git: pf: Update packetfilter to OpenBSD 4.4
Jan Lentfer
lentferj at crater.dragonflybsd.org
Fri Dec 31 07:10:26 PST 2010
commit ed1f0be2a62c659ca93a1a1d83ade5a772127bc3
Author: Jan Lentfer <Jan.Lentfer at web.de>
Date: Mon Oct 11 18:01:08 2010 +0200
pf: Update packetfilter to OpenBSD 4.4
* As correct pf function depends directly on pfsync now
compile if_pfsyn.c into pf.ko. pflog is already part
of pf.ko.
* Activate pfsync function by default. It's not a kernel
option anymore, but pfsync is very unlikley to work.
Anyway our ifconfig is missing all pfsync related options.
I will try to make pfsync working again after upgrading to
pf from OpenBSD 4.5 as pfsync changes completley then
and is not compatible anymore with prior versions.
* Also make the module unloading sane in if_pflog.c
Thanks to Alex Hornung and Aggelos Economopoulos for debugging.
Summary of changes:
sys/conf/files | 2 +-
sys/net/pf/Makefile | 5 +-
sys/net/pf/if_pflog.c | 20 +-
sys/net/pf/if_pfsync.c | 358 +++--
sys/net/pf/if_pfsync.h | 88 +-
sys/net/pf/pf.c | 2905 +++++++++++++++++++++------------------
sys/net/pf/pf_if.c | 72 +-
sys/net/pf/pf_ioctl.c | 394 ++----
sys/net/pf/pf_norm.c | 43 +-
sys/net/pf/pf_osfp.c | 14 +-
sys/net/pf/pf_subr.c | 57 +-
sys/net/pf/pf_table.c | 58 +-
sys/net/pf/pfvar.h | 271 +++--
sys/netinet/in_pcb.c | 28 +
sys/netinet/in_pcb.h | 23 +
sys/netproto/ipsec/esp_var.h | 3 +
sys/sys/mbuf.h | 13 +
usr.sbin/pfctl/parse.y | 1448 +++++++++++++-------
usr.sbin/pfctl/pf_print_state.c | 129 ++-
usr.sbin/pfctl/pfctl.8 | 71 +-
usr.sbin/pfctl/pfctl.c | 168 ++-
usr.sbin/pfctl/pfctl.h | 7 +-
usr.sbin/pfctl/pfctl_altq.c | 16 +-
usr.sbin/pfctl/pfctl_optimize.c | 17 +-
usr.sbin/pfctl/pfctl_parser.c | 32 +-
usr.sbin/pfctl/pfctl_parser.h | 6 +-
usr.sbin/pfctl/pfctl_qstats.c | 6 +-
usr.sbin/pfctl/pfctl_radix.c | 51 +-
usr.sbin/pfctl/pfctl_table.c | 13 +-
29 files changed, 3582 insertions(+), 2736 deletions(-)
http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/ed1f0be2a62c659ca93a1a1d83ade5a772127bc3
--
DragonFly BSD source repository
More information about the Commits
mailing list