git: ipfw3nat: ICMP packets NAT using icmp id

2021-06-21 Thread Bill Yuan


commit eb4c9e6d01df1803b884c6499ab99062a4453975
Author: Bill Yuan 
Date:   Mon Jun 21 23:04:33 2021 +0800

ipfw3nat: ICMP packets NAT using icmp id

TCP/UDP are using tuple(srcip,srcport,dstip, dstport),
while ICMP is using tuple(srcip, icmp_id, dstip, icmp_id)

icmp_id after NAT is generated using srcip & dstip

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 14 ++
 1 file changed, 10 insertions(+), 4 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/eb4c9e6d01df1803b884c6499ab99062a4453975


-- 
DragonFly BSD source repository


git: ipfw3: allow the ipfw_insn with only the basic action

2019-02-12 Thread Bill Yuan


commit 72ce8e08d0708ac9f09d9cda56e3308ad8dcec48
Author: Bill Yuan 
Date:   Tue Feb 12 14:17:11 2019 +

ipfw3: allow the ipfw_insn with only the basic action

Summary of changes:
 sys/net/ipfw3/ip_fw3.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/72ce8e08d0708ac9f09d9cda56e3308ad8dcec48


-- 
DragonFly BSD source repository


git: ipfw3: insert the new rule in the beginning

2019-01-07 Thread Bill Yuan


commit 372a54ac58f64460077ee278a828abd020f53915
Author: Your Name 
Date:   Mon Jan 7 08:03:12 2019 +

ipfw3: insert the new rule in the beginning

"ipfw3 add" is still the same, while the "ipfw3 insert" is the new method
which will insert the new rule in the beginning of the rule list.

Summary of changes:
 sbin/ipfw3/ipfw3.8 |  4 ++--
 sbin/ipfw3/ipfw3.c |  9 +++--
 sbin/ipfw3/ipfw3.h |  2 +-
 sys/net/ipfw3/ip_fw3.c | 10 --
 sys/net/ipfw3/ip_fw3.h |  1 +
 5 files changed, 19 insertions(+), 7 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/372a54ac58f64460077ee278a828abd020f53915


-- 
DragonFly BSD source repository


git: ipfw3_nat: highspeed lockless in-kernel NAT

2018-05-12 Thread Bill Yuan

commit 4408d5485757eef6e44859025e931d1c1b6746c4
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sat May 12 15:26:07 2018 +

ipfw3_nat: highspeed lockless in-kernel NAT

RB-Tree to stored the state for the outgoing packets, and multidimentional
array of pointers to keep the state for the incoming packets.

Summary of changes:
 lib/libipfw3/basic/ipfw3_basic.c   |2 +-
 lib/libipfw3/basic/ipfw3_basic.h   |6 +-
 lib/libipfw3/dummynet/ipfw3_dummynet.c |2 +-
 lib/libipfw3/dummynet/ipfw3_dummynet.h |6 +-
 lib/libipfw3/layer2/ipfw3_layer2.c |2 +-
 lib/libipfw3/layer2/ipfw3_layer2.h |6 +-
 lib/libipfw3/layer4/ipfw3_layer4.c |2 +-
 lib/libipfw3/layer4/ipfw3_layer4.h |6 +-
 lib/libipfw3/nat/ipfw3_nat.c   |2 +-
 lib/libipfw3/nat/ipfw3_nat.h   |6 +-
 sbin/ipfw3/Makefile|6 +
 sbin/ipfw3/ipfw3.c | 2203 +++-
 sbin/ipfw3/ipfw3.h |   44 +-
 sbin/ipfw3/ipfw3basic.c|  148 ++
 .../nat/ipfw3_nat.h => sbin/ipfw3/ipfw3basic.h |   12 +-
 sbin/ipfw3/ipfw3dummynet.c |  727 +++
 .../nat/ipfw3_nat.h => sbin/ipfw3/ipfw3dummynet.h  |   20 +-
 sbin/ipfw3/ipfw3log.c  |  138 ++
 .../nat/ipfw3_nat.h => sbin/ipfw3/ipfw3log.h   |9 +-
 sbin/ipfw3/ipfw3nat.c  |6 +-
 sbin/ipfw3/ipfw3set.c  |  264 +++
 .../ipfw3_dummynet.h => sbin/ipfw3/ipfw3set.h  |   15 +-
 sbin/ipfw3/{ipfw3nat.c => ipfw3state.c}|  227 +-
 .../nat/ipfw3_nat.h => sbin/ipfw3/ipfw3state.h |   15 +-
 sbin/ipfw3/ipfw3sync.c |   80 +-
 sbin/ipfw3/ipfw3sync.h |   27 +-
 sbin/ipfw3/ipfw3table.c|  493 +
 .../nat/ipfw3_nat.h => sbin/ipfw3/ipfw3table.h |   19 +-
 sys/net/dummynet3/Makefile |   20 +-
 sys/net/dummynet3/ip_dummynet3.c   |   20 +-
 sys/net/ipfw3/Makefile |   10 +-
 sys/net/ipfw3/ip_fw3.c | 1225 +++
 sys/net/ipfw3/ip_fw3.h |  408 ++--
 sys/net/ipfw3/ip_fw3_glue.c|2 -
 sys/net/ipfw3/ip_fw3_set.c |  286 +++
 .../ip_fw3_layer4.h => ipfw3/ip_fw3_set.h} |   35 +-
 sys/net/ipfw3_basic/Makefile   |   25 +-
 sys/net/ipfw3_basic/ip_fw3_basic.c |  683 +-
 sys/net/ipfw3_basic/ip_fw3_basic.h |  110 +-
 sys/net/{ipfw3 => ipfw3_basic}/ip_fw3_log.c|   63 +-
 sys/net/{ipfw3 => ipfw3_basic}/ip_fw3_log.h|7 +-
 sys/net/ipfw3_basic/ip_fw3_state.c |  728 +++
 sys/net/ipfw3_basic/ip_fw3_state.h |  113 +
 sys/net/{ipfw3 => ipfw3_basic}/ip_fw3_sync.c   |  210 +-
 sys/net/{ipfw3 => ipfw3_basic}/ip_fw3_sync.h   |   68 +-
 sys/net/{ipfw3 => ipfw3_basic}/ip_fw3_table.c  |   88 +-
 sys/net/{ipfw3 => ipfw3_basic}/ip_fw3_table.h  |   61 +-
 sys/net/ipfw3_layer2/Makefile  |   17 +
 sys/net/ipfw3_layer2/ip_fw3_layer2.c   |   44 +-
 sys/net/ipfw3_layer2/ip_fw3_layer2.h   |4 +-
 sys/net/ipfw3_layer4/Makefile  |   17 +
 sys/net/ipfw3_layer4/ip_fw3_layer4.c   |   38 +-
 sys/net/ipfw3_layer4/ip_fw3_layer4.h   |8 +-
 sys/net/ipfw3_nat/Makefile |   17 +
 sys/net/ipfw3_nat/ip_fw3_nat.c |  385 ++--
 sys/net/ipfw3_nat/ip_fw3_nat.h |   33 +-
 56 files changed, 4842 insertions(+), 4376 deletions(-)
 create mode 100644 sbin/ipfw3/ipfw3basic.c
 copy lib/libipfw3/nat/ipfw3_nat.h => sbin/ipfw3/ipfw3basic.h (82%)
 create mode 100644 sbin/ipfw3/ipfw3dummynet.c
 copy lib/libipfw3/nat/ipfw3_nat.h => sbin/ipfw3/ipfw3dummynet.h (75%)
 create mode 100644 sbin/ipfw3/ipfw3log.c
 copy lib/libipfw3/nat/ipfw3_nat.h => sbin/ipfw3/ipfw3log.h (90%)
 create mode 100644 sbin/ipfw3/ipfw3set.c
 copy lib/libipfw3/dummynet/ipfw3_dummynet.h => sbin/ipfw3/ipfw3set.h (80%)
 copy sbin/ipfw3/{ipfw3nat.c => ipfw3state.c} (54%)
 copy lib/libipfw3/nat/ipfw3_nat.h => sbin/ipfw3/ipfw3state.h (82%)
 create mode 100644 sbin/ipfw3/ipfw3table.c
 copy lib/libipfw3/nat/ipfw3_nat.h => sbin/ipfw3/ipfw3table.h (75%)
 create mode 100644 sys/net/ipfw3/ip_fw3_set.c
 copy sys/net/{ipfw3_layer4/ip_fw3_layer4.h => ipfw3/ip_fw3_set.h} (70%)
 rename sys/net/{ipfw3 => ipfw3_basic}/ip_fw3_log.c (80%)
 rename sys/net/{ipfw3 => ipfw3_basic}/ip_fw3_log.h (90%)
 create mode 100644 sys/net/ipfw3_basic/ip_fw3_state.c
 create mode 1

