cvs commit: src/sys/netinet ip_fw.h ip_fw2.c

[Luigi Rizzo]

luigi       2003/07/15 16:07:34 PDT

  FreeBSD src repository

  Modified files:
    sys/netinet          ip_fw.h ip_fw2.c 
  Log:
  Allow set 31 to be used for rules other than 65535.
  Set 31 is still special because rules belonging to it are not deleted
  by the "ipfw flush" command, but must be deleted explicitly with
  "ipfw delete set 31" or by individual rule numbers.
  
  This implement a flexible form of "persistent rules" which you might
  want to have available even after an "ipfw flush".
  Note that this change does not violate POLA, because you could not
  use set 31 in a ruleset before this change.
  
  sbin/ipfw changes to allow manipulation of set 31 will follow shortly.
  
  Suggested by: Paul Richards
  
  Revision  Changes    Path
  1.79      +1 -0      src/sys/netinet/ip_fw.h
  1.37      +27 -23    src/sys/netinet/ip_fw2.c