From owner-cvs-sbin Tue Aug 13 12:44:01 1996 Return-Path: owner-cvs-sbin Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id MAA05689 for cvs-sbin-outgoing; Tue, 13 Aug 1996 12:44:01 -0700 (PDT) Received: (from pst@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id MAA05641; Tue, 13 Aug 1996 12:43:43 -0700 (PDT) Date: Tue, 13 Aug 1996 12:43:43 -0700 (PDT) From: Paul Traina Message-Id: <199608131943.MAA05641@freefall.freebsd.org> To: CVS-committers, cvs-all, cvs-sys, cvs-sbin Subject: cvs commit: src/sbin/ipfw ipfw.8 ipfw.c src/sys/netinet ip_fw.c ip_fw.h Sender: owner-cvs-sbin@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk pst 96/08/13 12:43:43 Modified: sbin/ipfw ipfw.8 ipfw.c Log: Completely rewrite handling of protocol field for firewalls, things are now completely consistent across all IP protocols and should be quite a bit faster. Use getprotoname() extensively, performed minor cleanups of admin utility. The admin utility could use a good kick in the pants. Basicly, these were the minimal changes I could make to the code to get it up to tollerable shape. There will be some future commits to clean up the basic architecture of the firewall code, and if I'm feeling ambitious, I may pull in changes like NAT from Linux and make the firewall hooks comletely generic so that a user can either load the ipfw module or the ipfilter module (cf Darren Reed). Discussed with: fenner & alex Revision Changes Path 1.20 +17 -25 src/sbin/ipfw/ipfw.8 1.32 +55 -105 src/sbin/ipfw/ipfw.c Modified: sys/netinet ip_fw.c ip_fw.h Log: Completely rewrite handling of protocol field for firewalls, things are now completely consistent across all IP protocols and should be quite a bit faster. Discussed with: fenner & alex Revision Changes Path 1.48 +44 -91 src/sys/netinet/ip_fw.c 1.22 +2 -8 src/sys/netinet/ip_fw.h