head 1.28; access; symbols netbsd-11-0-RC6:1.28 netbsd-11-0-RC5:1.28 netbsd-11-0-RC4:1.28 netbsd-11-0-RC3:1.28 netbsd-11-0-RC2:1.28 netbsd-11-0-RC1:1.28 perseant-exfatfs-base-20250801:1.28 netbsd-11:1.28.0.2 netbsd-11-base:1.28 netbsd-10-1-RELEASE:1.27 perseant-exfatfs-base-20240630:1.27 perseant-exfatfs:1.27.0.34 perseant-exfatfs-base:1.27 netbsd-8-3-RELEASE:1.20 netbsd-9-4-RELEASE:1.27 netbsd-10-0-RELEASE:1.27 netbsd-10-0-RC6:1.27 netbsd-10-0-RC5:1.27 netbsd-10-0-RC4:1.27 netbsd-10-0-RC3:1.27 netbsd-10-0-RC2:1.27 thorpej-ifq:1.27.0.32 thorpej-ifq-base:1.27 thorpej-altq-separation:1.27.0.30 thorpej-altq-separation-base:1.27 netbsd-10-0-RC1:1.27 netbsd-10:1.27.0.28 netbsd-10-base:1.27 bouyer-sunxi-drm:1.27.0.26 bouyer-sunxi-drm-base:1.27 netbsd-9-3-RELEASE:1.27 thorpej-i2c-spi-conf2:1.27.0.24 thorpej-i2c-spi-conf2-base:1.27 thorpej-futex2:1.27.0.22 thorpej-futex2-base:1.27 thorpej-cfargs2:1.27.0.20 thorpej-cfargs2-base:1.27 cjep_sun2x-base1:1.27 cjep_sun2x:1.27.0.18 cjep_sun2x-base:1.27 cjep_staticlib_x-base1:1.27 netbsd-9-2-RELEASE:1.27 cjep_staticlib_x:1.27.0.16 cjep_staticlib_x-base:1.27 thorpej-i2c-spi-conf:1.27.0.14 thorpej-i2c-spi-conf-base:1.27 thorpej-cfargs:1.27.0.12 thorpej-cfargs-base:1.27 thorpej-futex:1.27.0.10 thorpej-futex-base:1.27 netbsd-9-1-RELEASE:1.27 bouyer-xenpvh-base2:1.27 phil-wifi-20200421:1.27 bouyer-xenpvh-base1:1.27 phil-wifi-20200411:1.27 bouyer-xenpvh:1.27.0.8 bouyer-xenpvh-base:1.27 is-mlppp:1.27.0.6 is-mlppp-base:1.27 phil-wifi-20200406:1.27 netbsd-8-2-RELEASE:1.20 ad-namecache-base3:1.27 netbsd-9-0-RELEASE:1.27 netbsd-9-0-RC2:1.27 ad-namecache-base2:1.27 ad-namecache-base1:1.27 ad-namecache:1.27.0.4 ad-namecache-base:1.27 netbsd-9-0-RC1:1.27 phil-wifi-20191119:1.27 netbsd-9:1.27.0.2 netbsd-9-base:1.27 phil-wifi-20190609:1.26 netbsd-8-1-RELEASE:1.20 netbsd-8-1-RC1:1.20 isaki-audio2:1.26.0.2 isaki-audio2-base:1.26 pgoyette-compat-merge-20190127:1.20.14.2 pgoyette-compat-20190127:1.26 pgoyette-compat-20190118:1.26 pgoyette-compat-1226:1.26 pgoyette-compat-1126:1.26 pgoyette-compat-1020:1.21 pgoyette-compat-0930:1.21 pgoyette-compat-0906:1.20 netbsd-7-2-RELEASE:1.14.2.1 pgoyette-compat-0728:1.20 netbsd-8-0-RELEASE:1.20 phil-wifi:1.20.0.16 phil-wifi-base:1.20 pgoyette-compat-0625:1.20 netbsd-8-0-RC2:1.20 pgoyette-compat-0521:1.20 pgoyette-compat-0502:1.20 pgoyette-compat-0422:1.20 netbsd-8-0-RC1:1.20 pgoyette-compat-0415:1.20 pgoyette-compat-0407:1.20 pgoyette-compat-0330:1.20 pgoyette-compat-0322:1.20 pgoyette-compat-0315:1.20 netbsd-7-1-2-RELEASE:1.14.2.1 pgoyette-compat:1.20.0.14 pgoyette-compat-base:1.20 netbsd-7-1-1-RELEASE:1.14.2.1 tls-maxphys-base-20171202:1.20 matt-nb8-mediatek:1.20.0.12 matt-nb8-mediatek-base:1.20 nick-nhusb-base-20170825:1.20 perseant-stdc-iso10646:1.20.0.10 perseant-stdc-iso10646-base:1.20 netbsd-8:1.20.0.8 netbsd-8-base:1.20 prg-localcount2-base3:1.20 prg-localcount2-base2:1.20 prg-localcount2-base1:1.20 prg-localcount2:1.20.0.6 prg-localcount2-base:1.20 pgoyette-localcount-20170426:1.20 bouyer-socketcan-base1:1.20 jdolecek-ncq:1.20.0.4 jdolecek-ncq-base:1.20 pgoyette-localcount-20170320:1.20 netbsd-7-1:1.14.2.1.0.2 netbsd-7-1-RELEASE:1.14.2.1 netbsd-7-1-RC2:1.14.2.1 nick-nhusb-base-20170204:1.20 netbsd-7-nhusb-base-20170116:1.14.2.1 bouyer-socketcan:1.20.0.2 bouyer-socketcan-base:1.20 pgoyette-localcount-20170107:1.20 netbsd-7-1-RC1:1.14.2.1 nick-nhusb-base-20161204:1.17 pgoyette-localcount-20161104:1.17 netbsd-7-0-2-RELEASE:1.14 nick-nhusb-base-20161004:1.17 localcount-20160914:1.17 netbsd-7-nhusb:1.14.0.8 netbsd-7-nhusb-base:1.14 pgoyette-localcount-20160806:1.17 pgoyette-localcount-20160726:1.17 pgoyette-localcount:1.17.0.2 pgoyette-localcount-base:1.17 nick-nhusb-base-20160907:1.17 nick-nhusb-base-20160529:1.17 netbsd-7-0-1-RELEASE:1.14 nick-nhusb-base-20160422:1.17 nick-nhusb-base-20160319:1.17 nick-nhusb-base-20151226:1.16 netbsd-7-0:1.14.0.6 netbsd-7-0-RELEASE:1.14 nick-nhusb-base-20150921:1.15 netbsd-7-0-RC3:1.14 netbsd-7-0-RC2:1.14 netbsd-7-0-RC1:1.14 nick-nhusb-base-20150606:1.14 nick-nhusb-base-20150406:1.14 nick-nhusb:1.14.0.4 nick-nhusb-base:1.14 netbsd-6-1-5-RELEASE:1.2.4.5 netbsd-7:1.14.0.2 netbsd-7-base:1.14 yamt-pagecache-base9:1.13 yamt-pagecache-tag8:1.2.2.3 netbsd-6-1-4-RELEASE:1.2.4.5 tls-earlyentropy:1.13.0.2 tls-earlyentropy-base:1.14 riastradh-xf86-video-intel-2-7-1-pre-2-21-15:1.12 riastradh-drm2-base3:1.12 netbsd-6-1-3-RELEASE:1.2.4.5 netbsd-6-1-2-RELEASE:1.2.4.5 rmind-smpnet-nbase:1.13 netbsd-6-1-1-RELEASE:1.2.4.5 riastradh-drm2-base2:1.7 riastradh-drm2-base1:1.7 riastradh-drm2:1.7.0.4 riastradh-drm2-base:1.7 rmind-smpnet:1.7.0.2 rmind-smpnet-base:1.13 netbsd-6-1:1.2.4.5.0.2 