cvs commit: src/sys/netinet ip_fw2.c src/sbin/ipfw ipfw.8 ipfw2.c

[Oleg Bulyzhin]

oleg        2006-06-15 09:39:22 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          ip_fw2.c 
    sbin/ipfw            ipfw.8 ipfw2.c 
  Log:
  Add support of 'tablearg' feature for:
  - 'tag' & 'untag' action parameters.
  - 'tagged' & 'limit' rule options.
  Rule examples:
          pipe 1 tag tablearg ip from table(1) to any
          allow ip from any to table(2) tagged tablearg
          allow tcp from table(3) to any 25 setup limit src-addr tablearg
  
  sbin/ipfw/ipfw2.c:
  1) new macros
     GET_UINT_ARG - support of 'tablearg' keyword, argument range checking.
     PRINT_UINT_ARG - support of 'tablearg' keyword.
  2) strtoport(): do not silently truncate/accept invalid port list expressions
     like: '1,2-abc' or '1,2-3-4' or '1,2-3x4'. style(9) cleanup.
  
  Approved by:    glebius (mentor)
  MFC after:      1 month
  
  Revision  Changes    Path
  1.189     +7 -3      src/sbin/ipfw/ipfw.8
  1.91      +121 -77   src/sbin/ipfw/ipfw2.c
  1.135     +30 -15    src/sys/netinet/ip_fw2.c