NetBSD/sys/conf
rmind 2e6f2099c6 Import NPF - a packet filter. Some features:
- Designed to be fully MP-safe and highly efficient.

- Tables/IP sets (hash or red-black tree) for high performance lookups.

- Stateful filtering and Network Address Port Translation (NAPT).
  Framework for application level gateways (ALGs).

- Packet inspection engine called n-code processor - inspired by BPF -
  supporting generic RISC-like and specific CISC-like instructions for
  common patterns (e.g. IPv4 address matching).  See npf_ncode(9) manual.

- Convenient userland utility npfctl(8) with npf.conf(8).

NOTE: This is not yet a fully capable alternative to PF or IPFilter.
Further work (support for binat/rdr, return-rst/return-icmp, common ALGs,
state saving/restoring, logging, etc) is in progress.

Thanks a lot to Matt Thomas for various useful comments and code review.
Aye by: board@
2010-08-22 18:56:18 +00:00
..
copyright Welcome to 2010. 2009-12-31 23:59:02 +00:00
debugsyms.c Remove some unecessary includes sys/user.h header. 2009-11-23 02:13:44 +00:00
files Import NPF - a packet filter. Some features: 2010-08-22 18:56:18 +00:00
majors Import NPF - a packet filter. Some features: 2010-08-22 18:56:18 +00:00
Makefile.kern.inc Use 'a && b && ...' contructs for running multiple commands on a single line 2010-03-05 23:06:49 +00:00
mkldscript.sh Move mkldscript.sh, which is used to create ldscript dynamically to 2007-03-04 02:35:49 +00:00
newvers_stand.sh don't embed localized timestamps into kernels/bootblocks. 2009-02-20 13:41:27 +00:00
newvers.sh Remove ad clause on a UCB license. 2010-01-10 23:55:03 +00:00
osrelease.sh Fix borkeage 2009-11-15 18:41:08 +00:00
param.c Remove separate mb_map. The nmbclusters is computed at boot time based 2010-02-08 19:02:25 +00:00
std Remove uarea swap-out functionality: 2009-10-21 21:11:57 +00:00