K 10
svn:author
V 4
oleg
K 8
svn:date
V 27
2006-07-29T08:24:12.000000Z
K 7
svn:log
V 1100
MFC:
src/sys/netinet/ip_dummynet.c rev. 1.101
- Fix following rules: pipe X (tag|altq) Y ...

src/sys/netinet/ip_fw.h rev. 1.106
src/sys/netinet/ip_fw2.c rev. 1.132 1.134 1.135
src/sbin/ipfw/ipfw2.c rev. 1.89 1.91
src/sbin/ipfw/ipfw.8 rev. 1.188 1.189 1.190
- Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9).
  Since tags are kept while packet resides in kernelspace, it's possible to
  use other kernel facilities (like netgraph nodes) for altering those tags.

  Submitted by:   Andrey Elsukov <bu7cher at yandex dot ru>
  Submitted by:   Vadim Goncharov <vadimnuclight at tpu dot ru>

- install_state(): style(9) cleanup

- Add support of 'tablearg' feature for:
  a) 'tag' & 'untag' action parameters.
  b) 'tagged' & 'limit' rule options.

- Minor imporvements to ipfw parser:
  a) new macros:
     GET_UINT_ARG - support of 'tablearg' keyword, argument range checking.
     PRINT_UINT_ARG - support of 'tablearg' keyword.
  b) strtoport(): do not silently truncate/accept invalid port list expressions
     like: '1,2-abc' or '1,2-3-4' or '1,2-3x4', style(9) cleanup.

END