aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/pf
Commit message (Expand)AuthorAgeFilesLines
* Widen NET_EPOCH coverage.Gleb Smirnoff2019-10-071-60/+91
* pf: zero (another) output buffer in pfioctlEd Maste2019-07-311-1/+1
* pf: Remove partial RFC2675 supportKristof Provost2019-07-292-36/+9
* pf: zero output buffer in pfioctlEd Maste2019-07-241-1/+1
* Convert all IPv4 and IPv6 multicast memberships into using a STAILQHans Petter Selasky2019-06-251-24/+21
* Separate kernel crc32() implementation to its own header (gsb_crc32.h) andXin LI2019-06-171-0/+1
* Remove an uneeded indentation introduced in r223637 to silence gcc warngingLi-Wen Hsu2019-05-251-1/+1
* pf: No need to M_NOWAIT in DIOCRSETTFLAGSKristof Provost2019-04-181-5/+1
* pf: Fix panic on invalid DIOCRSETTFLAGSKristof Provost2019-04-171-3/+3
* Use IN_foo() macros from sys/netinet/in.h inplace of handcrafted codeRodney W. Grimes2019-04-041-1/+1
* Replace read_random(9) with more appropriate arc4rand(9) KPIsConrad Meyer2019-04-041-1/+1
* pf: use UID_ROOT and GID_WHEEL named constants in make_devEd Maste2019-03-261-1/+1
* pf: Ensure that IP addresses match in ICMP error packetsKristof Provost2019-03-211-3/+22
* pf: Rename pfsync bucket lockKristof Provost2019-03-161-1/+1
* pf :Use counter(9) in pf tables.Kristof Provost2019-03-151-48/+178
* Make second argument of ip_divert(), that specifies packet direction a bool.Gleb Smirnoff2019-03-141-3/+1
* pf: Fix DIOCGETSRCNODESKristof Provost2019-03-081-0/+2
* pf: IPv6 fragments with malformed extension headers could be erroneously pass...Kristof Provost2019-03-011-2/+2
* pf: Small performance tweakKristof Provost2019-02-241-1/+1
* Place pf_altq_get_nth_active() under the ALTQ ifdefPatrick Kelsey2019-02-111-1/+1
* Reduce the time it takes the kernel to install a new PF config containing a l...Patrick Kelsey2019-02-112-124/+296
* Return PFIL_CONSUMED if packet was consumed. While here gather allGleb Smirnoff2019-02-021-20/+24
* New pfil(9) KPI together with newborn pfil API and control utility.Gleb Smirnoff2019-01-311-74/+84
* Don't re-evaluate ALTQ kernel configuration due to events on non-ALTQ interfacesPatrick Kelsey2019-01-281-0/+8
* pf: Fix use-after-free of countersKristof Provost2019-01-251-14/+14
* pf: Validate psn_len in DIOCGETSRCNODESKristof Provost2019-01-221-7/+11
* pf: fix pfsync breaking carpKristof Provost2019-01-181-0/+1
* pf: silence a runtime warningKristof Provost2019-01-151-1/+4
* Mechanical cleanup of epoch(9) usage in network stack.Gleb Smirnoff2019-01-091-12/+21
* pf: Fix endless loop on NAT exhaustion with sticky-addressKristof Provost2018-12-122-0/+10
* pf: Prevent integer overflow in PF when calculating the adaptive timeout.Kristof Provost2018-12-111-3/+5
* pfsync: Performance improvementKristof Provost2018-12-061-236/+330
* pf: add a comment describing why do we call pf_map_addr again if portKristof Provost2018-12-061-0/+4
* pf: Fix panic on overlapping interface namesKristof Provost2018-12-011-1/+2
* pf: Prevent tables referenced by rules in anchors from getting disabled.Kristof Provost2018-11-081-0/+1
* pf: Fix build if INVARIANTS is not setKristof Provost2018-11-021-0/+2
* pf: Keep a reference to struct ifnets we're usingKristof Provost2018-11-021-1/+7
* pfsync: Add missing unlockKristof Provost2018-11-021-0/+1
* pfsync: Allow module to be unloadedKristof Provost2018-11-021-6/+0
* pfsync: Handle syncdev going awayKristof Provost2018-11-023-0/+32
* pfsync: Ensure uninit is done before pfKristof Provost2018-11-021-5/+2
* pfsync: Make pfsync callbacks per-vnetKristof Provost2018-11-023-48/+50
* pf: Limit the fragment entry queue length to 64 per bucket.Kristof Provost2018-11-021-5/+29
* pf: Split the fragment reassembly queue into smaller partsKristof Provost2018-11-021-19/+162
* pf: Count holes rather than fragments for reassemblyKristof Provost2018-11-021-38/+45
* Revert "pf: Limit the maximum number of fragments per packet"Kristof Provost2018-11-021-8/+0
* pf: Make ':0' ignore link-local v6 addresses tooKristof Provost2018-10-281-1/+2
* pf: Fix copy/paste error in IPv6 address rewritingKristof Provost2018-10-241-1/+1
* pf: ifp can never be NULL in pfi_ifaddr_event()Kristof Provost2018-10-231-1/+4
* pf synproxy will do the 3WHS on behalf of the target machine, and onceKristof Provost2018-10-201-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-22 05:24:52 +0000