netbsd-6-1-RELEASE:1.2.4.5 khorben-n900:1.6.0.4 netbsd-6-1-RC4:1.2.4.5 netbsd-6-1-RC3:1.2.4.5 agc-symver:1.6.0.2 agc-symver-base:1.6 netbsd-6-1-RC2:1.2.4.5 netbsd-6-1-RC1:1.2.4.5 yamt-pagecache-base8:1.3 yamt-pagecache-base7:1.3 netbsd-6:1.2.0.4 yamt-pagecache:1.2.0.2 yamt-pagecache-base6:1.2 tls-maxphys:1.1.0.2 tls-maxphys-base:1.14; locks; strict; comment @# @; 1.28 date 2025.06.01.00.24.19; author joe; state Exp; branches; next 1.27; commitid ehQ4nypQyUw2y7XF; 1.27 date 2019.07.23.00.52.02; author rmind; state Exp; branches 1.27.34.1; next 1.26; commitid wZghwo6mmoF6u6wB; 1.26 date 2018.10.29.15.37.45; author christos; state Exp; branches; next 1.25; commitid cWtHhV8DkqwbYRXA; 1.25 date 2018.10.26.23.34.32; author christos; state Exp; branches; next 1.24; commitid ieMleycseT4MHwXA; 1.24 date 2018.10.26.06.23.02; author kre; state Exp; branches; next 1.23; commitid FeZNd3mNnFuuZqXA; 1.23 date 2018.10.26.01.33.33; author christos; state Exp; branches; next 1.22; commitid qqHl13s0ESLzopXA; 1.22 date 2018.10.26.00.38.52; author christos; state Exp; branches; next 1.21; commitid ToSSai6m3aKT5pXA; 1.21 date 2018.09.29.14.41.36; author rmind; state Exp; branches; next 1.20; commitid 1PaZzhI9AYpgB0UA; 1.20 date 2017.01.03.03.47.51; author christos; state Exp; branches 1.20.14.1 1.20.16.1; next 1.19; commitid dirpj0Mt7d62otAz; 1.19 date 2016.12.26.23.05.05; author christos; state Exp; branches; next 1.18; commitid dJFKmYYqK2NG2yzz; 1.18 date 2016.12.09.02.50.06; author christos; state Exp; branches; next 1.17; commitid 0rk18gOkfgi2Sfxz; 1.17 date 2016.01.26.23.12.19; author pooka; state Exp; branches 1.17.2.1; next 1.16; commitid kepLkd4K8DWcOuSy; 1.16 date 2015.10.19.16.16.39; author pooka; state Exp; branches; next 1.15; commitid tw5dhIUFxtTYIJFy; 1.15 date 2015.08.20.12.20.09; author christos; state Exp; branches; next 1.14; commitid 9IllBtO49KEam0yy; 1.14 date 2014.07.19.18.24.16; author rmind; state Exp; branches 1.14.2.1 1.14.4.1 1.14.8.1; next 1.13; commitid Elg6KqjwD1P381Jx; 1.13 date 2014.04.04.13.57.33; author njoly; state Exp; branches 1.13.2.1; next 1.12; commitid c5yzxT01J6RZ3nvx; 1.12 date 2014.03.13.02.07.24; author pooka; state Exp; branches; next 1.11; commitid 2UqYPtiM40rjQtsx; 1.11 date 2014.03.03.19.09.52; author pooka; state Exp; branches; next 1.10; commitid aJEDSdPwsQJTOhrx; 1.10 date 2014.03.03.14.01.30; author pooka; state Exp; branches; next 1.9; commitid pi2ho0qCuPDE6grx; 1.9 date 2013.11.08.00.38.27; author rmind; state Exp; branches; next 1.8; commitid XM3mgnNRQpczlpcx; 1.8 date 2013.09.19.01.49.07; author rmind; state Exp; branches; next 1.7; commitid VSNgsNtP8JYImZ5x; 1.7 date 2013.06.02.02.20.04; author rmind; state Exp; branches 1.7.2.1; next 1.6; commitid egs2nvL6L2rz2ZRw; 1.6 date 2013.03.12.21.12.47; author christos; state Exp; branches; next 1.5; 1.5 date 2013.03.10.21.01.19; author christos; state Exp; branches; next 1.4; 1.4 date 2013.02.09.03.35.34; author rmind; state Exp; branches; next 1.3; 1.3 date 2012.11.21.11.03.13; author pooka; state Exp; branches; next 1.2; 1.2 date 2012.09.16.13.47.42; author rmind; state Exp; branches 1.2.2.1 1.2.4.1; next 1.1; 1.1 date 2012.08.14.22.31.44; author rmind; state Exp; branches 1.1.2.1; next ; 1.27.34.1 date 2025.08.02.05.57.53; author perseant; state Exp; branches; next ; commitid 23j6GFaDws3O875G; 1.20.14.1 date 2018.09.30.01.45.57; author pgoyette; state Exp; branches; next 1.20.14.2; commitid SQ44grEPCeKPh4UA; 1.20.14.2 date 2018.11.26.01.52.52; author pgoyette; state Exp; branches; next ; commitid Zj4q5SspGdKXto1B; 1.20.16.1 date 2019.06.10.22.09.54; author christos; state Exp; branches; next 1.20.16.2; commitid jtc8rnCzWiEEHGqB; 1.20.16.2 date 2020.04.13.08.05.19; author martin; state Exp; branches; next ; commitid X01YhRUPVUDaec4C; 1.17.2.1 date 2017.01.07.08.56.52; author pgoyette; state Exp; branches; next ; commitid uEL0C1YuiJrlV0Bz; 1.14.2.1 date 2016.12.18.07.40.50; author snj; state Exp; branches; next ; commitid 7whfpxNdH8btbryz; 1.14.4.1 date 2015.09.22.12.06.16; author skrll; state Exp; branches; next 1.14.4.2; commitid CpNWKp3ozVNTafCy; 1.14.4.2 date 2015.12.27.12.10.18; author skrll; state Exp; branches; next 1.14.4.3; commitid BTSqUD4SdJ5k7AOy; 1.14.4.3 date 2016.03.19.11.30.38; author skrll; state Exp; branches; next 1.14.4.4; commitid 2PHKtPSg1vDV9fZy; 1.14.4.4 date 2017.02.05.13.41.00; author skrll; state Exp; branches; next ; commitid 8hwpk1aHl2UuyLEz; 1.14.8.1 date 2017.01.18.08.46.46; author skrll; state Exp; branches; next ; commitid M6f3RyDtiAR3wqCz; 1.13.2.1 date 2014.08.10.06.56.52; author tls; state Exp; branches; next ; commitid SqReByPtwiDFCMLx; 1.7.2.1 date 