en Copyright 2025 Java http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#d879f1c8961d99bdbe6727004bfc6c23924526f8 ipfw: Add tests for the NPTv6 rule parser List of files: /src/sbin/ipfw/Makefile Thu, 21 Aug 2025 17:47:41 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /src/sbin/ipfw/Makefile Mon, 15 Jul 2024 04:46:32 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /src/sbin/ipfw/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#0b95680e077b7ef5bc6930c7c0f1a41106251d5d ipfw: Introduce dnctlIntroduce a link to the ipfw command, dnctl, for dummynet configuration.dnctl only handles dummynet configuration, and is part of the effort tosupport dummynet in pf./sbin/ipfw continues to accept pipe, queue and sched commands, but these cannow also be issued via the new dnctl command.Reviewed by: donnerMFC after: 2 weeksSponsored by: Rubicon Communications, LLC ("Netgate")Differential Revision: https://reviews.freebsd.org/D30465 List of files: /src/sbin/ipfw/Makefile Tue, 25 May 2021 14:54:32 +0000 Kristof Provost <kp@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#56707bee4b34c53ade245709397addac02c53726 ipfw(8): Fix most warnings with the default WARNS level.- Add missing const and static qualifiers.- Avoid shadowing the global "co" by renaming it to "g_co".- Avoid mixing signedness in loop bound checks.- Leave -Wcast-align warnings disabled for now.Reviewed by: ae, melifaroMFC after: 2 weeksDifferential Revision: https://reviews.freebsd.org/D25456 List of files: /src/sbin/ipfw/Makefile Mon, 13 Jul 2020 17:51:04 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#2aaf9152a852aba9eb2036b95f4948ee77988826 MFHead@r345275 List of files: /src/sbin/ipfw/Makefile Mon, 18 Mar 2019 19:21:53 +0000 Alan Somers <asomers@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#5c04f73e07b97ba421d072b7679e8ef477b8babc Add NAT64 CLAT implementation as defined in RFC6877.CLAT is customer-side translator that algorithmically translates 1:1private IPv4 addresses to global IPv6 addresses, and vice versa.It is implemented as part of ipfw_nat64 kernel module. When moduleis loaded or compiled into the kernel, it registers "nat64clat" externalaction. External action named instance can be created using `create`command and then used in ipfw rules. The create command accepts twoIPv6 prefixes `plat_prefix` and `clat_prefix`. If plat_prefix is ommitted,IPv6 NAT64 Well-Known prefix 64:ff9b::/96 will be used. # ipfw nat64clat CLAT create clat_prefix SRC_PFX plat_prefix DST_PFX # ipfw add nat64clat CLAT ip4 from IPv4_PFX to any out # ipfw add nat64clat CLAT ip6 from DST_PFX to SRC_PFX inObtained from: Yandex LLCSubmitted by: Boris N. LytochkinMFC after: 1 monthRelnotes: yesSponsored by: Yandex LLC List of files: /src/sbin/ipfw/Makefile Mon, 18 Mar 2019 11:44:53 +0000 Andrey V. Elsukov <ae@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#d879f1c8961d99bdbe6727004bfc6c23924526f8 ipfw: Add tests for the NPTv6 rule parser List of files: /src/sbin/ipfw/Makefile Thu, 21 Aug 2025 17:47:41 +0000 Dag-Erling Smørgrav <des@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /src/sbin/ipfw/Makefile Mon, 15 Jul 2024 04:46:32 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /src/sbin/ipfw/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#0b95680e077b7ef5bc6930c7c0f1a41106251d5d ipfw: Introduce dnctlIntroduce a link to the ipfw command, dnctl, for dummynet configuration.dnctl only handles dummynet configuration, and is part of the effort tosupport dummynet in pf./sbin/ipfw continues to accept pipe, queue and sched commands, but these cannow also be issued via the new dnctl command.Reviewed by: donnerMFC after: 2 weeksSponsored by: Rubicon Communications, LLC ("Netgate")Differential Revision: https://reviews.freebsd.org/D30465 List of files: /src/sbin/ipfw/Makefile Tue, 25 May 2021 14:54:32 +0000 Kristof Provost <kp@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#56707bee4b34c53ade245709397addac02c53726 ipfw(8): Fix most warnings with the default WARNS level.- Add missing const and static qualifiers.- Avoid shadowing the global "co" by renaming it to "g_co".- Avoid mixing signedness in loop bound checks.- Leave -Wcast-align warnings disabled for now.Reviewed by: ae, melifaroMFC after: 2 weeksDifferential Revision: https://reviews.freebsd.org/D25456 List of files: /src/sbin/ipfw/Makefile Mon, 13 Jul 2020 17:51:04 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#2aaf9152a852aba9eb2036b95f4948ee77988826 MFHead@r345275 List of files: /src/sbin/ipfw/Makefile Mon, 18 Mar 2019 19:21:53 +0000 Alan Somers <asomers@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#5c04f73e07b97ba421d072b7679e8ef477b8babc Add NAT64 CLAT implementation as defined in RFC6877.CLAT is customer-side translator that algorithmically translates 1:1private IPv4 addresses to global IPv6 addresses, and vice versa.It is implemented as part of ipfw_nat64 kernel module. When