K 10
svn:author
V 5
luigi
K 8
svn:date
V 27
2009-02-20T00:39:39.474726Z
K 7
svn:log
V 896
MFC: sync the ipfw code with the version in HEAD.

The only new feature is that now one can write
"table all {flush | list}" to act on all tables.

Just for the records, there is one difference which probably
has no practical importance; two "tos" flags are represented
differently now:

@@ -182,8 +182,8 @@ static struct _s_x f_iptos[] = {
 	{ "throughput",	IPTOS_THROUGHPUT},
 	{ "reliability", IPTOS_RELIABILITY},
 	{ "mincost",	IPTOS_MINCOST},
-	{ "congestion",	IPTOS_CE},
-	{ "ecntransport", IPTOS_ECT},
+	{ "congestion",	IPTOS_ECN_CE},
+	{ "ecntransport", IPTOS_ECN_ECT0},
 	{ "ip tos option", 0},
 	{ NULL,	0 }
 };

IPTOS_ECT = IPTOS_ECN_ECT0 = 2 so 'ecntransport' is the same.

IPTOS_CE = 1, IPTOS_ECN_CE = 3 so 'congestion' is represented by a
different codepoint, but this also reflects a different specification
(RFC3168 obsoletes RFC2481) so the change is just adopting the new
spec.

END