aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/pf
Commit message (Expand)AuthorAgeFilesLines
* pf: remove unused functionKristof Provost3 days1-6/+0
* pf: configurable action on limiter exceededKristof Provost3 days5-14/+72
* pf: avoid a shadowed variable in the pf_create_state() source limiter handlingKristof Provost3 days1-1/+1
* pf: state/source limiter finishing touchesKristof Provost3 days1-28/+25
* pf: remove redundant range checksKristof Provost3 days1-12/+0
* pf: convert state limiter interface to netlinkKristof Provost3 days3-152/+497
* pf: introduce source and state limitersKristof Provost3 days5-0/+1595
* pf: handle nlattr_add_nested() failureKristof Provost9 days1-0/+45
* pf: remove redundant zeroingKristof Provost9 days1-54/+0
* pf: sprinkle const over pf_addr_cmp()Kristof Provost2026-01-021-1/+1
* pf: convert DIOCRCLRASTATS to netlinkKristof Provost2025-12-302-0/+42
* pf: don't reject route-to'd too-large packetsKristof Provost2025-12-261-2/+4
* pf: Fix state handling when ICMP packets are divertedMark Johnston2025-12-221-4/+6
* net: add ifnet_rename_event EVENTHANDLER(9) for interface renamingGleb Smirnoff2025-12-221-0/+12
* pf: make eventhandler_tag's staticGleb Smirnoff2025-12-221-6/+6
* pf: fix pcounters array sizeKristof Provost2025-12-211-1/+1
* pf: Avoid taking the pf rules write lock in a couple of ioctlsMark Johnston2025-12-193-50/+45
* pf: Fix the reply command in a couple of placesMark Johnston2025-12-181-2/+2
* pf: fix min-ttl and set-tos for nat64Kristof Provost2025-12-151-2/+4
* pfsync: Avoid zeroing the state export unionMark Johnston2025-12-142-12/+36
* pf: handle TTL expired during nat64Kristof Provost2025-12-111-5/+20
* pf: Fix error handling in pf_handle_get_tstats()Mark Johnston2025-12-081-0/+10
* pf: Fix an off-by-one in pf_handle_getcreators()Mark Johnston2025-12-081-1/+1
* pf: convert DIOCRGETASTATS to netlinkKristof Provost2025-12-052-1/+123
* pf: make unhandled_af() inlineGleb Smirnoff2025-12-041-6/+0
* pfsync: fix incorrect unlock during destroyKristof Provost2025-12-011-2/+2
* pf: use correct sized variables in pf_change_icmp()Kristof Provost2025-12-011-2/+2
* pf: relax sctp v_tag verificationKristof Provost2025-11-251-1/+5
* pf: fix another endpoint-independent crashKristof Provost2025-11-211-4/+12
* pf: fix udp_mapping cleanupKristof Provost2025-11-171-7/+22
* pf: handle divert packetsKristof Provost2025-11-151-8/+12
* pf: convert DIOCRGETADDRS to netlinkKristof Provost2025-11-052-0/+90
* pf: convert DIOCRSETADDRS to netlinkKristof Provost2025-10-315-5/+55
* pf: Check if source nodes use a valid redirection addressKajetan Staszkiewicz2025-10-303-4/+101
* pf: Make nat-to and rdr-to work properly both on in and out rulesKajetan Staszkiewicz2025-10-301-2/+14
* pf: improve add state validationKristof Provost2025-10-301-0/+3
* pf: improve DIOCRCLRTABLES validationKristof Provost2025-10-301-0/+11
* pf: fix 'no rdr'Kristof Provost2025-10-192-0/+2
* pf: Use proper prototype for SYSINIT functionsZhenlei Huang2025-10-131-2/+2
* pf: fix 'natpass'Kristof Provost2025-10-021-27/+32
* pf: return PF_PASS/PF_DROP from pf_setup_pdesc()Kristof Provost2025-10-021-22/+22
* pf: fix possibe SCTP panicKristof Provost2025-10-021-6/+13
* pf: mark pf_match_translation() staticKristof Provost2025-10-021-2/+2
* pf: Fix interface counters for af-to rulesKajetan Staszkiewicz2025-09-281-52/+99
* pf: Fix rule and state countersKajetan Staszkiewicz2025-09-281-142/+197
* pf: Always skip outbound filtering for inbound af-to rulesKajetan Staszkiewicz2025-09-281-2/+2
* pf: export expiration time as time_tKristof Provost2025-09-252-2/+2
* pf: print 'once' rule expire timeKristof Provost2025-09-253-1/+3
* pf: support one shot rulesKristof Provost2025-09-252-0/+21
* pf: pass pre-NAT addresses to dummynetKristof Provost2025-09-241-6/+33