CVS commit: [netbsd-6] src

["Jeff Rizzo" <riz%netbsd.org@localhost>]

Module Name:    src
Committed By:   riz
Date:           Mon Feb 11 21:49:50 UTC 2013

Modified Files:
        src/lib/libnpf [netbsd-6]: npf.3 npf.c npf.h
        src/sys/modules/npf [netbsd-6]: Makefile
        src/sys/net/npf [netbsd-6]: files.npf npf.c npf.h npf_alg.c
            npf_alg_icmp.c npf_ctl.c npf_handler.c npf_impl.h npf_inet.c
            npf_instr.c npf_nat.c npf_ncode.h npf_processor.c npf_rproc.c
            npf_ruleset.c npf_sendpkt.c npf_session.c npf_state.c
            npf_tableset.c
        src/sys/rump/net/lib/libnpf [netbsd-6]: Makefile
        src/usr.sbin/npf/npfctl [netbsd-6]: Makefile npf.conf.5 npf_build.c
            npf_disassemble.c npf_parse.y npf_scan.l npfctl.8 npfctl.c npfctl.h
        src/usr.sbin/npf/npftest [netbsd-6]: Makefile README npftest.conf
        src/usr.sbin/npf/npftest/libnpftest [netbsd-6]: npf_rule_test.c
        src/usr.sbin/pf/ftp-proxy [netbsd-6]: Makefile
Added Files:
        src/sys/net/npf [netbsd-6]: npf_conf.c

Log Message:
Pull up following revision(s) (requested by rmind in ticket #817):
        usr.sbin/npf/npfctl/npfctl.8: revision 1.12
        usr.sbin/npf/npfctl/npf.conf.5: revision 1.27
        usr.sbin/npf/npfctl/npf_parse.y: revision 1.18
        usr.sbin/npf/npfctl/npf_build.c: revision 1.20
        usr.sbin/npf/npfctl/npfctl.c: revision 1.28
        lib/libnpf/npf.c: revision 1.16
        usr.sbin/npf/npfctl/npfctl.c: revision 1.29
        lib/libnpf/npf.c: revision 1.17
        sys/modules/npf/Makefile: revision 1.12
        sys/net/npf/npf_rproc.c: revision 1.6
        usr.sbin/npf/npftest/README: revision 1.4
        sys/net/npf/npf_tableset.c: revision 1.17
        sys/net/npf/npf_ctl.c: revision 1.21
        sys/net/npf/npf_ctl.c: revision 1.22
        usr.sbin/npf/npfctl/npfctl.h: revision 1.25
        lib/libnpf/npf.h: revision 1.13
        usr.sbin/npf/npftest/npftest.conf: revision 1.2
        usr.sbin/npf/npfctl/npfctl.h: revision 1.26
        sys/net/npf/npf_ruleset.c: revision 1.17
        lib/libnpf/npf.h: revision 1.14
        sys/net/npf/npf_ruleset.c: revision 1.18
        sys/net/npf/npf_conf.c: revision 1.1
        usr.sbin/npf/npfctl/npf_scan.l: revision 1.10
        sys/net/npf/npf_conf.c: revision 1.2
        sys/net/npf/npf_instr.c: revision 1.16
        sys/net/npf/npf_handler.c: revision 1.26
        sys/net/npf/npf_impl.h: revision 1.26
        usr.sbin/npf/npfctl/npf_disassemble.c: revision 1.14
        sys/net/npf/npf_processor.c: revision 1.15
        sys/net/npf/npf_impl.h: revision 1.27
        sys/net/npf/npf_alg_icmp.c: revision 1.15
        usr.sbin/npf/npfctl/npf_disassemble.c: revision 1.15
        usr.sbin/npf/npfctl/npf_disassemble.c: revision 1.16
        sys/net/npf/npf_ncode.h: revision 1.11
        sys/net/npf/files.npf: revision 1.10
        usr.sbin/npf/npftest/Makefile: revision 1.4
        usr.sbin/npf/npfctl/npfctl.c: revision 1.30
        lib/libnpf/npf.3: revision 1.8
        usr.sbin/npf/npftest/libnpftest/npf_rule_test.c: revision 1.4
        sys/net/npf/npf_session.c: revision 1.21
        usr.sbin/npf/npftest/libnpftest/npf_rule_test.c: revision 1.5
        usr.sbin/npf/npfctl/npf_build.c: revision 1.18
        usr.sbin/npf/npfctl/npf_build.c: revision 1.19
        sys/net/npf/npf_alg.c: revision 1.7
        usr.sbin/npf/npfctl/Makefile: revision 1.10
        sys/net/npf/npf_inet.c: revision 1.21
        sys/net/npf/npf.h: revision 1.26
        sys/net/npf/npf.h: revision 1.27
        usr.sbin/pf/ftp-proxy/Makefile: revision 1.8
        sys/net/npf/npf_nat.c: revision 1.19
        sys/net/npf/npf.c: revision 1.15
        sys/net/npf/npf_state.c: revision 1.14
        sys/net/npf/npf_sendpkt.c: revision 1.14
        sys/rump/net/lib/libnpf/Makefile: revision 1.4
IPv6 linklocal address printing cosmetics
NPF:
- Implement dynamic NPF rules.  Controlled through npf(3) library of via
  npfctl rule command.  A rule can be removed using a unique identifier,
  returned on addition, or using a key which is SHA1 hash of the rule.
  Adjust npftest and add a regression test.
- Improvements to rule inspection mechanism.
- Initial BPF support as an alternative to n-code.
- Minor fixes; bump the version.
Disable -DWITH_NPF for now; will be converted to BPF mechanism.
- Fix NPF config reload with dynamic rules present.
- Implement list and flush commands on a dynamic ruleset.
Allow filtering on IP addresses even if the L4 protocol is unknown.
Patch from spz@.
npftest: adjust for recent change.


