| #
c1f6704b |
|
15-Oct-2023 |
Elyes Haouas <ehaouas@noos.fr> |
ipf: Fix some typos
Signed-off-by: Elyes Haouas <ehaouas@noos.fr>
|
| #
540be39b |
|
27-Dec-2023 |
Elyes Haouas <ehaouas@noos.fr> |
tree: Use 1 semicolon at the end of a statement
Signed-off-by: Elyes Haouas <ehaouas@noos.fr>
Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/889
|
| #
0939cf32 |
|
01-Jun-2023 |
Elyes Haouas <ehaouas@noos.fr> |
ipf/libipf: Fix typos
Signed-off-by: Elyes Haouas <ehaouas@noos.fr>
Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/653
|
| #
c47db49b |
|
17-Mar-2022 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter: Support only jails in VNET
Jails without VNET have complete access to the ipfilter rules, NAT,
pools and logs. This is insecure. Only allow jails to manipulate
ipfilter rules, NAT tables and ippools if the jail has its own VNET.
Otherwise a jail can affect the global system.
This patch brings ipfilter in line with ipfw's support of VNET jails and
non-support of non-VNET jails.
MFC after: 1 week
|
| #
44bc3019 |
|
03-Jan-2022 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter userland: Style(9) requires a space after return
Reported by: jrtc27
Fixes: 2582ae5740181e0d2bab10003d66ae91c9b56329
MFC after: 1 month
|
| #
2582ae57 |
|
21-Dec-2021 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter: Adjust userland returns to conform to style(9)
Adjust ipfilter's userland return statements to conform to style(9).
MFC after: 1 month
|
| #
efeb8bff |
|
20-Dec-2021 |
Cy Schubert <cy@FreeBSD.org> |
ipflter: ANSIfy userland function declarations
Convert ipfilter userland function declarations from K&R to ANSI. This
syncs our function declarations with NetBSD hg commit 75edcd7552a0
(apply our changes). Though not copied from NetBSD, this change was
partially inspired by NetBSD's work and inspired by style(9).
Reviewed by: glebius (for #network)
MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D33595
|
| #
41edb306 |
|
15-Dec-2021 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter: Move userland bits to sbin
Through fixes and improvements our ipfilter sources have diverged
enough to warrant move from contrib into sbin/ipf. Now that I'm
planning on implementing MSS clamping as in iptables it makes more
sense to move ipfilter to sbin.
This is the second of three commits of the ipfilter move.
Suggested by glebius on two occaions.
Suggested by and discussed with: glebius
Reviewed by: glebius, kp (for #network)
MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D33510
|