git: ipfw3nat: remove the state from the proper tree

2018-04-19 Thread Bill Yuan

commit aa7fb6bf5e7e4d48dc8cf9d93e7afdaa859e5ad9
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Thu Apr 19 19:06:43 2018 +

ipfw3nat: remove the state from the proper tree

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/aa7fb6bf5e7e4d48dc8cf9d93e7afdaa859e5ad9


-- 
DragonFly BSD source repository


git: ipfw3: format

2018-04-13 Thread Bill Yuan

commit 2490fdca7831b74fe92d4417c3b2d398e45fc342
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 15:29:47 2018 +

ipfw3: format

Summary of changes:
 sbin/ipfw3/ipfw3.c |  6 +++---
 sbin/ipfw3/ipfw3.h | 25 -
 2 files changed, 15 insertions(+), 16 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/2490fdca7831b74fe92d4417c3b2d398e45fc342


-- 
DragonFly BSD source repository


git: ipfw3: remove legacy macros

2018-04-13 Thread Bill Yuan

commit dff1aee318da12a7d029cee39dbaf75e1c0ebfb2
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 15:36:40 2018 +

ipfw3: remove legacy macros

Summary of changes:
 sbin/ipfw3/ipfw3.c | 28 
 sys/net/ipfw3/ip_fw3.h |  4 
 sys/net/ipfw3_basic/ip_fw3_basic.c |  2 --
 3 files changed, 34 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/dff1aee318da12a7d029cee39dbaf75e1c0ebfb2


-- 
DragonFly BSD source repository


git: ipfw3: list loaded modules

2018-04-13 Thread Bill Yuan

commit 992b3001a225605640debab1be6feab6e367bb5e
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 15:15:38 2018 +

ipfw3: list loaded modules

Summary of changes:
 sbin/ipfw3/ipfw3.c | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/992b3001a225605640debab1be6feab6e367bb5e


-- 
DragonFly BSD source repository


git: ipfw3nat: move the implementation back to *.c file

2018-04-13 Thread Bill Yuan

commit ca9d3a28c645288aa7e0b6f0148024b0b9624dd7
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 15:11:46 2018 +

ipfw3nat: move the implementation back to *.c file

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 3 +++
 sys/net/ipfw3_nat/ip_fw3_nat.h | 2 --
 2 files changed, 3 insertions(+), 2 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/ca9d3a28c645288aa7e0b6f0148024b0b9624dd7