To generate a diff of this commit:
cvs rdiff -u -r1.4.2.2 -r1.4.2.3 src/lib/libnpf/npf.3
cvs rdiff -u -r1.7.2.8 -r1.7.2.9 src/lib/libnpf/npf.c
cvs rdiff -u -r1.6.2.6 -r1.6.2.7 src/lib/libnpf/npf.h
cvs rdiff -u -r1.9.2.2 -r1.9.2.3 src/sys/modules/npf/Makefile
cvs rdiff -u -r1.6.2.3 -r1.6.2.4 src/sys/net/npf/files.npf
cvs rdiff -u -r1.7.2.6 -r1.7.2.7 src/sys/net/npf/npf.c
cvs rdiff -u -r1.14.2.11 -r1.14.2.12 src/sys/net/npf/npf.h
cvs rdiff -u -r1.2.16.4 -r1.2.16.5 src/sys/net/npf/npf_alg.c
cvs rdiff -u -r1.8.4.6 -r1.8.4.7 src/sys/net/npf/npf_alg_icmp.c
cvs rdiff -u -r0 -r1.2.2.2 src/sys/net/npf/npf_conf.c
cvs rdiff -u -r1.12.2.7 -r1.12.2.8 src/sys/net/npf/npf_ctl.c
cvs rdiff -u -r1.13.2.8 -r1.13.2.9 src/sys/net/npf/npf_handler.c
cvs rdiff -u -r1.10.2.12 -r1.10.2.13 src/sys/net/npf/npf_impl.h
cvs rdiff -u -r1.10.4.8 -r1.10.4.9 src/sys/net/npf/npf_inet.c \
    src/sys/net/npf/npf_session.c
cvs rdiff -u -r1.9.2.6 -r1.9.2.7 src/sys/net/npf/npf_instr.c
cvs rdiff -u -r1.10.2.7 -r1.10.2.8 src/sys/net/npf/npf_nat.c
cvs rdiff -u -r1.5.6.4 -r1.5.6.5 src/sys/net/npf/npf_ncode.h
cvs rdiff -u -r1.9.2.4 -r1.9.2.5 src/sys/net/npf/npf_processor.c
cvs rdiff -u -r1.1.2.3 -r1.1.2.4 src/sys/net/npf/npf_rproc.c
cvs rdiff -u -r1.10.2.5 -r1.10.2.6 src/sys/net/npf/npf_ruleset.c
cvs rdiff -u -r1.8.4.5 -r1.8.4.6 src/sys/net/npf/npf_sendpkt.c
cvs rdiff -u -r1.6.4.7 -r1.6.4.8 src/sys/net/npf/npf_state.c
cvs rdiff -u -r1.9.2.7 -r1.9.2.8 src/sys/net/npf/npf_tableset.c
cvs rdiff -u -r1.2.4.4 -r1.2.4.5 src/sys/rump/net/lib/libnpf/Makefile
cvs rdiff -u -r1.5.2.4 -r1.5.2.5 src/usr.sbin/npf/npfctl/Makefile
cvs rdiff -u -r1.9.2.7 -r1.9.2.8 src/usr.sbin/npf/npfctl/npf.conf.5
cvs rdiff -u -r1.4.2.10 -r1.4.2.11 src/usr.sbin/npf/npfctl/npf_build.c
cvs rdiff -u -r1.3.2.10 -r1.3.2.11 src/usr.sbin/npf/npfctl/npf_disassemble.c \
    src/usr.sbin/npf/npfctl/npf_parse.y
cvs rdiff -u -r1.1.2.6 -r1.1.2.7 src/usr.sbin/npf/npfctl/npf_scan.l
cvs rdiff -u -r1.6.6.4 -r1.6.6.5 src/usr.sbin/npf/npfctl/npfctl.8
cvs rdiff -u -r1.10.2.13 -r1.10.2.14 src/usr.sbin/npf/npfctl/npfctl.c
cvs rdiff -u -r1.11.2.11 -r1.11.2.12 src/usr.sbin/npf/npfctl/npfctl.h
cvs rdiff -u -r1.2.2.3 -r1.2.2.4 src/usr.sbin/npf/npftest/Makefile
cvs rdiff -u -r1.1.2.4 -r1.1.2.5 src/usr.sbin/npf/npftest/README
cvs rdiff -u -r1.1.2.2 -r1.1.2.3 src/usr.sbin/npf/npftest/npftest.conf
cvs rdiff -u -r1.1.2.4 -r1.1.2.5 \
    src/usr.sbin/npf/npftest/libnpftest/npf_rule_test.c
cvs rdiff -u -r1.6 -r1.6.6.1 src/usr.sbin/pf/ftp-proxy/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.