From owner-freebsd-current@FreeBSD.ORG Mon Jun 21 21:36:27 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D128616A4CE for ; Mon, 21 Jun 2004 21:36:27 +0000 (GMT) Received: from mailtoaster1.pipeline.ch (mailtoaster1.pipeline.ch [62.48.0.70]) by mx1.FreeBSD.org (Postfix) with ESMTP id 16C8E43D2D for ; Mon, 21 Jun 2004 21:36:27 +0000 (GMT) (envelope-from andre@freebsd.org) Received: (qmail 54840 invoked from network); 21 Jun 2004 21:36:26 -0000 Received: from unknown (HELO [62.48.0.47]) ([62.48.0.47]) (envelope-sender ) by mailtoaster1.pipeline.ch (qmail-ldap-1.03) with SMTP for ; 21 Jun 2004 21:36:26 -0000 Message-ID: <40D754D5.1070805@freebsd.org> Date: Mon, 21 Jun 2004 23:36:21 +0200 From: Andre Oppermann User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7) Gecko/20040608 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-current@freebsd.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-net@freebsd.org Subject: New preview patch for ipfw to pfil_hooks conversion X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2004 21:36:28 -0000 Here is the next preview patch for the ipfw to pfil_hooks conversion: http://www.nrg4u.com/freebsd/ipfw-pfilhooks-and-more-20040621.diff This patch significantly cleans up ip_input.c and ip_output.c. The following is included in this patch: o Remove all ipfw related cruft from ip_input() and ip_output() o New ip_fw_pfil.c file which contains all ipfw/pfil_hooks logic o ipfw firewalling, divert and dummynet works fine o ipfw forward is not yet implemented again (comes next) o ipfw layer2 is not yet implemented again (comes next) o ip_reass() is a self-contained function now (external code only relocated) o All IP Options related functions of ip_input/ip_output are moved into their own ip_options.[ch] file to have them together in one place o Some other small work in progress Consider this a FYI. It is very much a WIP at the moment. I want to get this into the tree in before 5.3 code freeze. -- Andre