git: ipfw: Add defrag action.

[Sepherosa Ziehau]

commit 6998b2437c1fb70d9beaa294270a5eaac85a0dd7
Author: Sepherosa Ziehau <sephe at dragonflybsd.org>
Date:   Sat Sep 16 14:17:52 2017 +0800

    ipfw: Add defrag action.
    
    IP fragment reassembling is almost required for stateful firewall,
    and will be needed for in-kernel NAT.
    
    NOTE: Reassemabled IP packets will be passed to the next rule for
    further evaluation.

Summary of changes:
 sbin/ipfw/ipfw.8       |  21 +++
 sbin/ipfw/ipfw2.c      |  11 ++
 sys/net/if_ethersubr.c |   1 +
 sys/net/ipfw/ip_fw2.c  | 391 +++++++++++++++++++++++++++++++++++++++++++++++--
 sys/net/ipfw/ip_fw2.h  |  19 ++-
 sys/net/pf/pf.c        |   5 +
 sys/netinet/ip_input.c |  15 +-
 sys/sys/mbuf.h         |   2 +-
 8 files changed, 445 insertions(+), 20 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/6998b2437c1fb70d9beaa294270a5eaac85a0dd7


-- 
DragonFly BSD source repository