Luigi Rizzo 32f967a3c0 A bunch of minor changes to the code (see below) for readability, code size ... and speed. No new functionality added (yet) apart from a bugfix. MFC will occur in due time and probably in stages. BUGFIX: fix a problem in old code which prevented reallocation of the hash table for dynamic rules (there is a PR on this). OTHER CHANGES: minor changes to the internal struct for static and dynamic rules. Requires rebuild of ipfw binary. Add comments to show how data structures are linked together. (It probably makes no sense to keep the chain pointers separate from actual rule descriptors. They will be hopefully merged soon. keep a (sysctl-readable) counter for the number of static rules, to speed up IP_FW_GET operations initial support for a "grace time" for expired connections, so we can set timeouts for closing connections to much shorter times. merge zero_entry() and resetlog_entry(), they use basically the same code. clean up and reduce replication of code for removing rules, both for readability and code size. introduce a separate lifetime for dynamic UDP rules. fix a problem in old code which prevented reallocation of the hash table for dynamic rules (PR ...) restructure dynamic rule descriptors introduce some local variables to avoid multiple dereferencing of pointer chains (reduces code size and hopefully increases speed).		2001-09-20 13:52:49 +00:00
..
ipfw.8	mdoc(7) police:	2001-08-07 15:48:51 +00:00
ipfw.c	A bunch of minor changes to the code (see below) for readability, code size	2001-09-20 13:52:49 +00:00
Makefile	- Backout botched attempt to introduce MANSECT feature.	2001-03-26 14:33:27 +00:00