2014.05.18.17.46.20; author rmind; state Exp; branches; next ; commitid mL5ZYSzpqK6QS2Bx; 1.2.2.1 date 2012.09.16.13.47.42; author yamt; state dead; branches; next 1.2.2.2; 1.2.2.2 date 2012.10.30.17.22.55; author yamt; state Exp; branches; next 1.2.2.3; 1.2.2.3 date 2013.01.16.05.33.52; author yamt; state Exp; branches; next 1.2.2.4; 1.2.2.4 date 2014.05.22.11.41.17; author yamt; state Exp; branches; next ; commitid VUUXuyNWnt3AKwBx; 1.2.4.1 date 2012.09.16.13.47.42; author riz; state dead; branches; next 1.2.4.2; 1.2.4.2 date 2012.11.18.21.45.08; author riz; state Exp; branches; next 1.2.4.3; 1.2.4.3 date 2012.11.18.22.38.38; author riz; state Exp; branches; next 1.2.4.4; 1.2.4.4 date 2013.02.09.04.13.28; author riz; state Exp; branches; next 1.2.4.5; 1.2.4.5 date 2013.02.11.21.49.50; author riz; state Exp; branches; next ; 1.1.2.1 date 2012.11.20.03.02.51; author tls; state Exp; branches; next 1.1.2.2; 1.1.2.2 date 2013.02.25.00.30.10; author tls; state Exp; branches; next 1.1.2.3; 1.1.2.3 date 2013.06.23.06.20.29; author tls; state Exp; branches; next 1.1.2.4; commitid eVjr9caYRQbRGHUw; 1.1.2.4 date 2014.08.20.00.04.43; author tls; state Exp; branches; next 1.1.2.5; commitid jTnpym9Qu0o4R1Nx; 1.1.2.5 date 2017.12.03.11.39.19; author jdolecek; state Exp; branches; next ; commitid XcIYRZTAh1LmerhA; desc @@ 1.28 log @kernel: extract rules, lookup socket, process filtering, reviews by christos@@ @ text @# $NetBSD: Makefile,v 1.27 2019/07/23 00:52:02 rmind Exp $ # # Public Domain. # NOLINT= # defined S=${.CURDIR}/../../../../ .PATH: ${S}/net/npf ${S}/external/bsd/libnv/dist LIB= rumpnet_npf COMMENT=NPF packet filter IOCONF= NPF.ioconf SRCS= npf.c npf_alg.c npf_conf.c npf_ctl.c npf_handler.c SRCS+= npf_bpf.c npf_if.c npf_inet.c npf_mbuf.c npf_nat.c SRCS+= npf_params.c npf_ruleset.c npf_rproc.c SRCS+= npf_conn.c npf_conndb.c npf_connkey.c npf_portmap.c SRCS+= npf_state.c npf_state_tcp.c npf_tableset.c npf_socket.c SRCS+= lpm.c npf_sendpkt.c npf_worker.c npf_os.c npf_ifaddr.c SRCS+= nvlist.c nvpair.c nv_kern_netbsd.c dnvlist.c SRCS+= if_npflog.c SRCS+= npf_alg_icmp.c SRCS+= npf_ext_log.c npf_ext_normalize.c npf_ext_rndblock.c SRCS+= npf_component.c .include CPPFLAGS+= -I ${NETBSDSRCDIR}/sys/external/bsd/libnv/dist .if ${RUMP_NPF_TESTING:Uyes} == "yes" CPPFLAGS+= -D_NPF_TESTING .endif .include .include @ 1.27 log @NPF improvements: - Add support for dynamic NETMAP algorithm (stateful net-to-net). - Add most of the support for the dynamic NAT rules; a little bit more userland work is needed to finish this up and enable. - Replace 'stateful-ends' with more permissive 'stateful-all'. - Add various tunable parameters and document them, see npf-params(7). - Reduce the memory usage of the connection state table (conndb). - Portmap rewrite: use memory more efficiently, handle addresses dynamically. - Bug fix: add splsoftnet()/splx() around the thmap writers and comment. - npftest: clean up and simplify; fix some memleaks to make ASAN happy. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2018/10/29 15:37:45 christos Exp $ d20 1 a20 1 SRCS+= npf_state.c npf_state_tcp.c npf_tableset.c @ 1.27.34.1 log @Sync with HEAD @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.28 2025/06/01 00:24:19 joe Exp $ d20 1 a20 1 SRCS+= npf_state.c npf_state_tcp.c npf_tableset.c npf_socket.c @ 1.26 log @Back to using _NPF_TESTING now that it does not change the semantics of the calls, but only adds extra functionality. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.25 2018/10/26 23:34:32 christos Exp $ d18 2 a19 1 SRCS+= npf_ruleset.c npf_conn.c npf_conndb.c npf_rproc.c @ 1.25 log @add an _NPF_RUMP define to expose the sampling function. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.24 2018/10/26 06:23:02 kre Exp $ a34 1 CPPFLAGS+= -D_NPF_RUMP d36 3 a38 3 #.if ${RUMP_NPF_TESTING:Uyes} == "yes" #CPPFLAGS+= -D_NPF_TESTING #.endif @ 1.24 log @ Revert previous (unbreak build) - for now anyway. It turns out _NPF_TESTING is needed for the (rump only) function npf_state_setsampler() in sys/net/npf/npf_state.c @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.23 2018/10/26 01:33:33 christos Exp $ d35 1 d37 3 a39 3 .if ${RUMP_NPF_TESTING:Uyes} == "yes" CPPFLAGS+= -D_NPF_TESTING .endif @ 1.23 log @Comment out _NPF_TESTING (really should be removed) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.22 2018/10/26 00:38:52 christos Exp $ d36 3 a38 3 #.if ${RUMP_NPF_TESTING:Uyes} == "yes" #CPPFLAGS+= -D_NPF_TESTING #.endif @ 1.22 log @need libnvpair @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2018/09/29 14:41:36 rmind Exp $ d36 3 a38 3 .if ${RUMP_NPF_TESTING:Uyes} == "yes" CPPFLAGS+= -D_NPF_TESTING .endif @ 1.21 log @NPF: Major rework -- migrate NPF to the libnv library. - This conversion significantly simplifies the code and moves NPF to a binary serialisation format (replacing the XML-like format). - Fix some memory/reference leaks and possibly use-after-free bugs. - Bump NPF_VERSION as this change makes libnpf incompatible with the previous versions. Also, different serialisation format means NPF connection/config saving and loading is not compatible with the previous versions either. Thanks to christos@@ for extra testing. