summaryrefslogtreecommitdiff
path: root/sys/modules/ipfilter
AgeCommit message (Collapse)Author
2025-12-08ipfilter: Disable ipfs(8) by defaultCy Schubert
At the moment ipfs(8) is a tool that can be easily abused. Though the concept is sound the implementation needs some work. ipfs(8) should be considered experimental at the moment. This commit also makes ipfs support in the kernel optional. Reviewed by: emaste, glebius MFC after: 1 week Differential revision: https://reviews.freebsd.org/D53787
2024-07-15Remove residual blank line at start of MakefileWarner Losh
This is a residual of the $FreeBSD$ removal. MFC After: 3 days (though I'll just run the command on the branches) Sponsored by: Netflix
2023-08-16sys: Remove $FreeBSD$: one-line sh patternWarner Losh
Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
2021-12-20ipfilter: Move kernel bits to netpfilCy Schubert
Through fixes and improvements our ipfilter sources have diverged enough to warrant move from contrib into sys/netpil. Now that I'm planning on implementing MSS clamping as in iptables it makes more sense to move ipfilter to netpfil. This is the first of three commits the ipfilter move. Suggested by glebius on two occaions. Suggested by and discussed with: glebius Reviewed by: glebius, kp (for #network) MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D33510
2021-09-29modules: a lot: need opt_kern_tls.hKyle Evans
This fixes the standalone build.
2019-06-06Whitespace adjustment.Cy Schubert
MFC after: 3 days Notes: svn path=/head/; revision=348718
2018-05-19Silence non-actionable warnings in vendor codeMatt Macy
We can't modify vendor code so there's no signal in warnings from it. Similarly -Waddress-of-packed-member is not useful on networking code as access to packed structures is fundamental to its operation. Notes: svn path=/head/; revision=333819
2017-03-04sys/modules: normalize .CURDIR-relative paths to SRCTOPEnji Cooper
This simplifies make output/logic Tested with: `cd sys/modules; make ALL_MODULES=` on amd64 MFC after: 1 month Sponsored by: Dell EMC Isilon Notes: svn path=/head/; revision=314651
2015-01-03Re-support CWARNFLAGS, lost when bsd.sys.mk was removed. Also, supportWarner Losh
CWARNFALGS.$file centrally so we don't have to have it in all the places. Remove a few warning flags that are no longer needed. Also, always use -Wno-unknown-pragma to (hopefully temporarily) work around #pragma ident in debug.h in the opensolaris code. Remove some stale warning suppression that's no longer necessary. Notes: svn path=/head/; revision=276606
2014-08-04Move most of the 15 variations on generating opt_inet.h andWarner Losh
opt_inet6.h into kmod.mk by forcing almost everybody to eat the same dogfood. While at it, consolidate the opt_bpf.h and opt_mroute.h targets here too. Notes: svn path=/head/; revision=269540
2014-05-06Use src.opts.mk in preference to bsd.own.mk except where we need stuffWarner Losh
from the latter. Notes: svn path=/head/; revision=265420
2013-12-29Turn off warnings about unused variables for a bunch of files underDimitry Andric
contrib/ipfilter. MFC after: 3 days Notes: svn path=/head/; revision=260039
2013-09-06Update ipfilter 4.1.28 --> 5.1.2.Cy Schubert
Approved by: glebius (mentor) BSD Licensed by: Darren Reed <darrenr@reed.wattle.id.au> (author) Notes: svn path=/head/; revision=255332
2011-12-30Disable several instances instances of clang's -Wself-assign warning.Dimitry Andric
All of these are harmless, and are in fact used to shut up warnings from lint. While here, remove -Wno-missing-prototypes from the xfs module Makefile, as I could not reproduce those warnings either with gcc or clang. MFC after: 1 week Notes: svn path=/head/; revision=228994
