HardenedBSD/sbin/ipfw
Andrey V. Elsukov aac74aeac7 Add ipfw_pmod kernel module.
The module is designed for modification of a packets of any protocols.
For now it implements only TCP MSS modification. It adds the external
action handler for "tcp-setmss" action.

A rule with tcp-setmss action does additional check for protocol and
TCP flags. If SYN flag is present, it parses TCP options and modifies
MSS option if its value is greater than configured value in the rule.
Then it adjustes TCP checksum if needed. After handling the search
continues with the next rule.

Obtained from:	Yandex LLC
MFC after:	2 weeks
Relnotes:	yes
Sponsored by:	Yandex LLC
No objection from: #network
Differential Revision:	https://reviews.freebsd.org/D10150
2017-04-03 03:07:48 +00:00
..
altq.c
dummynet.c
ipfw2.c Add ipfw_pmod kernel module. 2017-04-03 03:07:48 +00:00
ipfw2.h Add ipfw_pmod kernel module. 2017-04-03 03:07:48 +00:00
ipfw.8 Add ipfw_pmod kernel module. 2017-04-03 03:07:48 +00:00
ipv6.c Add missing support of named lookup tables to the IPv6 code. 2016-11-15 07:13:16 +00:00
main.c Add ipfw_nat64 module that implements stateless and stateful NAT64. 2016-08-13 16:09:49 +00:00
Makefile Add ipfw_nat64 module that implements stateless and stateful NAT64. 2016-08-13 16:09:49 +00:00
Makefile.depend
nat64lsn.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
nat64stl.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
nat.c
nptv6.c Make statistics nat64lsn, nat64stl an nptv6 output netstat-like: 2016-08-14 13:17:55 +00:00
tables.c Add ipfw_nat64 module that implements stateless and stateful NAT64. 2016-08-13 16:09:49 +00:00