-- 
DragonFly BSD source repository


git: ipfw3layer2: misc

2018-04-13 Thread Bill Yuan

commit c8237cdf06613fb24fa44df43ba7d2d7bdb65b5f
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 07:09:07 2018 +

ipfw3layer2: misc

Summary of changes:
 sys/net/ipfw3_layer2/ip_fw3_layer2.c | 17 -
 sys/net/ipfw3_layer2/ip_fw3_layer2.h | 19 ---
 2 files changed, 16 insertions(+), 20 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/c8237cdf06613fb24fa44df43ba7d2d7bdb65b5f


-- 
DragonFly BSD source repository


git: ipfw3basic: misc

2018-04-13 Thread Bill Yuan

commit e600b76a58a2998a35c8c4e7cb5bd695a57e4046
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 06:43:39 2018 +

ipfw3basic: misc

Summary of changes:
 sys/net/ipfw3_basic/ip_fw3_basic.c | 124 ++---
 sys/net/ipfw3_basic/ip_fw3_basic.h |  72 +++--
 2 files changed, 98 insertions(+), 98 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/e600b76a58a2998a35c8c4e7cb5bd695a57e4046


-- 
DragonFly BSD source repository


git: ipfw3nat: kernel NAT without libalias

2018-04-13 Thread Bill Yuan

commit 936e3df8407a4355546904e5115a254b482c5f3a
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 04:25:53 2018 +

ipfw3nat: kernel NAT without libalias

More than just one address can be configured in each NAT
configuraton and each coming packet will be translated to
one of these addresses randomly.

e.g.
ipfw3 nat 1 config ip 192.168.1.1 192.168.1.2

A schedule will automatically purge the expired translations.
and its interval can be configure via below sysctl variables.
net.inet.ip.fw3_nat.udp_timeout
net.inet.ip.fw3_nat.tcp_timeout
net.inet.ip.fw3_nat.icmp_timeout

Summary of changes:
 sbin/ipfw3/ipfw3.8 |  47 +++-
 sbin/ipfw3/ipfw3nat.c  | 180 +
 sbin/ipfw3/ipfw3nat.h  |  20 +-
 sys/net/ipfw3_nat/ip_fw3_nat.c | 560 ++---
 sys/net/ipfw3_nat/ip_fw3_nat.h |  81 +++---
 5 files changed, 468 insertions(+), 420 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/936e3df8407a4355546904e5115a254b482c5f3a


-- 
DragonFly BSD source repository


git: ipfw3nat: a cleanup callout to purge the expired translations

2018-04-13 Thread Bill Yuan

commit e4bab6156507a930e33e44424154db1c9257fc01
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 02:08:26 2018 +

ipfw3nat: a cleanup callout to purge the expired translations

sysctl net.inet.ip.fw3_nat.cleanup_interval to configure its interval

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 64 --
 1 file changed, 62 insertions(+), 2 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/e4bab6156507a930e33e44424154db1c9257fc01


-- 
DragonFly BSD source repository


git: ipfw3nat: release the nat context during fini

2018-04-13 Thread Bill Yuan

commit cea1826cb0209f289de2e89cb22abf0f8e81fe89
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 01:54:43 2018 +

ipfw3nat: release the nat context during fini

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 27 ++-
 sys/net/ipfw3_nat/ip_fw3_nat.h |  1 +
 2 files changed, 27 insertions(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/cea1826cb0209f289de2e89cb22abf0f8e81fe89


-- 
DragonFly BSD source repository


git: ipfw3nat: flush all configurations

2018-04-13 Thread Bill Yuan

commit 2c8dcae0d9a5f9b8ec13a513a69ecf92dfc7642c
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 01:49:26 2018 +

ipfw3nat: flush all configurations

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 11 ++-
 1 file changed, 10 insertions(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/2c8dcae0d9a5f9b8ec13a513a69ecf92dfc7642c


-- 
DragonFly BSD source repository


git: ipfw3nat: show translations

2018-04-13 Thread Bill Yuan

commit 8e040fac8e31d167998b70dc47c2468c43a4901d
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 02:02:48 2018 +

ipfw3nat: show translations

same as 'show ip nat translations'

Summary of changes:
 sbin/ipfw3/ipfw3nat.c  |  44 ++--
 sys/net/ipfw3_nat/ip_fw3_nat.c | 156 -
 sys/net/ipfw3_nat/ip_fw3_nat.h |  13 ++--
 3 files changed, 181 insertions(+), 32 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/8e040fac8e31d167998b70dc47c2468c43a4901d


-- 
DragonFly BSD source repository


git: ipfw3nat: delete configuration

2018-04-13 Thread Bill Yuan

commit e930ddab9842b8439390b9e84251cff20a2993aa
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 01:47:14 2018 +

ipfw3nat: delete configuration

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 58 +++---
 1 file changed, 54 insertions(+), 4 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/e930ddab9842b8439390b9e84251cff20a2993aa


-- 
DragonFly BSD source repository


git: ipfw3basic: fix `to me`

2018-04-13 Thread Bill Yuan

commit 5945821c55b6616cfcf51bf873f267f1cf67f114
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Apr 13 04:24:58 2018 +

ipfw3basic: fix `to me`

Summary of changes:
 sys/net/ipfw3_basic/ip_fw3_basic.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/5945821c55b6616cfcf51bf873f267f1cf67f114


-- 
DragonFly BSD source repository


git: ipfw3nat: sysctl vars for nat state timeouts

2018-04-11 Thread Bill Yuan

commit f1b0a2e2aec8e5e412942ef50134eaf48c4fe2ba
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Wed Apr 11 22:42:16 2018 +

ipfw3nat: sysctl vars for nat state timeouts

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 17 +
 1 file changed, 13 insertions(+), 4 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/f1b0a2e2aec8e5e412942ef50134eaf48c4fe2ba


