From owner-cvs-all@FreeBSD.ORG  Wed May 24 13:16:19 2006
Return-Path: <owner-cvs-all@FreeBSD.ORG>
X-Original-To: cvs-all@FreeBSD.org
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F3F5516A42D;
	Wed, 24 May 2006 13:16:18 +0000 (UTC)
	(envelope-from oleg@lath.rinet.ru)
Received: from lath.rinet.ru (lath.rinet.ru [195.54.192.90])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9C01A43D7D;
	Wed, 24 May 2006 13:16:04 +0000 (GMT)
	(envelope-from oleg@lath.rinet.ru)
Received: from lath.rinet.ru (localhost [127.0.0.1])
	by lath.rinet.ru (8.13.6/8.13.6) with ESMTP id k4ODG2Kv058314
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Wed, 24 May 2006 17:16:02 +0400 (MSD)
	(envelope-from oleg@lath.rinet.ru)
Received: (from oleg@localhost)
	by lath.rinet.ru (8.13.6/8.13.6/Submit) id k4ODG2el058313;
	Wed, 24 May 2006 17:16:02 +0400 (MSD) (envelope-from oleg)
Date: Wed, 24 May 2006 17:16:02 +0400
From: Oleg Bulyzhin <oleg@FreeBSD.org>
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
Message-ID: <20060524131602.GA57006@lath.rinet.ru>
References: <200605241309.k4OD9tex003002@repoman.freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200605241309.k4OD9tex003002@repoman.freebsd.org>
User-Agent: Mutt/1.5.11
Cc: 
Subject: Re: cvs commit: src/sys/netinet ip_fw.h ip_fw2.c src/sbin/ipfw
	ipfw.8 ipfw2.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 24 May 2006 13:16:21 -0000

On Wed, May 24, 2006 at 01:09:55PM +0000, Oleg Bulyzhin wrote:
> oleg        2006-05-24 13:09:55 UTC
> 
>   FreeBSD src repository
> 
>   Modified files:
>     sys/netinet          ip_fw.h ip_fw2.c 
>     sbin/ipfw            ipfw.8 ipfw2.c 
>   Log:
>   Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9).
>   Since tags are kept while packet resides in kernelspace, it's possible to
>   use other kernel facilities (like netgraph nodes) for altering those tags.
>   
>   Submitted by:   Andrey Elsukov <bu7cher at yandex dot ru>
>   Submitted by:   Vadim Goncharov <vadimnuclight at tpu dot ru>
>   Approved by:    glebius (mentor)
>   Idea from:      OpenBSD PF
>   MFC after:      1 month
>   
>   Revision  Changes    Path
>   1.188     +61 -1     src/sbin/ipfw/ipfw.8
>   1.89      +72 -8     src/sbin/ipfw/ipfw2.c
>   1.106     +6 -0      src/sys/netinet/ip_fw.h
>   1.132     +57 -1     src/sys/netinet/ip_fw2.c

Examples of ipfw rules syntax:
	count tag 100 ip from any to any
	allow untag 10 ip from any to any tagged 10
	allow tag 200 ip from any to any not tagged 0-65535

-- 
Oleg.