git: aa74cc6d6f99 - main - divert(4): do not depend on ipfw(4)
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 07 Sep 2022 03:55:37 UTC
The branch main has been updated by glebius: URL: https://cgit.FreeBSD.org/src/commit/?id=aa74cc6d6f995f3ede4969ae5e0a0329d02754b4 commit aa74cc6d6f995f3ede4969ae5e0a0329d02754b4 Author: Gleb Smirnoff <glebius@FreeBSD.org> AuthorDate: 2022-09-07 03:54:57 +0000 Commit: Gleb Smirnoff <glebius@FreeBSD.org> CommitDate: 2022-09-07 03:54:57 +0000 divert(4): do not depend on ipfw(4) Although originally socket was intended to use with ipfw(4) only, now it also can be used with pf(4). On a kernel without packet filters, it still can be used to inject traffic. --- sys/conf/files | 2 +- sys/modules/Makefile | 3 +-- sys/netinet/ip_divert.c | 1 - 3 files changed, 2 insertions(+), 4 deletions(-) diff --git a/sys/conf/files b/sys/conf/files index 1e3518fcfcb0..a0e969b59e5f 100644 --- a/sys/conf/files +++ b/sys/conf/files @@ -4333,7 +4333,7 @@ netinet/in_prot.c optional inet | inet6 netinet/in_proto.c optional inet | inet6 netinet/in_rmx.c optional inet netinet/in_rss.c optional inet rss -netinet/ip_divert.c optional ipdivert ipfirewall +netinet/ip_divert.c optional ipdivert inet | ipdivert inet6 netinet/ip_ecn.c optional inet | inet6 netinet/ip_encap.c optional inet | inet6 netinet/ip_fastfwd.c optional inet diff --git a/sys/modules/Makefile b/sys/modules/Makefile index 0c5e14a5e4c5..68b3dfcac776 100644 --- a/sys/modules/Makefile +++ b/sys/modules/Makefile @@ -170,7 +170,7 @@ SUBDIR= \ ${_io} \ ${_ioat} \ ${_ipoib} \ - ${_ipdivert} \ + ipdivert \ ${_ipfilter} \ ${_ipfw} \ ipfw_nat \ @@ -465,7 +465,6 @@ _if_stf= if_stf .if ${MK_INET_SUPPORT} != "no" || defined(ALL_MODULES) _if_me= if_me -_ipdivert= ipdivert _ipfw= ipfw .if ${MK_INET6_SUPPORT} != "no" || defined(ALL_MODULES) _ipfw_nat64= ipfw_nat64 diff --git a/sys/netinet/ip_divert.c b/sys/netinet/ip_divert.c index aa0ffdb55530..dd76a1792325 100644 --- a/sys/netinet/ip_divert.c +++ b/sys/netinet/ip_divert.c @@ -763,5 +763,4 @@ static moduledata_t ipdivertmod = { }; DECLARE_MODULE(ipdivert, ipdivertmod, SI_SUB_PROTO_FIREWALL, SI_ORDER_ANY); -MODULE_DEPEND(ipdivert, ipfw, 3, 3, 3); MODULE_VERSION(ipdivert, 1);