moduleis loaded or compiled into the kernel, it registers "nat64clat" externalaction. External action named instance can be created using `create`command and then used in ipfw rules. The create command accepts twoIPv6 prefixes `plat_prefix` and `clat_prefix`. If plat_prefix is ommitted,IPv6 NAT64 Well-Known prefix 64:ff9b::/96 will be used. # ipfw nat64clat CLAT create clat_prefix SRC_PFX plat_prefix DST_PFX # ipfw add nat64clat CLAT ip4 from IPv4_PFX to any out # ipfw add nat64clat CLAT ip6 from DST_PFX to SRC_PFX inObtained from: Yandex LLCSubmitted by: Boris N. LytochkinMFC after: 1 monthRelnotes: yesSponsored by: Yandex LLC List of files: /src/sbin/ipfw/Makefile Mon, 18 Mar 2019 11:44:53 +0000 Andrey V. Elsukov <ae@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#de68a3200a6cdba2011026d36bea45193363ace0 Allow jail names (not just IDs) to be specified for: cpuset(1), ipfw(8), sockstat(1), ugidfw(8)These are the last of the jail-aware userland utilities that didn't work with names.PR: 229266MFC after: 3 daysDifferential Revision: D16047 List of files: /src/sbin/ipfw/Makefile Tue, 03 Jul 2018 23:47:20 +0000 Jamie Gritton <jamie@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#27067774dce3388702a4cf744d7096c6fb71b688 Merge ^/head r303250 through r304235. List of files: /src/sbin/ipfw/Makefile Tue, 16 Aug 2016 20:19:05 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#f76e5f2087e097d7eb612d831801082262533d2d MFhead @ r304061 List of files: /src/sbin/ipfw/Makefile Sat, 13 Aug 2016 22:51:36 +0000 Enji Cooper <ngie@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#d8caf56e9e9c471ba2adb01c26a4100ef0f8a606 Add ipfw_nat64 module that implements stateless and stateful NAT64.The module works together with ipfw(4) and implemented as its externalaction module.Stateless NAT64 registers external action with name nat64stl. Thiskeyword should be used to create NAT64 instance and to address thisinstance in rules. Stateless NAT64 uses two lookup tables with mappedIPv4->IPv6 and IPv6->IPv4 addresses to perform translation.A configuration of instance should looks like this: 1. Create lookup tables: # ipfw table T46 create type addr valtype ipv6 # ipfw table T64 create type addr valtype ipv4 2. Fill T46 and T64 tables. 3. Add rule to allow neighbor solicitation and advertisement: # ipfw add allow icmp6 from any to any icmp6types 135,136 4. Create NAT64 instance: # ipfw nat64stl NAT create table4 T46 table6 T64 5. Add rules that matches the traffic: # ipfw add nat64stl NAT ip from any to table(T46) # ipfw add nat64stl NAT ip from table(T64) to 64:ff9b::/96 6. Configure DNS64 for IPv6 clients and add route to 64:ff9b::/96 via NAT64 host.Stateful NAT64 registers external action with name nat64lsn. The onlyone option required to create nat64lsn instance - prefix4. It definesthe pool of IPv4 addresses used for translation.A configuration of instance should looks like this: 1. Add rule to allow neighbor solicitation and advertisement: # ipfw add allow icmp6 from any to any icmp6types 135,136 2. Create NAT64 instance: # ipfw nat64lsn NAT create prefix4 A.B.C.D/28 3. Add rules that matches the traffic: # ipfw add nat64lsn NAT ip from any to A.B.C.D/28 # ipfw add nat64lsn NAT ip6 from any to 64:ff9b::/96 4. Configure DNS64 for IPv6 clients and add route to 64:ff9b::/96 via NAT64 host.Obtained from: Yandex LLCRelnotes: yesSponsored by: Yandex LLCDifferential Revision: https://reviews.freebsd.org/D6434 List of files: /src/sbin/ipfw/Makefile Sat, 13 Aug 2016 16:09:49 +0000 Andrey V. Elsukov <ae@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#b867e84e95a6c33895d69e3b9de791e0459cb4b7 Add ipfw_nptv6 module that implements Network Prefix Translation for IPv6as defined in RFC 6296. The module works together with ipfw(4) andimplemented as its external action module. When it is loaded, it registersas eaction and can be used in rules. The usage pattern is similar toipfw_nat(4). All matched by rule traffic goes to the NPT module.Reviewed by: hrsObtained from: Yandex LLCMFC after: 1 monthRelnotes: yesSponsored by: Yandex LLCDifferential Revision: https://reviews.freebsd.org/D6420 List of files: /src/sbin/ipfw/Makefile Mon, 18 Jul 2016 19:46:31 +0000 Andrey V. Elsukov <ae@FreeBSD.org> http://opengrok.net:8080/history/src/sbin/ipfw/Makefile#13caa468668019a6c93ed6ff65ab21c673b378cb Merge the projects/release-pkg branch to head.This allows packaging the base system with pkg(8), includingbut not limited to providing the ability to provide upstreambinary update possibilities for non-tier-1 architectures.This merge is a requirement of the 11.0-RELEASE, and as such,thank you to everyone that has tested the project branch.Documentation in build(7) etc. is still somewhat sparse, butupdates to those parts will follow.Sponsored by: The FreeBSD Foundation List of files: /src/sbin/ipfw/Makefile Sat, 16 Apr 2016 07:45:30 +0000 Glen Barber <gjb@FreeBSD.org>