aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* ipfilter: Cast uintmax_t values to size_t when adding to a pointer.John Baldwin4 days1-4/+4
* pf: fix memory leak retrieving Ethernet rulesKristof Provost5 days1-0/+2
* if_clone: migrate some consumers to the new KPI.Alexander V. Chernikov10 days1-11/+26
* netpfil: Fix some typos in source code commentsGordon Bergling2022-09-153-5/+5
* pf: remove pf_bcmp_state_keyMateusz Guzik2022-09-091-37/+3
* pf: partially depessimize pf_match_translationMateusz Guzik2022-09-091-4/+7
* ipfilter: Remove unused ioctlCy Schubert2022-09-071-12/+0
* ipfilter: Remove IPL_SELECTCy Schubert2022-09-071-14/+0
* pf: make pfsync_state_import appease an assert in pf_free_stateMateusz Guzik2022-09-061-0/+1
* pf: stop using PFIL_FWDMateusz Guzik2022-09-051-2/+2
* netpfil: Correct some typos in source code commentsGordon Bergling2022-09-044-4/+4
* netpfil: Fix a typo in a source code commentGordon Bergling2022-09-031-8/+8
* pf: do not block new Ethernet rules for in-progress transactionsKristof Provost2022-08-271-5/+0
* nat64: fix whitespace damage in callout callsMateusz Guzik2022-08-271-2/+2
* pfsync: replace struct pfsync_pkt with int flagsLuiz Amaral2022-08-221-44/+32
* pf: Reduce diffs against OpenBSD in pf_if.cEd Maste2022-08-201-8/+9
* pf: clear ethernet rules prior to shutdownKristof Provost2022-08-191-0/+3
* protosw: separate pr_input and pr_ctlinput out of protoswGleb Smirnoff2022-08-171-21/+1
* ipfw: make it possible to specify MTU for "unreach needfrag" actionGleb Smirnoff2022-08-172-4/+18
* protosw: retire pr_output methodGleb Smirnoff2022-08-111-1/+0
* Introduce and use the NET_EPOCH_DRAIN_CALLBACKS() macroZhenlei Huang2022-07-291-1/+1
* Adjust function definitions in if_pfsync.c to avoid clang 15 warningsDimitry Andric2022-07-251-4/+4
* Fix unused variable warning in if_pfsync.cDimitry Andric2022-07-251-2/+1
* Adjust function definitions in pf.c to avoid clang 15 warningsDimitry Andric2022-07-251-6/+6
* Adjust ipfw_iface_{init,destroy}() definitions to avoid clang 15 warningDimitry Andric2022-07-211-2/+2
* Adjust iface_khandler_deregister() definition to avoid clang 15 warningDimitry Andric2022-07-211-1/+1
* Adjust ipfw_{init,destroy}_sopt_handler() definitions to avoid clang 15 warningDimitry Andric2022-07-211-2/+2
* Adjust iface_khandler_register() definition to avoid clang 15 warningDimitry Andric2022-07-211-1/+1
* Adjust ipfw_{init,destroy}_*() definitions to avoid clang 15 warningDimitry Andric2022-07-211-4/+4
* Suppress unused variable warning in ip_dummynet.cDimitry Andric2022-07-201-1/+1
* dummynet: check for ifp on all PROTO_LAYER2 packetsKristof Provost2022-07-111-1/+3
* ipfilter: Support only jails in VNETCy Schubert2022-07-073-0/+28
* dummynet: fix ip_dn_vnet_init() / dummynet_task() raceKristof Provost2022-07-052-1/+8
* pf: handle dummynet for non-IP packetsKristof Provost2022-07-011-2/+0
* pf: Make sure that pfi_update_status() always zeros countersMark Johnston2022-06-301-4/+5
* pf: Ensure that pfiio_name is always nul terminatedMark Johnston2022-06-301-0/+6
* dummynet: handle IPV6 layer 2 trafficKristof Provost2022-06-301-0/+2
* pf: reduce the risk of src/dst mis-useKristof Provost2022-06-281-3/+3
* pf: ensure mbufs are long enough before we copy out IP(v6) headersKristof Provost2022-06-281-0/+8
* pf: add missing maximum length check for DIOCADDETHRULEKristof Provost2022-06-281-0/+3
* pf: copy out rather than m_pullup() in pf_test_eth_rule()Kristof Provost2022-06-231-22/+14
* pf: support matching on tags for Ethernet rulesKristof Provost2022-06-203-2/+36
* ipfw: add support radix tables and table lookup for MAC addressesArseny Smalyuk2022-06-044-148/+546
* pf: Improve route-to handling of pfsync'd statesKristof Provost2022-06-041-0/+14
* pf: fix more syncookie memory leaksFranco Fichtner2022-06-022-13/+13
* pf: fix a race against kif destruction in pf_test{,6}Mateusz Guzik2022-05-311-10/+26
* pf: make sure the rule tree is allocated in DIOCCHANGERULEMateusz Guzik2022-05-301-3/+37
* pf: call dummynet directly from the ethernet codeKristof Provost2022-05-201-10/+70
* dummynet: do not store struct ifnet pointersKristof Provost2022-05-202-4/+9
* pf: allocate krule->timestamp in pf_krule_alloc()Kristof Provost2022-05-171-2/+2