aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/ipfw
Commit message (Expand)AuthorAgeFilesLines
* Fix a few typos in commentsGordon Bergling2021-03-201-1/+1
* ipfw: add IPv6 support for sockarg opcode.Andrey V. Elsukov2021-03-091-18/+26
* Allow setting alias port ranges in libalias and ipfw.Neel Chauhan2021-02-171-0/+7
* Fix LINT-NOINET6 build after r368571.Alexander V. Chernikov2020-12-141-3/+11
* Fix NOINET6 build broken by r368571.Alexander V. Chernikov2020-12-121-1/+1
* ipfw kfib algo: Use rt accessors instead of accessing rib/rtentry directly.Alexander V. Chernikov2020-12-111-112/+57
* Add dtrace SDT probe ipfw:::rule-matched.Andrey V. Elsukov2020-10-211-0/+20
* Add IPv4 fragments reassembling to NAT64LSN.Andrey V. Elsukov2020-10-131-0/+59
* net: clean up empty lines in .c and .h filesMateusz Guzik2020-09-0143-207/+63
* ipfw: style(9) fixesEd Maste2020-08-201-4/+4
* ipfw: make the "frag" keyword accept additional options "mf",Gleb Smirnoff2020-08-111-1/+17
* Handle delayed checksums if needed in NAT64.Andrey V. Elsukov2020-08-051-0/+12
* Don't print VNET pointer when initializing dummynetTom Jones2020-07-131-1/+0
* Complete conversions from fib<4|6>_lookup_nh_<basic|ext> to fib<4|6>_lookup().Alexander V. Chernikov2020-07-023-62/+71
* ipfw(4): make O_IPVER/ipversion match IPv4 or 6, not just IPv4.Mark Johnston2020-06-241-1/+1
* ipfw: unbreak matching with big table type flow.Eugene Grosbein2020-06-041-1/+2
* Fix O_IP_FLOW_LOOKUP opcode handling.Andrey V. Elsukov2020-05-291-0/+2
* ipfw: whitespace fix in SCTP_ABORT_ASSOCIATION case statement commentEd Maste2020-05-031-2/+2
* Move route_temporal.c and route_var.h to net/route.Alexander V. Chernikov2020-04-281-1/+1
* Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki2020-02-269-73/+98
* Use NET_TASK_INIT() and NET_GROUPTASK_INIT() for drivers that processHans Petter Selasky2020-02-181-1/+1
* Add missing EPOCH(9) wrapper in ipfw(8).Hans Petter Selasky2020-02-111-0/+3
* Introduce NET_EPOCH_CALL() macro and use it everywhere where we freeGleb Smirnoff2020-01-151-1/+1
* ipfw: Don't rollback state in alloc_table_vidx() if atomicity is not required.Alexander V. Chernikov2019-12-193-12/+20
* Revert r355908 to commit it with a proper message.Alexander V. Chernikov2019-12-193-20/+12
* svn-commit.tmpAlexander V. Chernikov2019-12-193-12/+20
* Make TCP options parsing stricter.Andrey V. Elsukov2019-12-131-8/+22
* Follow RFC 4443 p2.2 and always use own addresses for reflected ICMPv6Andrey V. Elsukov2019-12-121-14/+66
* Avoid access to stale ip pointer and call UPDATE_POINTERS() afterAndrey V. Elsukov2019-12-101-1/+2
* Use epoch(9) directly instead of obsoleted KPI.Gleb Smirnoff2019-10-142-4/+7
* ipfw(4) rule matching always happens in network epoch.Gleb Smirnoff2019-10-141-6/+4
* Widen NET_EPOCH coverage.Gleb Smirnoff2019-10-071-0/+3
* Drivers may pass runt packets to filter. This is okay.Gleb Smirnoff2019-09-131-1/+4
* Fix rule truncation on external action module unloading.Andrey V. Elsukov2019-08-151-5/+5
* dd ipfw_get_action() function to get the pointer to action opcode.Andrey V. Elsukov2019-07-294-17/+44
* Avoid possible lock leaking.Andrey V. Elsukov2019-07-291-5/+12
* Eliminate rmlock from ipfw's BPF code.Andrey V. Elsukov2019-07-231-41/+14
* Do not modify cmd pointer if it is already last opcode in the rule.Andrey V. Elsukov2019-07-121-1/+1
* Correctly truncate the rule in case when it has several action opcodes.Andrey V. Elsukov2019-07-121-14/+30
* Follow the RFC 3128 and drop short TCP fragments with offset = 1.Andrey V. Elsukov2019-06-251-0/+5
* Mark default rule with IPFW_RULE_NOOPT flag, so it can be showed inAndrey V. Elsukov2019-06-251-0/+1
* Add "tcpmss" opcode to match the TCP MSS value.Andrey V. Elsukov2019-06-212-6/+41
* Initialize V_nat64out methods explicitly.Andrey V. Elsukov2019-06-051-0/+2
* Restructure mbuf send tags to provide stronger guarantees.John Baldwin2019-05-241-1/+1
* Add IPv6 support for O_IPLEN opcode.Andrey V. Elsukov2019-04-291-2/+4
* Use IN_foo() macros from sys/netinet/in.h inplace of handcrafted codeRodney W. Grimes2019-04-041-8/+3
* Always create ipfw(4) hooks as long as module is loaded.Gleb Smirnoff2019-03-213-41/+81
* Do not enter epoch section recursively.Andrey V. Elsukov2019-03-201-3/+0
* Use NET_EPOCH instead of allocating separate one.Andrey V. Elsukov2019-03-201-10/+4
* Reapply r345274 with build fixes for 32-bit architectures.Andrey V. Elsukov2019-03-193-1727/+1652
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-15 07:45:15 +0000