HardenedBSD/sys/modules/ipfw_pmod/Makefile

.PATH: ${SRCTOP}/sys/netpfil/ipfw/pmod

KMOD=   ipfw_pmod
SRCS=   ip_fw_pmod.c tcpmod.c opt_inet.h opt_inet6.h

.include <bsd.kmod.mk>
Add ipfw_pmod kernel module. The module is designed for modification of a packets of any protocols. For now it implements only TCP MSS modification. It adds the external action handler for "tcp-setmss" action. A rule with tcp-setmss action does additional check for protocol and TCP flags. If SYN flag is present, it parses TCP options and modifies MSS option if its value is greater than configured value in the rule. Then it adjustes TCP checksum if needed. After handling the search continues with the next rule. Obtained from: Yandex LLC MFC after: 2 weeks Relnotes: yes Sponsored by: Yandex LLC No objection from: #network Differential Revision: https://reviews.freebsd.org/D10150 2017-04-03 05:07:48 +02:00			`.PATH: ${SRCTOP}/sys/netpfil/ipfw/pmod`

			`KMOD= ipfw_pmod`
			`SRCS= ip_fw_pmod.c tcpmod.c opt_inet.h opt_inet6.h`

			`.include <bsd.kmod.mk>`