-- 
DragonFly BSD source repository


git: ipfw3nat: when the nat config is already exists

2018-04-10 Thread Bill Yuan

commit 18025c73de90166dd38ac27aa5f32483854419bc
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Tue Apr 10 09:21:53 2018 +

ipfw3nat: when the nat config is already exists

Summary of changes:
 sbin/ipfw3/ipfw3nat.c  | 13 -
 sys/net/ipfw3_nat/ip_fw3_nat.c |  5 +
 2 files changed, 13 insertions(+), 5 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/18025c73de90166dd38ac27aa5f32483854419bc


-- 
DragonFly BSD source repository


git: ipfw3nat: show nat config in kernel

2018-04-09 Thread Bill Yuan

commit ca8ec5ce630b76d0b704e736e1755efaab9d4290
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Apr 9 14:33:05 2018 +

ipfw3nat: show nat config in kernel

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 32 +++-
 1 file changed, 31 insertions(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/ca8ec5ce630b76d0b704e736e1755efaab9d4290


-- 
DragonFly BSD source repository


git: ipfw3nat: show config in userland

2018-04-09 Thread Bill Yuan

commit 793fbe86ed44dba712cec23371ab1c7ae18e82e7
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Apr 9 14:26:18 2018 +

ipfw3nat: show config in userland

Summary of changes:
 sbin/ipfw3/ipfw3nat.c | 58 ---
 sbin/ipfw3/ipfw3nat.h |  4 +---
 2 files changed, 47 insertions(+), 15 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/793fbe86ed44dba712cec23371ab1c7ae18e82e7


-- 
DragonFly BSD source repository


git: ipfw3nat: func to get new alias

2018-04-09 Thread Bill Yuan

commit 6e433a953cbb9347a2f74931091a82fa4daa1e2d
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Apr 9 14:13:58 2018 +

ipfw3nat: func to get new alias

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 12 
 1 file changed, 12 insertions(+)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/6e433a953cbb9347a2f74931091a82fa4daa1e2d


-- 
DragonFly BSD source repository


git: ipfw3nat: nat func to replace the src or dst

2018-04-09 Thread Bill Yuan

commit 29f13cb6490754babc4058fa2e432c23471f53a9
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Apr 9 13:02:55 2018 +

ipfw3nat: nat func to replace the src or dst

The `src` will be replaced by `alias` when a packet is leaving the system.
Hence, the packet is from `src` to `dst` before been translated. And after
been translated, the packet is from `alias` to `dst`.

The state for outgoing packet will be stored in the nat_context of current
CPU. But due to the nature of the NAT, the returning packet may be handled
by another CPU. Hence, a state for the returning packet will be prepared and
store into the nat_context of the right CPU.

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 242 -
 1 file changed, 240 insertions(+), 2 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/29f13cb6490754babc4058fa2e432c23471f53a9


-- 
DragonFly BSD source repository


git: ipfw3nat: check_nat func

2018-04-09 Thread Bill Yuan

commit a9e52100a5db864a9de6697e684bafd6283a0901
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Apr 9 12:31:05 2018 +

ipfw3nat: check_nat func

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 26 --
 1 file changed, 24 insertions(+), 2 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/a9e52100a5db864a9de6697e684bafd6283a0901


-- 
DragonFly BSD source repository


git: ipfw3nat: add conf in kernel

2018-04-09 Thread Bill Yuan

commit df0c223e23cf6ec002175a0cabe4039392043517
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Apr 9 10:39:07 2018 +

ipfw3nat: add conf in kernel

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 33 +++--
 sys/net/ipfw3_nat/ip_fw3_nat.h |  2 ++
 2 files changed, 33 insertions(+), 2 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/df0c223e23cf6ec002175a0cabe4039392043517


-- 
DragonFly BSD source repository


git: ipfw3nat: nat_config func in userland.

2018-04-09 Thread Bill Yuan

commit 55463125809bb369d2d24faf89b9573f9bb636fe
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Apr 9 10:22:06 2018 +

ipfw3nat: nat_config func in userland.

Summary of changes:
 sbin/ipfw3/ipfw3nat.c | 87 +--
 sbin/ipfw3/ipfw3nat.h | 30 +++---
 2 files changed, 26 insertions(+), 91 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/55463125809bb369d2d24faf89b9573f9bb636fe


-- 
DragonFly BSD source repository


git: ipfw3nat: standardize the function names prefix: ip_fw3_ - function in kernel space ipfw3_ - function in userland.

2018-04-09 Thread Bill Yuan

commit aad10cc678c9714bef0bd1da647c3a89627a74b2
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Apr 9 10:03:20 2018 +

ipfw3nat: standardize the function names
prefix:
ip_fw3_  - function in kernel space
ipfw3_   - function in userland.

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 41 -
 1 file changed, 20 insertions(+), 21 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/aad10cc678c9714bef0bd1da647c3a89627a74b2


-- 
DragonFly BSD source repository


git: ipfw3nat: move implimentation back to *.c file

2018-04-08 Thread Bill Yuan

commit c8ac7327312bdcfc1dd1936dd1bb4ee463217609
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 13:51:25 2018 +

ipfw3nat: move implimentation back to *.c file

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 30 +-
 sys/net/ipfw3_nat/ip_fw3_nat.h | 28 
 2 files changed, 29 insertions(+), 29 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/c8ac7327312bdcfc1dd1936dd1bb4ee463217609


-- 
DragonFly BSD source repository


git: ipfw3nat: cleanup for LINT64 build

2018-04-08 Thread Bill Yuan

commit 4bff212170b32fc3823cc85915a98840480a3ada
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 12:12:00 2018 +

ipfw3nat: cleanup for LINT64 build

Summary of changes:
 sys/net/Makefile   |  2 +-
 sys/net/ipfw3_nat/ip_fw3_nat.h | 26 ++
 2 files changed, 27 insertions(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/4bff212170b32fc3823cc85915a98840480a3ada


-- 
DragonFly BSD source repository


git: ipfw3nat: standardize the function names

2018-04-08 Thread Bill Yuan

commit 71194d7aa5f127eca02130a2c8cf7f9c5e5585b6
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 10:50:58 2018 +

ipfw3nat: standardize the function names

prefix:
ip_fw3_  - function in kernel space
ipfw_- function in userland.

