
28-Feb-2004 |
Max Laier <mlaier@FreeBSD.org> |
Add skeleton build dirs for pf userland: libexec/ftp-proxy - ftp proxy for pf sbin/pfctl - equivalent to sbin/ipf sbin/pflogd - deamon logging packets via if_pflog in pcap format usr.sbin/authpf - authentification shell to modify pf rulesets Bring along some altq headers used to satisfy pfctl/authpf compile. This helps to keep the diff down and will make it easy to have a altq-patchset use the full powers of pf. Also make sure that the pf headers are installed. This does not link anything to the build. There will be a NO_PF switch for make.conf once pf userland is linked. Approved by: bms(mentor)
|