2006-03-17Reimplementation of world/kernel build options. For details, see:Ruslan Ermilov
http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) Notes: svn path=/head/; revision=156813
2005-10-14Let modules use the kernel's opt_*.h files if built along withYaroslav Tykhiy
the kernel by wrapping all targets for fake opt_*.h files in .if defined(KERNBUILDDIR). Thus, such fake files won't be created at all if modules are built with the kernel. Some modules undergo cleanup like removing unused or unneeded options or .h files, without which they wouldn't build this way or the other. Reviewed by: ru Tested by: no binary changes in modules built alone Tested on: i386 sparc64 amd64 Notes: svn path=/head/; revision=151350
2005-06-03Fix standalone module build.Ruslan Ermilov
Reported by: Boris Samorodov <bsam@ipt.ru> Notes: svn path=/head/; revision=146934
2005-04-25new files and compile defines to build new ipfilterDarren Reed
Notes: svn path=/head/; revision=145523
2004-12-25Don't define PFIL_HOOKS. It's no longer required in RELENG_5 or HEAD.Scott Long
Notes: svn path=/head/; revision=139283
2004-12-21NOINET6 -> NO_INET6Ruslan Ermilov
Notes: svn path=/head/; revision=139115
2004-06-08Recognise NOINET6 as an indication to not build IPv6 enabled source evenDarren Reed
if FreeBSD header files, etc, support it. Submitted by: Sergey Mokryshev <mokr@mokr.net> Notes: svn path=/head/; revision=130253
2004-04-20IPv6 is on by default in GENERIC so enable IPv6 in IPFilter too by default.Darren Reed
PR: kern/57730 Submitted by: FUKAUMI Naoki <fukaumi@soum.co.jp> Notes: svn path=/head/; revision=128476
2003-09-23update to reflect PFIL_HOOKS api changesSam Leffler
Supported by: FreeBSD Foundation Notes: svn path=/head/; revision=120387
2002-01-11Drop <bsd.man.mk> support from <bsd.kmod.mk>.Ruslan Ermilov
Not objected to by: -current Notes: svn path=/head/; revision=89260
2001-06-07Relocate IPFilter from sys/netinet to sys/contrib/ipfilter.Jonathan Lemon
Notes: svn path=/head/; revision=77854
2001-01-06Use a consistent style and one much closer to the rest of /usr/srcDavid E. O'Brien
Notes: svn path=/head/; revision=70711
2000-09-04Fix typoGregory Neil Shapiro
Notes: svn path=/head/; revision=65423
2000-08-01Back out opt_ipfilter.h creation I add recently and add -DIPFILTER=1Andrey A. Chernov
to CFLAGS instead According to other sources, opt_ipfilter.h not supposed to be included for modules Notes: svn path=/head/; revision=64082
2000-08-01Fix prev. commit: NIPFILTER -> IPFILTERAndrey A. Chernov
Notes: svn path=/head/; revision=64079
2000-07-31Generate opt_ipfilter.h to fix 'make depend'Andrey A. Chernov
Notes: svn path=/head/; revision=64077
2000-05-27Use .include <bsd.kmod.mk> to get to ../../*/conf/kmod.mk instead ofPeter Wemm
encoding the relative path. Notes: svn path=/head/; revision=60966
2000-05-04Pull in sys/conf/kmod.mk, rather than /usr/share/mk/bsd.kmod.mk.Peter Wemm
This means that the kernel can be totally self contained now and is not dependent on the last buildworld to update /usr/share/mk. This might also make it easier to build 5.x kernels on 4.0 boxes etc, assuming gensetdefs and config(8) are updated. Notes: svn path=/head/; revision=59951
1999-12-06Add forgotten ip_fil.c and fil.c to kld versionGuido van Rooij
Remove mlfk_ipl.c from here: no sources allowed in these directories! Notes: svn path=/head/; revision=54220
1999-11-23Add ipfilter kld and wire it in.Guido van Rooij
Notes: svn path=/head/; revision=53646
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-20 19:10:20 +0000