CVS commit: src

[Mindaugas Rasiukevicius <rmind%netbsd.org@localhost>]

Module Name:    src
Committed By:   rmind
Date:           Thu Sep 16 04:53:27 UTC 2010

Modified Files:
        src/share/man/man9: npf_ncode.9
        src/sys/modules/npf: Makefile
        src/sys/net/npf: files.npf npf.h npf_alg_icmp.c npf_ctl.c npf_handler.c
            npf_impl.h npf_inet.c npf_instr.c npf_mbuf.c npf_nat.c npf_ncode.h
            npf_processor.c npf_ruleset.c npf_session.c
        src/usr.sbin/npf/npfctl: npf.conf.5 npf_data.c npf_ncgen.c npf_parser.c
            npfctl.h
Added Files:
        src/sys/net/npf: npf_sendpkt.c

Log Message:
NPF checkpoint:
- Add support for bi-directional NAT and redirection / port forwarding.
- Finish filtering on ICMP type/code and add filtering on TCP flags.
- Add support for TCP reset (RST) or ICMP destination unreachable on block.
- Fix a bunch of bugs; misc cleanup.


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 src/share/man/man9/npf_ncode.9
cvs rdiff -u -r1.1 -r1.2 src/sys/modules/npf/Makefile
cvs rdiff -u -r1.1 -r1.2 src/sys/net/npf/files.npf src/sys/net/npf/npf.h \
    src/sys/net/npf/npf_alg_icmp.c src/sys/net/npf/npf_ctl.c \
    src/sys/net/npf/npf_handler.c src/sys/net/npf/npf_impl.h \
    src/sys/net/npf/npf_inet.c src/sys/net/npf/npf_instr.c \
    src/sys/net/npf/npf_mbuf.c src/sys/net/npf/npf_nat.c \
    src/sys/net/npf/npf_ncode.h src/sys/net/npf/npf_processor.c \
    src/sys/net/npf/npf_ruleset.c src/sys/net/npf/npf_session.c
cvs rdiff -u -r0 -r1.1 src/sys/net/npf/npf_sendpkt.c
cvs rdiff -u -r1.1 -r1.2 src/usr.sbin/npf/npfctl/npf.conf.5 \
    src/usr.sbin/npf/npfctl/npf_ncgen.c src/usr.sbin/npf/npfctl/npf_parser.c \
    src/usr.sbin/npf/npfctl/npfctl.h
cvs rdiff -u -r1.2 -r1.3 src/usr.sbin/npf/npfctl/npf_data.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.