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2017/01/03 03:47:51 christos Exp $ d7 3 a10 1 .PATH: ${.CURDIR}/../../../../net/npf d22 2 @ 1.20 log @need new file @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2016/12/26 23:05:05 christos Exp $ d30 2 @ 1.20.16.1 log @Sync with HEAD @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2018/10/29 15:37:45 christos Exp $ a6 3 S=${.CURDIR}/../../../../ .PATH: ${S}/net/npf ${S}/external/bsd/libnv/dist d8 1 a19 2 SRCS+= nvlist.c nvpair.c nv_kern_netbsd.c dnvlist.c a29 2 CPPFLAGS+= -I ${NETBSDSRCDIR}/sys/external/bsd/libnv/dist @ 1.20.16.2 log @Mostly merge changes from HEAD upto 20200411 @ text @d1 1 a1 1 # $NetBSD$ d18 1 a18 2 SRCS+= npf_params.c npf_ruleset.c npf_rproc.c SRCS+= npf_conn.c npf_conndb.c npf_connkey.c npf_portmap.c @ 1.20.14.1 log @Ssync with HEAD @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2018/09/29 14:41:36 rmind Exp $ a29 2 CPPFLAGS+= -I ${NETBSDSRCDIR}/sys/external/bsd/libnv/dist @ 1.20.14.2 log @Sync with HEAD, resolve a couple of conflicts @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2018/10/29 15:37:45 christos Exp $ a6 3 S=${.CURDIR}/../../../../ .PATH: ${S}/net/npf ${S}/external/bsd/libnv/dist d8 1 a19 2 SRCS+= nvlist.c nvpair.c nv_kern_netbsd.c dnvlist.c @ 1.19 log @Sync NPF with the version on github: backport standalone NPF changes, which allow us to create and run separate NPF instances. Minor fixes. (from rmind@@) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2016/12/09 02:50:06 christos Exp $ d18 1 a18 1 SRCS+= lpm.c npf_sendpkt.c npf_worker.c npf_os.c @ 1.18 log @remove ptree add lpm @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2016/01/26 23:12:19 pooka Exp $ d18 1 a18 1 SRCS+= lpm.c npf_sendpkt.c npf_worker.c @ 1.17 log @Put the kernelside rump kernel headers into instead of sprinkling them around the faction directories. Avoids having to add a CPPFLAGS (or several) to pretty much every component Makefile. Leave compat headers around in the old locations. The commit changes some autogenerated files, but I'll fix the generators shortly and regen. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 2015/10/19 16:16:39 pooka Exp $ d18 1 a18 1 SRCS+= npf_tableset_ptree.c npf_sendpkt.c npf_worker.c @ 1.17.2.1 log @Sync with HEAD. (Note that most of these changes are simply $NetBSD$ tag issues.) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2017/01/03 03:47:51 christos Exp $ d18 1 a18 1 SRCS+= lpm.c npf_sendpkt.c npf_worker.c npf_os.c npf_ifaddr.c @ 1.16 log @Add a COMMENT describing what each component roughly does. "make describe" prints the comment. Requested/inspired by Vincent Schwarzer on rumpkernel-users @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2015/08/20 12:20:09 christos Exp $ a32 1 CPPFLAGS+= -I${.CURDIR}/../../../librump/rumpvfs @ 1.15 log @add ioconf files for pseudo device attach prototypes @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2014/07/19 18:24:16 rmind Exp $ d11 2 @ 1.14 log @NPF: partially rewrite the connection tracking mechanism: - Separate the tracking interface from the storage (state table) and thus prepare to use a new data structure for the storage. - Fix some race conditions in NAT association logic. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2014/04/04 13:57:33 njoly Exp $ d11 1 a11 1 @ 1.14.8.1 log @Sync with netbsd-5 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14.2.1 2016/12/18 07:40:50 snj Exp $ d16 1 a16 1 SRCS+= lpm.c npf_sendpkt.c npf_worker.c @ 1.14.2.1 log @Pull up following revision(s) (requested by rmind in ticket #1319): sys/modules/npf/Makefile: revision 1.19 sys/net/npf/files.npf: revision 1.18 sys/net/npf/lpm.c: revision 1.1 sys/net/npf/lpm.h: revision 1.1 sys/net/npf/npf_impl.h: revision 1.62 sys/net/npf/npf_tableset.c: revision 1.24 sys/net/npf/npf_tableset_ptree.c: file removal sys/rump/net/lib/libnpf/Makefile: revision 1.18 This patches ditches the ptree(3) library, because it is broken (you can get missing entries!). Instead, as a temporary solution, we switch to a simple linear scan of