Summary of changes:
 sbin/ipfw3/ipfw3nat.c  |  10 ++--
 sys/net/ipfw3_nat/ip_fw3_nat.c |  34 ++---
 sys/net/ipfw3_nat/ip_fw3_nat.h | 109 +++--
 3 files changed, 84 insertions(+), 69 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/71194d7aa5f127eca02130a2c8cf7f9c5e5585b6


-- 
DragonFly BSD source repository


git: ipfw3nat: remove the module dependency

2018-04-08 Thread Bill Yuan

commit 203ce8b50622e593b521593bfbf8137462fbebaf
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 08:18:12 2018 +

ipfw3nat: remove the module dependency

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 1 -
 1 file changed, 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/203ce8b50622e593b521593bfbf8137462fbebaf


-- 
DragonFly BSD source repository


git: ipfw3nat: cleanup 3

2018-04-08 Thread Bill Yuan

commit f115460084f9ec3a428d1a792a072593feded661
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 07:54:02 2018 +

ipfw3nat: cleanup 3

Summary of changes:
 sbin/ipfw3/ipfw3nat.c | 113 +++---
 1 file changed, 5 insertions(+), 108 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/f115460084f9ec3a428d1a792a072593feded661


-- 
DragonFly BSD source repository


git: ipfw3nat: RB_tree to keep the translation records

2018-04-08 Thread Bill Yuan

commit c42f81665fcbc090645cfb05f13ee034789b2df8
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 07:50:55 2018 +

ipfw3nat: RB_tree to keep the translation records

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.h | 111 ++---
 1 file changed, 71 insertions(+), 40 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/c42f81665fcbc090645cfb05f13ee034789b2df8


-- 
DragonFly BSD source repository


git: ipfw3nat: cleanup 2

2018-04-08 Thread Bill Yuan

commit 825a5d275a1f16e1ff3a3a2d45afd4eef1f41271
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 07:37:54 2018 +

ipfw3nat: cleanup 2

Summary of changes:
 sbin/ipfw3/ipfw3nat.c  | 366 +
 sys/net/ipfw3_nat/ip_fw3_nat.h |  60 +--
 2 files changed, 3 insertions(+), 423 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/825a5d275a1f16e1ff3a3a2d45afd4eef1f41271


-- 
DragonFly BSD source repository


git: ipfw3nat: delete the libalias 2

2018-04-08 Thread Bill Yuan

commit 947e484750f4d308ffe6eaa08040f2faac44761e
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 07:00:22 2018 +

ipfw3nat: delete the libalias 2

Summary of changes:
 etc/mtree/BSD.include.dist | 2 --
 include/Makefile   | 2 +-
 2 files changed, 1 insertion(+), 3 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/947e484750f4d308ffe6eaa08040f2faac44761e


-- 
DragonFly BSD source repository


git: ipfw3nat: delete the libalias 3

2018-04-08 Thread Bill Yuan

commit dc73a0a4a0b674d1426e3dcd239d2885c3ac2c82
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 07:04:17 2018 +

ipfw3nat: delete the libalias 3

Summary of changes:
 sbin/ipfw3/ipfw3.c |   1 -
 sbin/ipfw3/ipfw3nat.c  | 164 +
 sbin/ipfw3/ipfw3sync.c |   1 -
 3 files changed, 3 insertions(+), 163 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/dc73a0a4a0b674d1426e3dcd239d2885c3ac2c82


-- 
DragonFly BSD source repository


git: ipfw3nat: delete the libalias 1

2018-04-08 Thread Bill Yuan

commit c0325b41bb008a939dc801fa2347c46283b296c0
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 06:54:50 2018 +

ipfw3nat: delete the libalias 1

Summary of changes:
 sys/net/libalias/Makefile  |7 -
 sys/net/libalias/alias.c   | 1722 -
 sys/net/libalias/alias.h   |  394 --
 sys/net/libalias/alias_db.c| 2770 
 sys/net/libalias/alias_local.h |  360 --
 sys/net/libalias/alias_mod.c   |  207 ---
 sys/net/libalias/alias_mod.h   |  149 ---
 sys/net/libalias/alias_proxy.c |  972 --
 sys/net/libalias/alias_util.c  |  171 ---
 sys/net/libalias/libalias.3| 1458 -
 10 files changed, 8210 deletions(-)
 delete mode 100644 sys/net/libalias/Makefile
 delete mode 100644 sys/net/libalias/alias.c
 delete mode 100644 sys/net/libalias/alias.h
 delete mode 100644 sys/net/libalias/alias_db.c
 delete mode 100644 sys/net/libalias/alias_local.h
 delete mode 100644 sys/net/libalias/alias_mod.c
 delete mode 100644 sys/net/libalias/alias_mod.h
 delete mode 100644 sys/net/libalias/alias_proxy.c
 delete mode 100644 sys/net/libalias/alias_util.c
 delete mode 100644 sys/net/libalias/libalias.3

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/c0325b41bb008a939dc801fa2347c46283b296c0


-- 
DragonFly BSD source repository


git: ipfw3nat: cleanup

2018-04-08 Thread Bill Yuan

commit fcca67e6e31c86105f5b3f175578068e63a0ff02
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Apr 8 06:41:43 2018 +

ipfw3nat: cleanup

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 617 +
 1 file changed, 12 insertions(+), 605 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/fcca67e6e31c86105f5b3f175578068e63a0ff02


