Module Name:	syssrc
Committed By:	darrenr
Date:		Thu Feb 17 10:59:41 UTC 2000

Modified Files:
	syssrc/sys/net: pfil.c pfil.h
	syssrc/sys/netinet: in.h in_proto.c ip_fil.c ip_icmp.c ip_input.c
	    ip_output.c raw_ip.c
	syssrc/sys/netinet6: ah_input.c icmp6.c in6.h ip6_input.c ip6_output.c
	    ip6protosw.h ipcomp_input.c
	syssrc/sys/sys: protosw.h

Log Message:
Change the use of pfil hooks.  There is no longer a single list of all
pfil information, instead, struct protosw now contains a structure
which caontains list heads, etc.  The per-protosw pfil struct is passed
to pfil_hook_get(), along with an in/out flag to get the head of the
relevant filter list.  This has been done for only IPv4 and IPv6, at
present, with these patches only enabling filtering for IPPROTO_IP and
IPPROTO_IPV6, although it is possible to have tcp/udp, etc, dedicated
filters now also.  The ipfilter code has been updated to only filter
IPv4 packets - next major release of ipfilter is required for ipv6.


To generate a diff of this commit:
cvs rdiff -r1.9 -r1.10 syssrc/sys/net/pfil.c syssrc/sys/net/pfil.h
cvs rdiff -r1.45 -r1.46 syssrc/sys/netinet/in.h
cvs rdiff -r1.37 -r1.38 syssrc/sys/netinet/in_proto.c
cvs rdiff -r1.40 -r1.41 syssrc/sys/netinet/ip_fil.c \
    syssrc/sys/netinet/ip_icmp.c
cvs rdiff -r1.100 -r1.101 syssrc/sys/netinet/ip_input.c
cvs rdiff -r1.66 -r1.67 syssrc/sys/netinet/ip_output.c
cvs rdiff -r1.50 -r1.51 syssrc/sys/netinet/raw_ip.c
cvs rdiff -r1.8 -r1.9 syssrc/sys/netinet6/ah_input.c
cvs rdiff -r1.21 -r1.22 syssrc/sys/netinet6/icmp6.c
cvs rdiff -r1.10 -r1.11 syssrc/sys/netinet6/in6.h
cvs rdiff -r1.14 -r1.15 syssrc/sys/netinet6/ip6_input.c \
    syssrc/sys/netinet6/ip6_output.c
cvs rdiff -r1.5 -r1.6 syssrc/sys/netinet6/ip6protosw.h
cvs rdiff -r1.9 -r1.10 syssrc/sys/netinet6/ipcomp_input.c
cvs rdiff -r1.21 -r1.22 syssrc/sys/sys/protosw.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.