the hash tables for the longest-prefix-match (lpm.c lpm.h) algorithm. In fact, with few unique prefixes in the set, on modern hardware this simple algorithm is pretty fast anyway! -- ditch ptree and use lpm -- remove ptree add lpm @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2014/07/19 18:24:16 rmind Exp $ d16 1 a16 1 SRCS+= lpm.c npf_sendpkt.c npf_worker.c @ 1.14.4.1 log @Sync with HEAD @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2015/08/20 12:20:09 christos Exp $ d11 1 a11 1 IOCONF= NPF.ioconf @ 1.14.4.2 log @Sync with HEAD (as of 26th Dec) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14.4.1 2015/09/22 12:06:16 skrll Exp $ a10 2 COMMENT=NPF packet filter @ 1.14.4.3 log @Sync with HEAD @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14.4.2 2015/12/27 12:10:18 skrll Exp $ d33 1 @ 1.14.4.4 log @Sync with HEAD @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14.4.3 2016/03/19 11:30:38 skrll Exp $ d16 1 a16 1 SRCS+= npf_ruleset.c npf_conn.c npf_conndb.c npf_rproc.c d18 1 a18 1 SRCS+= lpm.c npf_sendpkt.c npf_worker.c npf_os.c npf_ifaddr.c @ 1.13 log @No lint for rumpnet npf library. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2014/03/13 02:07:24 pooka Exp $ d14 1 a14 1 SRCS+= npf_ruleset.c npf_rproc.c npf_sendpkt.c npf_session.c d16 3 a18 1 SRCS+= npf_tableset_ptree.c npf_worker.c if_npflog.c @ 1.13.2.1 log @Rebase. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2014/07/19 18:24:16 rmind Exp $ d14 1 a14 1 SRCS+= npf_ruleset.c npf_conn.c npf_conndb.c npf_rproc.c d16 1 a16 3 SRCS+= npf_tableset_ptree.c npf_sendpkt.c npf_worker.c SRCS+= if_npflog.c @ 1.12 log @rename component.c -> npf_component.c @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2014/03/03 19:09:52 pooka Exp $ d6 2 @ 1.11 log @also include bsd.own.mk, so value for RUMP_NPF_TESTING can come from mk.conf @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2014/03/03 14:01:30 pooka Exp $ d20 1 a20 1 SRCS+= component.c @ 1.10 log @For now, make it possible to not specify -D_NPF_TESTING by compiling with RUMP_NPF_TESTING_=no. This in turn makes it possible to use npf in a rump kernel for real packet filtering instead of just testing. no change to default @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2013/11/08 00:38:27 rmind Exp $ d22 2 @ 1.9 log @NPF: add support for specifying the interfaces before they are attached. If an interface is or gets detached, all associated rules and connections will be deactivated (it might be useful to have an option to invalidate the associated connections). Once the interface is reattached they will become active. Bump NPF_VERSION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2013/09/19 01:49:07 rmind Exp $ d22 1 d24 1 @ 1.8 log @NPF: G/C n-code in favour of BPF byte-code. Delete lots of code, mmm! @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2013/06/02 02:20:04 rmind Exp $ d10 5 a14 5 SRCS= npf.c npf_alg.c npf_conf.c npf_ctl.c npf_handler.c npf_bpf.c SRCS+= npf_inet.c npf_mbuf.c npf_nat.c npf_ruleset.c npf_rproc.c SRCS+= npf_sendpkt.c npf_session.c npf_state.c npf_state_tcp.c SRCS+= npf_tableset.c npf_tableset_ptree.c npf_worker.c SRCS+= if_npflog.c @ 1.7 log @- NPF connection tracking: rework synchronisation on tracking disable/enable points and document it. Split the worker thread into a separate module with an interface, so it could be re-used for other tasks. - Replace ALG list with arrays and thus hit fewer cache lines. - Misc bug fixes. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2013/03/12 21:12:47 christos Exp $ d10 3 a12 4 SRCS= npf.c npf_alg.c npf_conf.c npf_ctl.c npf_handler.c SRCS+= npf_inet.c npf_instr.c npf_mbuf.c npf_nat.c SRCS+= npf_processor.c npf_ruleset.c npf_rproc.c npf_sendpkt.c SRCS+= npf_session.c npf_state.c npf_state_tcp.c @ 1.7.2.1 log @sync with head @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2013/06/02 02:20:04 rmind Exp $ a5 2 NOLINT= # defined d11 5 a15 4 SRCS+= npf_bpf.c npf_if.c npf_inet.c npf_mbuf.c npf_nat.c SRCS+= npf_ruleset.c npf_rproc.c npf_sendpkt.c npf_session.c SRCS+= npf_state.c npf_state_tcp.c npf_tableset.c SRCS+= npf_tableset_ptree.c npf_worker.c if_npflog.c d21 1 a21 3 SRCS+= npf_component.c .include a22 1 .if ${RUMP_NPF_TESTING:Uyes} == "yes" a23 1 .endif @ 1.6 log @normali{s,z}e @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2013/03/10 21:01:19 christos Exp $ d14 1 a14 1 SRCS+= npf_tableset.c npf_tableset_ptree.c @ 1.5 log @remember to detach and add if_npflog module @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2013/02/09 03:35:34 rmind Exp $ d19 1 a19 1 SRCS+= npf_ext_log.c npf_ext_normalise.c npf_ext_rndblock.c @ 1.4 log @NPF: - Implement dynamic NPF rules. Controlled through npf(3) library of via npfctl rule command. A rule can be removed using a unique identifier, returned on addition, or using a key which is SHA1 hash of the rule. Adjust npftest and add a regression test. - Improvements to rule inspection mechanism. - Initial BPF support as an alternative to n-code. - Minor fixes; bump the version. