Change Details

o Convert rule numbers and named object indexes to 32-bit o Convert O_SKIPTO and O_CALL opcodes to use 32-bit rulenum. o Convert O_CALL's stack and skipto code to handle 32-bit rulenums. o Add ability to grow maximum number of rules up to IPFW_DEFAULT_RULE. o Bump default sockopt's version from 0 to 1. o Convert dynamic states code to use 32-bit rulenums. o Convert eaction code to use 32-bit types. o Convert all eaction modules to use 32-bit types. o Modify ipfw_dyn_rule type and remove all legacy fields. o Retire FreeBSD 7-11 rule format support. o Implement "lookup rulenum" opcode. o Add ability to specify return point from O_CALLRETURN opcode. o Add "lookup", "tagged" keywords to list of reserverd words to avoid name to port resolving. o Add ability to generate rtsock messages with log rules o Add ability to log to specified dst: syslog, rtsock, ipfw0 o Add insntod() and instoc() macros o Add ability to keep NAT64LSN states during sets swapping o Add IPv4 reassembling support to NAT64LSN o Fix several races in NAT64LSN o Add IP_FW_SKIPTO_CACHE sockopt to enable/disable skipto cache

``` o Convert rule numbers and named object indexes to 32-bit o Convert O_SKIPTO and O_CALL opcodes to use 32-bit rulenum. o Convert O_CALL's stack and skipto code to handle 32-bit rulenums. o Add ability to grow maximum number of rules up to IPFW_DEFAULT_RULE. o Bump default sockopt's version from 0 to 1. o Convert dynamic states code to use 32-bit rulenums. o Convert eaction code to use 32-bit types. o Convert all eaction modules to use 32-bit types. o Modify ipfw_dyn_rule type and remove all legacy fields. o Retire FreeBSD 7-11 rule format support. o Implement "lookup rulenum" opcode. o Add ability to specify return point from O_CALLRETURN opcode. o Add "lookup", "tagged" keywords to list of reserverd words to avoid name to port resolving. o Add ability to generate rtsock messages with log rules o Add ability to log to specified dst: syslog, rtsock, ipfw0 o Add insntod() and instoc() macros o Add ability to keep NAT64LSN states during sets swapping o Add IPv4 reassembling support to NAT64LSN o Fix several races in NAT64LSN o Add IP_FW_SKIPTO_CACHE sockopt to enable/disable skipto cache ```

``` o Convert rule numbers and named object indexes to 32-bit o Convert O_SKIPTO and O_CALL opcodes to use 32-bit rulenum. o Convert O_CALL's stack and skipto code to handle 32-bit rulenums. o Add ability to grow maximum number of rules up to IPFW_DEFAULT_RULE. o Bump default sockopt's version from 0 to 1. o Convert dynamic states code to use 32-bit rulenums. o Convert eaction code to use 32-bit types. o Convert all eaction modules to use 32-bit types. o Modify ipfw_dyn_rule type and remove all legacy fields. o Retire FreeBSD 7-11 rule format support. o Implement "lookup rulenum" opcode. o Add ability to specify return point from O_CALLRETURN opcode. o Add "lookup", "tagged" keywords to list of reserverd words to avoid name to port resolving. o Add ability to generate rtsock messages with log rules o Add ability to log to specified dst: syslog, rtsock, ipfw0 o Add insntod() and instoc() macros o Add ability to keep NAT64LSN states during sets swapping o Add IPv4 reassembling support to NAT64LSN o Fix several races in NAT64LSN o Add IP_FW_SKIPTO_CACHE sockopt to enable/disable skipto cache ```