aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/pf
Commit message (Expand)AuthorAgeFilesLines
* pfsync: add missing bucket lockKristof Provost46 hours1-0/+4
* IfAPI: Explicitly include <net/if_private.h> in netstackJustin Hibbits4 days5-0/+5
* pf: fix panic on deferred packetsKristof Provost2023-01-131-1/+4
* pf: default syncookies to adaptive modeKristof Provost2023-01-132-2/+9
* pf: fix syncookies in conjunction with tcp fast port reuseKristof Provost2023-01-132-7/+24
* pf: Fix definitions of pf_pfil_*_hookedMark Johnston2022-12-141-12/+12
* pf: fix pfi_ifnet leak on interface removalNick Reilly2022-12-141-5/+18
* tcp: embed inpcb into tcpcbGleb Smirnoff2022-12-071-0/+1
* pf: allow scrub rules without fragment reassembleKristof Provost2022-11-282-18/+22
* pfsync: fix memory leakKristof Provost2022-11-151-0/+1
* pfsync: prepare code to accommodate AF_INET6 familyLuiz Amaral2022-11-093-121/+475
* pf: bridge-toKristof Provost2022-11-023-1/+45
* pf: expose syncookie active/inactive statusKristof Provost2022-10-311-0/+2
* netpfil: Fix two typos in source code commentsGordon Bergling2022-10-251-2/+2
* pf: fix LINT-NOINET6 buildKristof Provost2022-10-151-2/+6
* pf: apply the network stack's ICMP rate limiting to ICMP errors sent by pfKristof Provost2022-10-141-0/+26
* pf: atomically increment state idsKristof Provost2022-10-082-15/+3
* pf: use time_to for timestampsKristof Provost2022-10-051-6/+8
* pf: fix memory leak retrieving Ethernet rulesKristof Provost2022-09-271-0/+2
* if_clone: migrate some consumers to the new KPI.Alexander V. Chernikov2022-09-221-11/+26
* pf: remove pf_bcmp_state_keyMateusz Guzik2022-09-091-37/+3
* pf: partially depessimize pf_match_translationMateusz Guzik2022-09-091-4/+7
* pf: make pfsync_state_import appease an assert in pf_free_stateMateusz Guzik2022-09-061-0/+1
* pf: stop using PFIL_FWDMateusz Guzik2022-09-051-2/+2
* pf: do not block new Ethernet rules for in-progress transactionsKristof Provost2022-08-271-5/+0
* pfsync: replace struct pfsync_pkt with int flagsLuiz Amaral2022-08-221-44/+32
* pf: Reduce diffs against OpenBSD in pf_if.cEd Maste2022-08-201-8/+9
* pf: clear ethernet rules prior to shutdownKristof Provost2022-08-191-0/+3
* protosw: separate pr_input and pr_ctlinput out of protoswGleb Smirnoff2022-08-171-21/+1
* protosw: retire pr_output methodGleb Smirnoff2022-08-111-1/+0
* Introduce and use the NET_EPOCH_DRAIN_CALLBACKS() macroZhenlei Huang2022-07-291-1/+1
* Adjust function definitions in if_pfsync.c to avoid clang 15 warningsDimitry Andric2022-07-251-4/+4
* Fix unused variable warning in if_pfsync.cDimitry Andric2022-07-251-2/+1
* Adjust function definitions in pf.c to avoid clang 15 warningsDimitry Andric2022-07-251-6/+6
* pf: handle dummynet for non-IP packetsKristof Provost2022-07-011-2/+0
* pf: Make sure that pfi_update_status() always zeros countersMark Johnston2022-06-301-4/+5
* pf: Ensure that pfiio_name is always nul terminatedMark Johnston2022-06-301-0/+6
* pf: reduce the risk of src/dst mis-useKristof Provost2022-06-281-3/+3
* pf: ensure mbufs are long enough before we copy out IP(v6) headersKristof Provost2022-06-281-0/+8
* pf: add missing maximum length check for DIOCADDETHRULEKristof Provost2022-06-281-0/+3
* pf: copy out rather than m_pullup() in pf_test_eth_rule()Kristof Provost2022-06-231-22/+14
* pf: support matching on tags for Ethernet rulesKristof Provost2022-06-203-2/+36
* pf: Improve route-to handling of pfsync'd statesKristof Provost2022-06-041-0/+14
* pf: fix more syncookie memory leaksFranco Fichtner2022-06-022-13/+13
* pf: fix a race against kif destruction in pf_test{,6}Mateusz Guzik2022-05-311-10/+26
* pf: make sure the rule tree is allocated in DIOCCHANGERULEMateusz Guzik2022-05-301-3/+37
* pf: call dummynet directly from the ethernet codeKristof Provost2022-05-201-10/+70
* pf: allocate krule->timestamp in pf_krule_alloc()Kristof Provost2022-05-171-2/+2
* pf: fix pf_rule_to_actions()Kristof Provost2022-05-121-2/+6
* pf: tag dummynet'd route-to packets with their real destinationKristof Provost2022-05-122-4/+68