]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
pf: Introduce ridentifier
authorKristof Provost <kp@FreeBSD.org>
Fri, 29 Oct 2021 15:40:53 +0000 (17:40 +0200)
committerKristof Provost <kp@FreeBSD.org>
Fri, 5 Nov 2021 08:39:56 +0000 (09:39 +0100)
commit76c5eecc3490d89a9a3492ed2354802b69d69602
treea06cb4aeb8a99d9b5f358345399b2cebd412419f
parent80e5955b085af20e65ef84066a164936413748e3
pf: Introduce ridentifier

Allow users to set a number on rules which will be exposed as part of
the pflog header.
The intent behind this is to allow users to correlate rules across
updates (remember that pf rules continue to exist and match existing
states, even if they're removed from the active ruleset) and pflog.

Obtained from: pfSense
MFC after: 3 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D32750
14 files changed:
contrib/tcpdump/print-pflog.c
lib/libpfctl/libpfctl.c
lib/libpfctl/libpfctl.h
sbin/pfctl/parse.y
sbin/pfctl/pfctl_parser.c
share/man/man4/pflog.4
share/man/man5/pf.conf.5
sys/net/if_pflog.h
sys/net/pfvar.h
sys/netpfil/ipfw/nat64/nat64clat.c
sys/netpfil/ipfw/nat64/nat64lsn.c
sys/netpfil/ipfw/nat64/nat64stl.c
sys/netpfil/pf/if_pflog.c
sys/netpfil/pf/pf_nv.c