-- 
DragonFly BSD source repository


git: ipfw3: use the headers in include folder

2018-03-21 Thread Bill Yuan

commit 59ea0e348e3404a33ecea8d286cd7aab66fbfab4
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Wed Mar 21 03:08:56 2018 +

ipfw3: use the headers in include folder

Summary of changes:
 lib/libipfw3/basic/ipfw3_basic.c   |  2 +-
 lib/libipfw3/basic/ipfw3_basic.h   |  2 +-
 lib/libipfw3/dummynet/ipfw3_dummynet.c |  2 +-
 lib/libipfw3/dummynet/ipfw3_dummynet.h |  2 +-
 lib/libipfw3/layer2/ipfw3_layer2.c |  2 +-
 lib/libipfw3/layer2/ipfw3_layer2.h |  2 +-
 lib/libipfw3/layer4/ipfw3_layer4.c |  2 +-
 lib/libipfw3/layer4/ipfw3_layer4.h |  2 +-
 lib/libipfw3/nat/ipfw3_nat.c   |  2 +-
 lib/libipfw3/nat/ipfw3_nat.h   |  2 +-
 sbin/ipfw3/ipfw3.c | 14 +++---
 sbin/ipfw3/ipfw3nat.c  | 14 +++---
 sbin/ipfw3/ipfw3sync.c | 14 +++---
 13 files changed, 31 insertions(+), 31 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/59ea0e348e3404a33ecea8d286cd7aab66fbfab4


-- 
DragonFly BSD source repository


git: ipfw3: move the headers into include folder

2018-03-21 Thread Bill Yuan

commit 2190bf6aa45bf912462ba7ddadef1a1fbab61e5e
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Wed Mar 21 03:07:54 2018 +

ipfw3: move the headers into include folder

Summary of changes:
 etc/mtree/BSD.include.dist | 14 ++
 include/Makefile   |  2 ++
 2 files changed, 16 insertions(+)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/2190bf6aa45bf912462ba7ddadef1a1fbab61e5e


-- 
DragonFly BSD source repository


git: ipfw3_nat: move housekeeping into callout func

2017-06-26 Thread Bill Yuan

commit 871caa53921d0b0a6790f841b2d120f78f848711
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Jun 26 23:41:26 2017 +0800

ipfw3_nat: move housekeeping into callout func

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 11 ++-
 sys/net/libalias/alias.c   |  6 --
 2 files changed, 14 insertions(+), 3 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/871caa53921d0b0a6790f841b2d120f78f848711


-- 
DragonFly BSD source repository


git: libalias: pointer for house keeping func

2017-06-26 Thread Bill Yuan

commit fe7c0b15ac0349d8c6a3e85b228b2193589dc3f1
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Jun 26 23:31:59 2017 +0800

libalias: pointer for house keeping func

Summary of changes:
 sys/net/libalias/alias.h| 15 +++
 sys/net/libalias/alias_db.c | 16 
 2 files changed, 19 insertions(+), 12 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/fe7c0b15ac0349d8c6a3e85b228b2193589dc3f1


-- 
DragonFly BSD source repository


git: ipfw3_nat: callout func for nat record cleaning

2017-06-26 Thread Bill Yuan

commit cfac6146223472114a510d09b0462b16e9db1ec5
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Jun 26 23:18:38 2017 +0800

ipfw3_nat: callout func for nat record cleaning

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 30 ++
 1 file changed, 30 insertions(+)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/cfac6146223472114a510d09b0462b16e9db1ec5


-- 
DragonFly BSD source repository


git: ipfw3_nat: new sysctl node 'cleanup_interval'

2017-06-26 Thread Bill Yuan

commit 452fe3bb58b1f438cd0039be9bfd00dfb9f414f2
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Jun 26 23:08:48 2017 +0800

ipfw3_nat: new sysctl node 'cleanup_interval'

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 5 +
 1 file changed, 5 insertions(+)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/452fe3bb58b1f438cd0039be9bfd00dfb9f414f2


-- 
DragonFly BSD source repository


git: libalias: cleanup

2017-06-26 Thread Bill Yuan

commit 966ba416a821973121a024a20b25a79365b2526f
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Jun 26 22:56:16 2017 +0800

libalias: cleanup

Summary of changes:
 sys/net/libalias/HISTORY | 145 ---
 sys/net/libalias/alias_cuseeme.c | 228 ---
 sys/net/libalias/alias_dummy.c   | 152 ---
 sys/net/libalias/alias_ftp.c | 691 ---
 sys/net/libalias/alias_irc.c | 484 --
 sys/net/libalias/alias_nbt.c | 865 ---
 sys/net/libalias/alias_old.c | 216 --
 sys/net/libalias/alias_pptp.c| 523 ---
 sys/net/libalias/alias_skinny.c  | 447 
 sys/net/libalias/alias_smedia.c  | 547 -
 10 files changed, 4298 deletions(-)
 delete mode 100644 sys/net/libalias/HISTORY
 delete mode 100644 sys/net/libalias/alias_cuseeme.c
 delete mode 100644 sys/net/libalias/alias_dummy.c
 delete mode 100644 sys/net/libalias/alias_ftp.c
 delete mode 100644 sys/net/libalias/alias_irc.c
 delete mode 100644 sys/net/libalias/alias_nbt.c
 delete mode 100644 sys/net/libalias/alias_old.c
 delete mode 100644 sys/net/libalias/alias_pptp.c
 delete mode 100644 sys/net/libalias/alias_skinny.c
 delete mode 100644 sys/net/libalias/alias_smedia.c

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/966ba416a821973121a024a20b25a79365b2526f


-- 
DragonFly BSD source repository


git: ipfw3_nat: move func prototype into header

2017-06-26 Thread Bill Yuan

commit 981dc56d272ea4a59767f7ec8cda0e3d39ab847c
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Mon Jun 26 23:03:36 2017 +0800

ipfw3_nat: move func prototype into header

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 16 
 sys/net/ipfw3_nat/ip_fw3_nat.h | 17 +
 2 files changed, 17 insertions(+), 16 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/981dc56d272ea4a59767f7ec8cda0e3d39ab847c


