HEADS-UP: ipfw2 in FreeBSD RELENG_4 updated

FreeBSD committer Luigi Rizzo has updated ipfw2 in FreeBSD Release 4 branch (FreeBSD-STABLE) with additional features that exist in FreeBSD-current. If you are using ipfw2 on RELENG_4, you need to rebuild /sbin/ipfw next time you update your kernel. He is also looking for feedback for his enhancements from everyone, including alpha and ia64 users. In particular, he has added new features for iplen, ipttl and address ranges. He says the new features may simplify the writing of your rulesets.

[Email announcement]

--------------------------------------------------------

Date: Sat, 28 Jun 2003 09:16:58 -0700
From: Luigi Rizzo <luigi@freebsd.org>
To: ipfw@freebsd.org
Subject: HEADS-UP: ipfw2 in RELENG_4 has been sync'ed with -current

[Bcc to -alpha and -sparc64 as I would appreciate feedback from
those users...]

See the attached commit log... if you are using ipfw2 on
RELENG_4, you need to rebuild /sbin/ipfw next time you update your
kernel.

Please have a look at the new features for iplen, ipttl and address
ranges, they might simplify the writing of your rulesets.

Finally, I would be grateful if alpha and/or sparc64 users could
test this change and confirm that it works (it is the same one that
was recently committed to -current).

cheers
luigi

----- Forwarded message from Luigi Rizzo <luigi@FreeBSD.org> -----

Date: Sat, 28 Jun 2003 09:12:14 -0700 (PDT)
From: Luigi Rizzo <luigi@FreeBSD.org>
Subject: cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c src/sys/netinet
ip_dummynet.c ip_fw2.c ip_fw2.h
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org

luigi 2003/06/28 09:12:14 PDT

FreeBSD src repository

Modified files: (Branch: RELENG_4)
sbin/ipfw ipfw.8 ipfw2.c
sys/netinet ip_dummynet.c ip_fw2.c ip_fw2.h
Log:
MFC: sync ipfw2 (kernel, userland, manpage) with the version in -current.
Among other things, this includes the following:

+ pass to the preprocessor all command-line options after -p
(except the last one, the ruleset file)
+ add the "verrevpath" option
+ support strong alignment architectures such as alpha and sparc64;
+ support multiple values and ranges for "iplen", "ipttl", "ipid" options.
+ support range notations such as 1.2.3.4/24{5,6,7,10-20,60-90}
for sets of IP addresses

The changes (also those in sys/netinet/ip_dummynet.c) are all
IPFW2-specific, which is entirely optional in RELENG_4 so there
are no ABI issues for those using the standard ipfw[1].

Note, however, that ipfw2 users MUST REBUILD /sbin/ipfw
together with the new kernel.

Revision Changes Path
1.63.2.35 +67 -18 src/sbin/ipfw/ipfw.8
1.4.2.15 +148 -51 src/sbin/ipfw/ipfw2.c
1.24.2.24 +9 -1 src/sys/netinet/ip_dummynet.c
1.6.2.15 +94 -23 src/sys/netinet/ip_fw2.c
1.1.2.3 +15 -5 src/sys/netinet/ip_fw2.h

----- End forwarded message -----