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2012/11/21 11:03:13 pooka Exp $ d15 1 @ 1.3 log @This component is not WARNS>3 clean (example: it includes socketvar.h which does signed-unsigned comparison in an inline function). Why it compiled at all is one of those marvels of compiler technology. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2012/09/16 13:47:42 rmind Exp $ d10 1 a10 1 SRCS= npf.c npf_alg.c npf_ctl.c npf_handler.c d18 1 a18 1 SRCS+= npf_ext_log.c npf_ext_normalise.c @ 1.2 log @Implement dynamic NPF extensions interface. An extension consists of dynamically loaded module (.so) supplementing npfctl(8) and a kernel module. Move normalisation and logging functionality into their own extensions. More improvements to come. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2012/08/14 22:31:44 rmind Exp $ a21 2 WARNS= 5 @ 1.2.4.1 log @file Makefile was added on branch netbsd-6 on 2012-11-18 21:45:08 +0000 @ text @d1 28 @ 1.2.4.2 log @Pull up following revision(s) (requested by rmind in ticket #678): sys/rump/librump/rumpkern/rump.c: revision 1.243 sys/rump/librump/rumpkern/rump.c: revision 1.244 sys/rump/librump/rumpkern/rump.c: revision 1.245 sys/rump/librump/rumpkern/rump.c: revision 1.246 usr.sbin/npf/npftest/npftest.c: revision 1.5 usr.sbin/npf/npftest/README: revision 1.2 usr.sbin/npf/npftest/npftest.h: revision 1.5 sys/rump/net/Makefile.rumpnetcomp: revision 1.5 sys/rump/net/lib/libnpf/shlib_version: revision 1.1 sys/net/npf/npf_impl.h: revision 1.22 sys/rump/dev/lib/libnpf/Makefile: file removal usr.sbin/npf/npftest/Makefile: revision 1.3 sys/rump/dev/lib/libnpf/component.c: file removal sys/rump/dev/lib/libnpf/shlib_version: file removal sys/net/npf/npf_state.c: revision 1.12 sys/rump/net/lib/libnpf/component.c: revision 1.1 usr.sbin/npf/npftest/libnpftest/npf_test_subr.c: revision 1.4 usr.sbin/npf/npftest/libnpftest/npf_test.h: revision 1.6 sys/rump/net/lib/libnpf/Makefile: revision 1.1 Move and rename librumpdev_npf to librumpnet_npf. Enable the build of librumpnet_npf. Add npf_state_setsampler() for _NPF_TESTING case. This also fixes the build. Call pserialize_init() during rump start-up, since librump/net/npf uses it. It helps to include the declaration of the routine being called. We also need kcpuset_init() now. Use correct routine name - kcpuset_sysinit() vs kcpuset_init() @ text @a0 24 # $NetBSD: Makefile,v 1.1 2012/08/14 22:31:44 rmind Exp $ # # Public Domain. # .PATH: ${.CURDIR}/../../../../net/npf LIB= rumpnet_npf SRCS= npf.c npf_alg.c npf_ctl.c npf_handler.c SRCS+= npf_inet.c npf_instr.c npf_log.c npf_mbuf.c npf_nat.c SRCS+= npf_processor.c npf_ruleset.c npf_rproc.c npf_sendpkt.c SRCS+= npf_session.c npf_state.c npf_state_tcp.c SRCS+= npf_tableset.c npf_tableset_ptree.c SRCS+= component.c WARNS= 4 CPPFLAGS+= -D_NPF_TESTING CPPFLAGS+= -I${.CURDIR}/../../../librump/rumpvfs .include .include @ 1.2.4.3 log @Pull up following revision(s) (requested by rmind in ticket #693): lib/npf/ext_normalise/shlib_version: revision 1.1 lib/libnpf/npf.c: revision 1.13 distrib/sets/lists/modules/mi: revision 1.48 sys/net/npf/npf_rproc.c: revision 1.3 sys/net/npf/npf_rproc.c: revision 1.4 sys/modules/npf/Makefile: revision 1.11 usr.sbin/npf/npfctl/npfctl.h: revision 1.20 lib/npf/ext_log/npfext_log.c: revision 1.1 lib/libnpf/npf.h: revision 1.11 sys/net/npf/npf_inet.c: revision 1.17 sys/net/npf/npf_log.c: file removal sys/net/npf/npf_handler.c: revision 1.22 distrib/sets/lists/base/shl.mi: revision 1.636 sys/net/npf/npf_impl.h: revision 1.23 usr.sbin/npf/npfctl/Makefile: revision 1.8 lib/npf/Makefile: revision 1.1 lib/npf/ext_log/shlib_version: revision 1.1 lib/Makefile: revision 1.189 distrib/sets/lists/comp/shl.mi: revision 1.236 usr.sbin/npf/npfctl/npf_build.c: revision 1.14 distrib/sets/lists/base/mi: revision 1.1007 usr.sbin/npf/npfctl/npf_scan.l: revision 1.6 distrib/sets/lists/base/mi: revision 1.1009 sys/net/npf/npf.h: revision 1.21 lib/npf/ext_normalise/npfext_normalise.c: revision 1.1 etc/mtree/NetBSD.dist.base: revision 1.105 lib/libnpf/Makefile: revision 1.3 etc/mtree/NetBSD.dist.base: revision 1.106 usr.sbin/npf/npfctl/npf_extmod.c: revision 1.1 sys/net/npf/npf_ctl.c: revision 1.18 lib/npf/ext_log/Makefile: revision 1.1 distrib/sets/lists/comp/mi: revision 1.1781 usr.sbin/npf/npfctl/npf_var.h: revision 1.4 sys/net/npf/npf.c: revision 1.13 sys/modules/Makefile: revision 1.111 sys/net/npf/npf_ext_log.c: revision 1.1 lib/npf/Makefile.inc: revision 1.1 sys/net/npf/npf_ext_normalise.c: revision 1.1 sys/net/npf/files.npf: revision 1.8 sys/rump/net/lib/libnpf/Makefile: revision 1.2 sys/modules/npf_ext_log/Makefile: revision 1.1 lib/npf/ext_normalise/Makefile: revision 1.1 usr.sbin/npf/npfctl/npfctl.c: revision 1.20 usr.sbin/npf/npfctl/npf_parse.y: revision 1.13 sys/modules/npf_ext_normalise/Makefile: revision 1.1 Implement dynamic NPF extensions interface. An extension consists of dynamically loaded module (.so) supplementing npfctl(8) and a kernel module. Move normalisation and logging functionality into their own extensions. More improvements to come. Add /usr/lib/npf. Add ./usr/libdata/debug/usr/lib/npf for rmind Fix MKDEBUG set lists ext_ops does not change during the life cycle and can be fetched without the mutex held. This avoids confusion in the compiler about an uninitialized variable ext_ops. ok rmind@@ @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2.4.2 2012/11/18 21:45:08 riz Exp $ d11 1 a11 1 SRCS+= npf_inet.c npf_instr.c npf_mbuf.c npf_nat.c a15 4 SRCS+= npf_alg_icmp.c SRCS+= npf_ext_log.c npf_ext_normalise.c d18 1 a18 1 WARNS= 5 @ 1.2.4.4 log @sys/kern/uipc_mbuf.c 1.148 sys/net/npf/npf.h 1.25 sys/net/npf/npf_alg.c 1.6 sys/net/npf/npf_alg_icmp.c 1.14 sys/net/npf/npf_ext_log.c 1.2 sys/net/npf/npf_ext_normalise.c 1.2 sys/net/npf/npf_handler.c 1.24-1.25 sys/net/npf/npf_impl.h 1.25 sys/net/npf/npf_inet.c 1.19-1.20 sys/net/npf/npf_instr.c 1.15 sys/net/npf/npf_mbuf.c 1.9-1.10 sys/net/npf/npf_nat.c 1.18 sys/net/npf/npf_processor.c 1.13-1.14 sys/net/npf/npf_rproc.c 1.5 sys/net/npf/npf_ruleset.c 1.15-1.16 sys/net/npf/npf_sendpkt.c 1.13 sys/net/npf/npf_session.c 1.19-1.20 sys/net/npf/npf_state.c 1.13 sys/net/npf/npf_state_tcp.c 1.12 sys/rump/net/lib/libnpf/Makefile 1.3 sys/sys/mbuf.h 1.151 usr.sbin/npf/npfctl/npfctl.c 1.27 usr.sbin/npf/npftest/README 1.3 usr.sbin/npf/npftest/libnpftest/npf_mbuf_subr.c 1.4 usr.sbin/npf/npftest/libnpftest/npf_nat_test.c 1.2 usr.sbin/npf/npftest/libnpftest/npf_nbuf_test.c 1.3-1.4 usr.sbin/npf/npftest/libnpftest/npf_processor_test.c 1.4 usr.sbin/npf/npftest/libnpftest/npf_rule_test.c 1.3 usr.sbin/npf/npftest/libnpftest/npf_state_test.c 1.4 NPF: rework nbuf interface, simplify ICMP ALG, handle ICMP ECHO for traceroute. Misc. other fixes. [rmind, ticket #777] Update ticket #777 to fix build: This component is not WARNS>3 clean (example: it includes socketvar.h which does signed-unsigned comparison in an inline function). Why it compiled at all is one of those marvels of compiler technology. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2012/11/21 11:03:13 pooka Exp $ d22 2 @ 1.2.4.5 log @Pull up following revision(s) (requested by rmind in ticket #817): usr.sbin/npf/npfctl/npfctl.8: revision 1.12 usr.sbin/npf/npfctl/npf.conf.5: revision 1.27 usr.sbin/npf/npfctl/npf_parse.y: revision 1.18 usr.sbin/npf/npfctl/npf_build.c: revision 1.20 usr.sbin/npf/npfctl/npfctl.c: revision 1.28 lib/libnpf/npf.c: revision 1.16 usr.sbin/npf/npfctl/npfctl.c: revision 1.29 lib/libnpf/npf.c: revision 1.17 sys/modules/npf/Makefile: revision 1.12 sys/net/npf/npf_rproc.c: revision 1.6 usr.sbin/npf/npftest/README: revision 1.4 sys/net/npf/npf_tableset.c: revision 1.17 sys/net/npf/npf_ctl.c: revision 1.21 sys/net/npf/npf_ctl.c: revision 1.22 usr.sbin/npf/npfctl/npfctl.h: revision 1.25 lib/libnpf/npf.h: revision 1.13 usr.sbin/npf/npftest/npftest.conf: revision 1.2 usr.sbin/npf/npfctl/npfctl.h: revision 1.26 sys/net/npf/npf_ruleset.c: revision 1.17 lib/libnpf/npf.h: revision 1.14 sys/net/npf/npf_ruleset.c: revision 1.18 sys/net/npf/npf_conf.c: revision 1.1 usr.sbin/npf/npfctl/npf_scan.l: revision 1.10 sys/net/npf/npf_conf.c: revision 1.2 sys/net/npf/npf_instr.c: revision 1.16 sys/net/npf/npf_handler.c: revision 1.26 sys/net/npf/npf_impl.h: revision 1.26 usr.sbin/npf/npfctl/npf_disassemble.c: revision 1.14 sys/net/npf/npf_processor.c: revision 1.15 sys/net/npf/npf_impl.h: revision 1.27 sys/net/npf/npf_alg_icmp.c: revision 1.15 usr.sbin/npf/npfctl/npf_disassemble.c: revision 1.15 usr.sbin/npf/npfctl/npf_disassemble.c: revision 1.16 sys/net/npf/npf_ncode.h: revision 1.11 sys/net/npf/files.npf: revision 1.10 usr.sbin/npf/npftest/Makefile: revision 1.4 usr.sbin/npf/npfctl/npfctl.c: revision 1.30 lib/libnpf/npf.3: revision 1.8 usr.sbin/npf/npftest/libnpftest/npf_rule_test.c: revision 1.4 sys/net/npf/npf_session.c: revision 1.21 usr.sbin/npf/npftest/libnpftest/npf_rule_test.c: revision 1.5 