-- 
DragonFly BSD source repository


git: ipfw3: seperate socreate & sobind to support socreate_fast

2017-06-10 Thread Bill Yuan

commit 874ea2a5e70217ca434d5bc07adbb69ce1d03ec6
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Jun 11 00:35:33 2017 +0800

ipfw3: seperate socreate & sobind to support socreate_fast

Summary of changes:
 sys/net/ipfw3/ip_fw3_sync.c | 17 ++---
 1 file changed, 10 insertions(+), 7 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/874ea2a5e70217ca434d5bc07adbb69ce1d03ec6


-- 
DragonFly BSD source repository


git: ipfw3_basic: keep-state is a pseudo filter

2017-06-10 Thread Bill Yuan

commit 1536582db14d39f46b96eaedc8b892e6ec5edadc
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Jun 11 00:25:46 2017 +0800

ipfw3_basic: keep-state is a pseudo filter

Summary of changes:
 sys/net/ipfw3_basic/ip_fw3_basic.c | 10 +++---
 1 file changed, 3 insertions(+), 7 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/1536582db14d39f46b96eaedc8b892e6ec5edadc


-- 
DragonFly BSD source repository


git: ipfw3sync: release mbuf after sync

2017-06-10 Thread Bill Yuan

commit 2032f72fa4bc9355fef4594376299c9aeb707530
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sun Jun 11 00:36:48 2017 +0800

ipfw3sync: release mbuf after sync

Summary of changes:
 sys/net/ipfw3/ip_fw3_sync.c | 1 +
 1 file changed, 1 insertion(+)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/2032f72fa4bc9355fef4594376299c9aeb707530


-- 
DragonFly BSD source repository


git: ipfw3sync: dont call the sync func when centre not running

2017-06-08 Thread Bill Yuan

commit 6750e63177f58c8f6753a0e9bab1095cdecf1ac7
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Jun 9 00:35:55 2017 +0800

ipfw3sync: dont call the sync func when centre not running

Summary of changes:
 sys/net/ipfw3/ip_fw3_sync.c| 4 
 sys/net/ipfw3_basic/ip_fw3_basic.c | 6 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/6750e63177f58c8f6753a0e9bab1095cdecf1ac7


-- 
DragonFly BSD source repository


git: ipfw3sync: comment out the printing

2017-06-07 Thread Bill Yuan

commit bcaa49627614459de43639779474351394d88aef
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Thu Jun 8 08:59:10 2017 +0800

ipfw3sync: comment out the printing

Summary of changes:
 sys/net/ipfw3/ip_fw3_sync.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/bcaa49627614459de43639779474351394d88aef


-- 
DragonFly BSD source repository


git: ipfw3: 'or' supports more filters

2016-11-25 Thread Bill Yuan

commit 5f62bb52012d078d0ea9d67144fad23d1a0c1834
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Sat Nov 26 11:51:21 2016 +

ipfw3: 'or' supports more filters

Summary of changes:
 lib/libipfw3/basic/ipfw3_basic.c   | 85 -
 lib/libipfw3/layer2/ipfw3_layer2.c | 87 +-
 lib/libipfw3/layer4/ipfw3_layer4.c | 25 +++
 3 files changed, 112 insertions(+), 85 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/5f62bb52012d078d0ea9d67144fad23d1a0c1834


-- 
DragonFly BSD source repository


git: ipfw3_nat: kmalloc netmsg from M_LWKTMSG

2016-06-22 Thread Bill Yuan

commit c9b550c11b25dc25914d6c4377ad0b203e64a47c
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Wed Jun 22 19:42:20 2016 +

ipfw3_nat: kmalloc netmsg from M_LWKTMSG

Summary of changes:
 sys/net/ipfw3_nat/ip_fw3_nat.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/c9b550c11b25dc25914d6c4377ad0b203e64a47c


-- 
DragonFly BSD source repository


git: ipfw3: lockless in-kernel NAT

2016-06-21 Thread Bill Yuan

commit 9187b359203f12156672d8e1db35aaca69f1f482
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Tue Jun 21 18:13:10 2016 +

ipfw3: lockless in-kernel NAT

The libalias is used in kernel space for in-kernel NAT, and its alias_link
entries are stored with LIST. so all the packets which need to be NAT will 
scan
against the LIST and trying to find the matched alias_link. by seperating 
the
libalias into context of different CPUs, the lock can be removed. and due 
to the
nature of NAT, the outgoing and incoming packets are possible to be handled 
by
different CPUs, to ensure the returning packet can be translated properly, 
the
newly created alias_link is required to be duplicated and inserted into 
contexts
of both CPUs.

