2e6f2099c6
- Designed to be fully MP-safe and highly efficient. - Tables/IP sets (hash or red-black tree) for high performance lookups. - Stateful filtering and Network Address Port Translation (NAPT). Framework for application level gateways (ALGs). - Packet inspection engine called n-code processor - inspired by BPF - supporting generic RISC-like and specific CISC-like instructions for common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual. - Convenient userland utility npfctl(8) with npf.conf(8). NOTE: This is not yet a fully capable alternative to PF or IPFilter. Further work (support for binat/rdr, return-rst/return-icmp, common ALGs, state saving/restoring, logging, etc) is in progress. Thanks a lot to Matt Thomas for various useful comments and code review. Aye by: board@ |
||
|---|---|---|
| .. | ||
| agr | ||
| npf | ||
| Makefile | ||
| bpf.c | ||
| bpf.h | ||
| bpf_filter.c | ||
| bpf_stub.c | ||
| bpfdesc.h | ||
| bridgestp.c | ||
| bsd-comp.c | ||
| dlt.h | ||
| ethertypes.h | ||
| files.pf | ||
| if.c | ||
| if.h | ||
| if_arc.h | ||
| if_arcsubr.c | ||
| if_arp.h | ||
| if_atm.h | ||
| if_atmsubr.c | ||
| if_bridge.c | ||
| if_bridgevar.h | ||
| if_dl.h | ||
| if_eco.h | ||
| if_ecosubr.c | ||
| if_ether.h | ||
| if_etherip.c | ||
| if_etherip.h | ||
| if_ethersubr.c | ||
| if_faith.c | ||
| if_faith.h | ||
| if_fddi.h | ||
| if_fddisubr.c | ||
| if_gif.c | ||
| if_gif.h | ||
| if_gre.c | ||
| if_gre.h | ||
| if_hippi.h | ||
| if_hippisubr.c | ||
| if_ieee1394.h | ||
| if_ieee1394subr.c | ||
| if_llc.h | ||
| if_loop.c | ||
| if_media.c | ||
| if_media.h | ||
| if_mpls.c | ||
| if_mpls.h | ||
| if_ppp.c | ||
| if_ppp.h | ||
| if_pppoe.c | ||
| if_pppoe.h | ||
| if_pppvar.h | ||
| if_sl.c | ||
| if_slvar.h | ||
| if_sppp.h | ||
| if_spppsubr.c | ||
| if_spppvar.h | ||
| if_srt.c | ||
| if_srt.h | ||
| if_stf.c | ||
| if_stf.h | ||
| if_strip.c | ||
| if_stripvar.h | ||
| if_tap.c | ||
| if_tap.h | ||
| if_token.h | ||
| if_tokensubr.c | ||
| if_tun.c | ||
| if_tun.h | ||
| if_types.h | ||
| if_vlan.c | ||
| if_vlanvar.h | ||
| link_proto.c | ||
| net_osdep.h | ||
| net_stats.c | ||
| net_stats.h | ||
| netisr.h | ||
| netisr_dispatch.h | ||
| pfil.c | ||
| pfil.h | ||
| pfkeyv2.h | ||
| ppp-comp.h | ||
| ppp-deflate.c | ||
| ppp_defs.h | ||
| ppp_tty.c | ||
| radix.c | ||
| radix.h | ||
| raw_cb.c | ||
| raw_cb.h | ||
| raw_usrreq.c | ||
| route.c | ||
| route.h | ||
| rtsock.c | ||
| slcompress.c | ||
| slcompress.h | ||
| slip.h | ||
| zlib.c | ||
| zlib.h | ||