usr.sbin/npf/npfctl/npf_build.c: revision 1.18 usr.sbin/npf/npfctl/npf_build.c: revision 1.19 sys/net/npf/npf_alg.c: revision 1.7 usr.sbin/npf/npfctl/Makefile: revision 1.10 sys/net/npf/npf_inet.c: revision 1.21 sys/net/npf/npf.h: revision 1.26 sys/net/npf/npf.h: revision 1.27 usr.sbin/pf/ftp-proxy/Makefile: revision 1.8 sys/net/npf/npf_nat.c: revision 1.19 sys/net/npf/npf.c: revision 1.15 sys/net/npf/npf_state.c: revision 1.14 sys/net/npf/npf_sendpkt.c: revision 1.14 sys/rump/net/lib/libnpf/Makefile: revision 1.4 IPv6 linklocal address printing cosmetics NPF: - Implement dynamic NPF rules. Controlled through npf(3) library of via npfctl rule command. A rule can be removed using a unique identifier, returned on addition, or using a key which is SHA1 hash of the rule. Adjust npftest and add a regression test. - Improvements to rule inspection mechanism. - Initial BPF support as an alternative to n-code. - Minor fixes; bump the version. Disable -DWITH_NPF for now; will be converted to BPF mechanism. - Fix NPF config reload with dynamic rules present. - Implement list and flush commands on a dynamic ruleset. Allow filtering on IP addresses even if the L4 protocol is unknown. Patch from spz@@. npftest: adjust for recent change. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2.4.4 2013/02/09 04:13:28 riz Exp $ d10 1 a10 1 SRCS= npf.c npf_alg.c npf_conf.c npf_ctl.c npf_handler.c d18 1 a18 1 SRCS+= npf_ext_log.c npf_ext_normalise.c npf_ext_rndblock.c @ 1.2.2.1 log @file Makefile was added on branch yamt-pagecache on 2012-10-30 17:22:55 +0000 @ text @d1 28 @ 1.2.2.2 log @sync with head @ text @a0 28 # $NetBSD$ # # Public Domain. # .PATH: ${.CURDIR}/../../../../net/npf LIB= rumpnet_npf SRCS= npf.c npf_alg.c npf_ctl.c npf_handler.c SRCS+= npf_inet.c npf_instr.c npf_mbuf.c npf_nat.c SRCS+= npf_processor.c npf_ruleset.c npf_rproc.c npf_sendpkt.c SRCS+= npf_session.c npf_state.c npf_state_tcp.c SRCS+= npf_tableset.c npf_tableset_ptree.c SRCS+= npf_alg_icmp.c SRCS+= npf_ext_log.c npf_ext_normalise.c SRCS+= component.c WARNS= 5 CPPFLAGS+= -D_NPF_TESTING CPPFLAGS+= -I${.CURDIR}/../../../librump/rumpvfs .include .include @ 1.2.2.3 log @sync with (a bit old) head @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2.2.2 2012/10/30 17:22:55 yamt Exp $ d22 2 @ 1.2.2.4 log @sync with head. for a reference, the tree before this commit was tagged as yamt-pagecache-tag8. this commit was splitted into small chunks to avoid a limitation of cvs. ("Protocol error: too many arguments") @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2.2.3 2013/01/16 05:33:52 yamt Exp $ a5 2 NOLINT= # defined d10 5 a14 5 SRCS= npf.c npf_alg.c npf_conf.c npf_ctl.c npf_handler.c SRCS+= npf_bpf.c npf_if.c npf_inet.c npf_mbuf.c npf_nat.c SRCS+= npf_ruleset.c npf_rproc.c npf_sendpkt.c npf_session.c SRCS+= npf_state.c npf_state_tcp.c npf_tableset.c SRCS+= npf_tableset_ptree.c npf_worker.c if_npflog.c d18 1 a18 3 SRCS+= npf_ext_log.c npf_ext_normalize.c npf_ext_rndblock.c SRCS+= npf_component.c d20 1 a20 1 .include a21 1 .if ${RUMP_NPF_TESTING:Uyes} == "yes" a22 1 .endif @ 1.1 log @Move and rename librumpdev_npf to librumpnet_npf. @ text @d1 1 a1 1 # $NetBSD$ d11 1 a11 1 SRCS+= npf_inet.c npf_instr.c npf_log.c npf_mbuf.c npf_nat.c d16 4 d22 1 a22 1 WARNS= 4 @ 1.1.2.1 log @Resync to 2012-11-19 00:00:00 UTC @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2012/09/16 13:47:42 rmind Exp $ d11 1 a11 1 SRCS+= npf_inet.c npf_instr.c npf_mbuf.c npf_nat.c a15 4 SRCS+= npf_alg_icmp.c SRCS+= npf_ext_log.c npf_ext_normalise.c d18 1 a18 1 WARNS= 5 @ 1.1.2.2 log @resync with head @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1.2.1 2012/11/20 03:02:51 tls Exp $ d10 1 a10 1 SRCS= npf.c npf_alg.c npf_conf.c npf_ctl.c npf_handler.c d18 1 a18 1 SRCS+= npf_ext_log.c npf_ext_normalise.c npf_ext_rndblock.c d22 2 @ 1.1.2.3 log @resync from head @ text @d1 1 a1 1 # $NetBSD$ d14 1 a14 2 SRCS+= npf_tableset.c npf_tableset_ptree.c npf_worker.c SRCS+= if_npflog.c d18 1 a18 1 SRCS+= npf_ext_log.c npf_ext_normalize.c npf_ext_rndblock.c @ 1.1.2.4 log @Rebase to HEAD as of a few days ago. @ text @a5 2 NOLINT= # defined d11 4 a14 5 SRCS+= npf_bpf.c npf_if.c npf_inet.c npf_mbuf.c npf_nat.c SRCS+= npf_ruleset.c npf_conn.c npf_conndb.c npf_rproc.c SRCS+= npf_state.c npf_state_tcp.c npf_tableset.c SRCS+= npf_tableset_ptree.c npf_sendpkt.c npf_worker.c d21 1 a21 3 SRCS+= npf_component.c .include a22 1 .if ${RUMP_NPF_TESTING:Uyes} == "yes" a23 1 .endif @ 1.1.2.5 log @update from HEAD @ text @a10 1 COMMENT=NPF packet filter a11 1 IOCONF= NPF.ioconf d16 1 a16 1 SRCS+= lpm.c npf_sendpkt.c npf_worker.c npf_os.c npf_ifaddr.c d31 1 @