e.g.
ipfw3 nat 1 config if em0
ipfw3 nat 1 all via em0
ipfw3 nat 1 show state

Summary of changes:
 lib/libipfw3/basic/ipfw3_basic.c   |   18 +-
 lib/libipfw3/basic/ipfw3_basic.h   |2 +-
 lib/libipfw3/dummynet/ipfw3_dummynet.c |4 +-
 lib/libipfw3/dummynet/ipfw3_dummynet.h |2 +-
 lib/libipfw3/layer2/ipfw3_layer2.c |4 +-
 lib/libipfw3/layer2/ipfw3_layer2.h |2 +-
 lib/libipfw3/layer4/ipfw3_layer4.c |4 +-
 lib/libipfw3/layer4/ipfw3_layer4.h |2 +-
 lib/libipfw3/nat/ipfw3_nat.c   |6 +-
 lib/libipfw3/nat/ipfw3_nat.h   |4 +-
 sbin/ipfw3/Makefile|7 +-
 sbin/ipfw3/ipfw.h  |   56 --
 sbin/ipfw3/ipfw3.c | 1009 ++-
 sbin/ipfw3/ipfw3.h |  131 
 sbin/ipfw3/ipfw3nat.c  | 1017 
 sbin/ipfw3/{ipfw3sync.h => ipfw3nat.h} |   36 +-
 sbin/ipfw3/ipfw3sync.c |2 +-
 sys/net/dummynet3/ip_dummynet.h|2 +-
 sys/net/ipfw3/ip_fw3.c |   52 +-
 sys/net/ipfw3/ip_fw3.h |9 +-
 sys/net/ipfw3/ip_fw3_log.c |2 +-
 sys/net/ipfw3/ip_fw3_log.h |2 +-
 sys/net/ipfw3/ip_fw3_table.c   |2 +-
 sys/net/ipfw3/ip_fw3_table.h   |2 +-
 sys/net/ipfw3_basic/ip_fw3_basic.c |2 +-
 sys/net/ipfw3_basic/ip_fw3_basic.h |2 +-
 sys/net/ipfw3_layer2/ip_fw3_layer2.c   |2 +-
 sys/net/ipfw3_layer2/ip_fw3_layer2.h   |2 +-
 sys/net/ipfw3_layer4/ip_fw3_layer4.c   |2 +-
 sys/net/ipfw3_layer4/ip_fw3_layer4.h   |2 +-
 sys/net/ipfw3_nat/ip_fw3_nat.c |  670 +
 sys/net/ipfw3_nat/ip_fw3_nat.h |   29 +-
 sys/net/libalias/alias.c   |  121 ++--
 sys/net/libalias/alias.h   |9 +-
 34 files changed, 1800 insertions(+), 1418 deletions(-)
 delete mode 100644 sbin/ipfw3/ipfw.h
 create mode 100644 sbin/ipfw3/ipfw3.h
 create mode 100644 sbin/ipfw3/ipfw3nat.c
 copy sbin/ipfw3/{ipfw3sync.h => ipfw3nat.h} (65%)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/9187b359203f12156672d8e1db35aaca69f1f482


-- 
DragonFly BSD source repository


git: ipfw3: update rule in func skipto

2016-02-26 Thread Bill Yuan

commit f92842b053f70c6b321fc54c133ac74e6ec9c931
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Feb 26 23:17:28 2016 +

ipfw3: update rule in func skipto

Summary of changes:
 sys/net/ipfw3_basic/ip_fw3_basic.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/f92842b053f70c6b321fc54c133ac74e6ec9c931


-- 
DragonFly BSD source repository


git: ipfw3: new feature 'ipfwsync'

2016-02-26 Thread Bill Yuan

commit e2124e7dbcbdb7c52dc235682e17c7c61befd3ee
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Feb 26 22:48:37 2016 +

ipfw3: new feature 'ipfwsync'

ipfwsync is a new feature to synchronize firewall states between machines
which is running ipfw3 firewall for high availability. ipfw3 can be 
configured
in centre or edge mode. the centre will automatically sync the states from
centre to the edge.

e.g.
ipfw3 sync edge 5000
ipfw3 sync start edge

ipfw3 sync centre 192.168.1.1:5000,192.168.1.2:5000
ipfw3 sync start centre

ipfw3 sync show config
ipfw3 sync show status
ipfw3 sync test centre 123

Summary of changes:
 sbin/ipfw3/Makefile|   1 +
 sbin/ipfw3/ipfw3.c |  49 +-
 sbin/ipfw3/ipfw3sync.c | 299 
 .../ipfw3_layer2.h => sbin/ipfw3/ipfw3sync.h   |  21 +-
 sys/conf/files |   1 +
 sys/net/ipfw3/Makefile |   1 +
 sys/net/ipfw3/ip_fw.h  |   2 +-
 sys/net/ipfw3/ip_fw3.c |  24 +-
 sys/net/ipfw3/ip_fw3.h |  18 +-
 sys/net/ipfw3/ip_fw3_sync.c| 499 +
 sys/net/ipfw3/ip_fw3_sync.h| 130 ++
 sys/net/ipfw3_basic/ip_fw3_basic.c |  44 +-
 sys/net/ipfw3_basic/ip_fw3_basic.h |   3 +-
 13 files changed, 1079 insertions(+), 13 deletions(-)
 create mode 100644 sbin/ipfw3/ipfw3sync.c
 copy lib/libipfw3/layer2/ipfw3_layer2.h => sbin/ipfw3/ipfw3sync.h (71%)
 create mode 100644 sys/net/ipfw3/ip_fw3_sync.c
 create mode 100644 sys/net/ipfw3/ip_fw3_sync.h

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/e2124e7dbcbdb7c52dc235682e17c7c61befd3ee


-- 
DragonFly BSD source repository


git: ipfw3: fix func lookup_host

2016-02-25 Thread Bill Yuan

commit dd95fb5d2d072deb8fe86a5823bf3efeab73c20e
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Fri Feb 26 00:26:11 2016 +

ipfw3: fix func lookup_host

Summary of changes:
 lib/libipfw3/basic/ipfw3_basic.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/dd95fb5d2d072deb8fe86a5823bf3efeab73c20e


-- 
DragonFly BSD source repository


git: test commit

2016-02-22 Thread Bill Yuan

commit dcba280656038a6ae3018763dfdbc9594acfe70b
Author: Bill Yuan <byc...@dragonflybsd.org>
Date:   Tue Feb 23 15:30:54 2016 +

test commit

Summary of changes:
 test/test/test123 | 1 +
 1 file changed, 1 insertion(+)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/dcba280656038a6ae3018763dfdbc9594acfe70b


-- 
DragonFly BSD source repository