2e6f2099c6
- Designed to be fully MP-safe and highly efficient. - Tables/IP sets (hash or red-black tree) for high performance lookups. - Stateful filtering and Network Address Port Translation (NAPT). Framework for application level gateways (ALGs). - Packet inspection engine called n-code processor - inspired by BPF - supporting generic RISC-like and specific CISC-like instructions for common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual. - Convenient userland utility npfctl(8) with npf.conf(8). NOTE: This is not yet a fully capable alternative to PF or IPFilter. Further work (support for binat/rdr, return-rst/return-icmp, common ALGs, state saving/restoring, logging, etc) is in progress. Thanks a lot to Matt Thomas for various useful comments and code review. Aye by: board@
18 lines
621 B
Makefile
18 lines
621 B
Makefile
# $NetBSD: Makefile,v 1.29 2010/08/22 18:56:22 rmind Exp $
|
|
|
|
INCSDIR= /usr/include/net
|
|
|
|
INCS= bpf.h bpfdesc.h dlt.h ethertypes.h if.h if_arc.h if_arp.h \
|
|
if_atm.h if_bridgevar.h if_dl.h if_ether.h if_etherip.h if_fddi.h if_gif.h \
|
|
if_gre.h if_hippi.h if_ieee1394.h if_llc.h if_media.h if_mpls.h \
|
|
if_pflog.h if_ppp.h if_pppoe.h if_sppp.h if_srt.h if_stf.h \
|
|
if_tap.h if_token.h if_tun.h if_types.h if_vlanvar.h net_stats.h \
|
|
netisr.h pfil.h pfkeyv2.h pfvar.h ppp-comp.h ppp_defs.h radix.h \
|
|
raw_cb.h route.h slcompress.h slip.h zlib.h
|
|
|
|
SUBDIR= agr npf
|
|
|
|
.include <bsd.kinc.mk>
|
|
|
|
.PATH: ${NETBSDSRCDIR}/sys/dist/pf/net
|