aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* pf: fix mem leaks upon vnet destroyIgor Ostapenko5 days1-7/+60
* pf: implement DIOCGETRULES via netlinkKristof Provost6 days3-26/+105
* sys: Automated cleanup of cdefs and other formattingWarner Losh7 days17-17/+0
* sys: Remove ancient SCCS tags.Warner Losh7 days23-67/+0
* pf: sctp heartbeats confirm a connectionKristof Provost2023-11-172-2/+10
* pf: skip urpf check for sctp multihomed statesKristof Provost2023-11-171-0/+3
* pf: always create multihomed states as floatingKristof Provost2023-11-171-2/+6
* pf: fix dummynet + ipdivert use caseIgor Ostapenko2023-11-171-5/+22
* ipfw: fix copy&paste bug for number:array tablesAndrey V. Elsukov2023-11-141-1/+1
* pf_purge_expired_states(): fix build without SDT probesKonstantin Belousov2023-11-091-1/+1
* pf: add hashtable row count SDTKristof Provost2023-11-091-0/+6
* pf: fix double free if pf_ioctl_addrule() failsKristof Provost2023-11-081-3/+0
* pf: expose more syncookie state information to userspaceKristof Provost2023-11-062-0/+3
* pfsync: Avoid transmitting uninitialized bytes in pfsync_sendout()Mark Johnston2023-11-041-10/+12
* pf: support SCTP-specific timeoutsKristof Provost2023-10-313-14/+46
* pf: fix missing SCTP multihomed statesKristof Provost2023-10-312-15/+240
* pf: Fix packet reassemblyKajetan Staszkiewicz2023-10-261-20/+31
* pf/netlink: explicitly include sys/ucred.h to provide struct ucred definitionKonstantin Belousov2023-10-231-2/+1
* pf: allow states to be killed by their pre-NAT addressKristof Provost2023-10-232-3/+6
* pf: support basic filters for state listingKristof Provost2023-10-232-5/+40
* pf: convert rule addition to netlinkKristof Provost2023-10-233-7/+407
* pf: use an enum for packet direction in divert tagKristof Provost2023-10-201-1/+1
* pf: fix pf divert-to loopIgor Ostapenko2023-10-191-11/+21
* pf: implement start/stop calls via netlinkKristof Provost2023-10-133-25/+73
* netlink: move NETLINK define to opt_global.hKristof Provost2023-10-131-2/+0
* pf: Free pf_rule_items when state is not createdKajetan Staszkiewicz2023-10-121-0/+11
* pf: move DIOCGETSTATES(V2) to COMPAT_FREEBSD14Kristof Provost2023-10-101-1/+6
* pf: add a way to list creator idsKristof Provost2023-10-102-0/+81
* pf: convert state retrieval to netlinkAlexander V. Chernikov2023-10-103-0/+402
* pf: fix SCTP SDT probeKristof Provost2023-10-051-1/+1
* pf: cope with missing rpool.curKristof Provost2023-10-041-4/+5
* pf: only create sctp multihome states if we pass the packetKristof Provost2023-09-291-6/+10
* pf: ensure 'off' is always set before useKristof Provost2023-09-291-1/+7
* ipfilter: Add sysctl flag CTLFLAG_TUN to loader tunableZhenlei Huang2023-09-291-1/+1
* Purge more stray embedded $FreeBSD$ stringsJohn Baldwin2023-09-254-4/+0
* ipfw: Add sysctl flag CTLFLAG_TUN to loader tunablesZhenlei Huang2023-09-251-3/+3
* pf: Convert PF_DEFAULT_TO_DROP into a vnet loader tunable 'net.pf.default_to_...Zhenlei Huang2023-09-221-5/+11
* dummynet: fix comment typoIgor Ostapenko2023-09-191-1/+1
* ipfilter: Avoid allocating a new ipf token when not neededCy Schubert2023-09-131-9/+4
* pf: fix state leakKristof Provost2023-09-101-17/+9
* pfsync: fix state leakKristof Provost2023-09-101-2/+5
* netpfil/pf/pf.c: fix build without dtraceKonstantin Belousov2023-09-091-1/+1
* pf: mark removed connections within a multihome association as shutting downKristof Provost2023-09-071-15/+72
* pf: inherit v_tag values to multihomed connectionsKristof Provost2023-09-071-1/+5
* pf: improve SCTP state validationKristof Provost2023-09-072-10/+39
* pf: support SCTP multihomingKristof Provost2023-09-072-10/+210
* pf: retire pf_krule_to_rule and pf_kpool_to_poolMateusz Guzik2023-09-011-115/+0
* pf: remove DIOCGETRULE and DIOCGETSTATUSKristof Provost2023-08-311-98/+0
* pf: Remove DIOCCLRSTATES and DIOCKILLSTATESKristof Provost2023-08-291-50/+0
* pf: Access r->rpool.cur->kif under mutex protectionKajetan Staszkiewicz2023-08-242-19/+36