pf: Update packet filter to the version that comes with OpenBSD 4.1
authorJan Lentfer <Jan.Lentfer@web.de>
Sun, 8 Aug 2010 07:44:38 +0000 (09:44 +0200)
committerJan Lentfer <Jan.Lentfer@web.de>
Sun, 8 Aug 2010 08:18:38 +0000 (10:18 +0200)
commit70224baa0d7c2fcfc9b51076bdc46f77a8e1e2a7
treecb6218a8a36bf3e5ac7b95878843351136b3af35
parent4955e136fc3b885da18a641f19b678961755789e
pf: Update packet filter to the version that comes with OpenBSD 4.1

    The original OpenBSD 4.1 defaults to "keep state flags S/SA" for
    all pass rules. In contrast to that we default to "no state". As
    in earlier verions of pf in DragonFly the default keep-state
    policy can still be set with the keep-policy option (e.g. "set
    keep-policy keep state (pickups)").

    DragonFly additions to pf have been kept: fairq support,
    pickups.

Detailed Info on changes/additions:
* ALTQ: Fix altq to work with pf_mtag
Patch by Matthew Dillon
* libkern: Revert commit e104539
strchr was added to libkern.h together with strrch
* net/if.h: add interface groups
Imported from FreeBSD.
* netinet6/in6.h: add macros
IN6_IS_ADDR_MC_INTFACELOCAL
IN6_IS_SCOPE_EMBED
PV6_ADDR_SCOPE_INTFACELOCAL
* sys/libkern.h: Add strchr and strrchr as inline functions
Brought in from FreeBSD
* sys/net/if_var.h: Import interface groups
Import interface groups and event handlers from FreeBSD
* sys/net/if_var.h: add if_pf_kif, if_groups to struct ifnet
obtained from: Open/FreeBSD
* net/if_types.h: add IFT_ENC to non-IATA-assignments
obtained from Open/FreeBSD
* net/bpf.c: add bpf_mtap_hdr from OpenBSD
Con up a minimal dummy header to pacify bpf.  Allocate
(only) a struct m_hdr on the stack.
55 files changed:
include/string.h
share/man/man4/pf.4
share/man/man4/pflog.4
share/man/man4/pfsync.4
sys/conf/files
sys/libkern/strchr.c [deleted file]
sys/net/altq/altq_cbq.c
sys/net/altq/altq_fairq.c
sys/net/altq/altq_hfsc.c
sys/net/altq/altq_priq.c
sys/net/altq/altq_red.c
sys/net/altq/altq_subr.c
sys/net/altq/altq_var.h
sys/net/bpf.c
sys/net/bpf.h
sys/net/if.h
sys/net/if_types.h
sys/net/if_var.h
sys/net/pf/Makefile
sys/net/pf/if_pflog.c
sys/net/pf/if_pflog.h
sys/net/pf/if_pfsync.c
sys/net/pf/if_pfsync.h
sys/net/pf/pf.c
sys/net/pf/pf_if.c
sys/net/pf/pf_ioctl.c
sys/net/pf/pf_norm.c
sys/net/pf/pf_osfp.c
sys/net/pf/pf_ruleset.c [new file with mode: 0644]
sys/net/pf/pf_subr.c
sys/net/pf/pf_table.c
sys/net/pf/pfvar.h
sys/netinet6/in6.h
sys/sys/libkern.h
sys/sys/mbuf.h
sys/sys/sockio.h
usr.sbin/authpf/Makefile
usr.sbin/authpf/authpf.c
usr.sbin/authpf/pathnames.h
usr.sbin/pfctl/Makefile
usr.sbin/pfctl/parse.y
usr.sbin/pfctl/pf.conf.5
usr.sbin/pfctl/pf.os.5
usr.sbin/pfctl/pf_print_state.c
usr.sbin/pfctl/pfctl.8
usr.sbin/pfctl/pfctl.c
usr.sbin/pfctl/pfctl.h
usr.sbin/pfctl/pfctl_altq.c
usr.sbin/pfctl/pfctl_optimize.c [new file with mode: 0644]
usr.sbin/pfctl/pfctl_osfp.c
usr.sbin/pfctl/pfctl_parser.c
usr.sbin/pfctl/pfctl_parser.h
usr.sbin/pfctl/pfctl_qstats.c
usr.sbin/pfctl/pfctl_radix.c
usr.sbin/pfctl/pfctl_table.c