| Commit message (Expand) | Author | Age | Files | Lines |
* | ALTQ FAIRQ discipline import from DragonFLY | Ermal Luçi | 2015-06-24 | 3 | -0/+34 |
* | pf: Remove frc_direction | Kristof Provost | 2015-06-11 | 1 | -7/+3 |
* | pf: Save the protocol number in the pf_fragment | Kristof Provost | 2015-06-11 | 1 | -0/+1 |
* | pf: address family must be set when creating a pf_fragment | Kristof Provost | 2015-06-10 | 1 | -0/+1 |
* | CALLOUT_MPSAFE has lost its meaning since r141428, i.e., for more than ten | Jung-uk Kim | 2015-05-22 | 1 | -1/+1 |
* | Use MTX_SYSINIT() instead of mtx_init() to separate mutex initialization | Gleb Smirnoff | 2015-05-19 | 3 | -17/+9 |
* | During module unload unlock rules before destroying UMA zones, which | Gleb Smirnoff | 2015-05-19 | 1 | -1/+1 |
* | A miss from r283061: don't dereference NULL is pf_get_mtag() fails. | Gleb Smirnoff | 2015-05-18 | 1 | -2/+4 |
* | Don't dereference NULL is pf_get_mtag() fails. | Gleb Smirnoff | 2015-05-18 | 1 | -12/+14 |
* | Move ALTQ from contrib to net/altq. The ALTQ code is for many years | Gleb Smirnoff | 2015-04-16 | 1 | -1/+1 |
* | pf: Fix forwarding detection | Kristof Provost | 2015-04-14 | 1 | -1/+1 |
* | I can find no reason to allow packets with both SYN and FIN bits | George V. Neville-Neil | 2015-04-14 | 1 | -1/+1 |
* | pf: Skip firewall for refragmented ip6 packets | Kristof Provost | 2015-04-06 | 1 | -0/+1 |
* | o Use new function ip_fillid() in all places throughout the kernel, | Gleb Smirnoff | 2015-04-01 | 2 | -3/+3 |
* | pf: Deal with runt packets | Kristof Provost | 2015-04-01 | 1 | -4/+4 |
* | Preserve IPv6 fragment IDs accross reassembly and refragmentation | Kristof Provost | 2015-04-01 | 1 | -1/+7 |
* | Static'ize pf_fillup_fragment body to match its declaration. | Sergey Kandaurov | 2015-03-26 | 1 | -1/+1 |
* | Always lock the hash row of a source node when updating its 'states' counter. | Gleb Smirnoff | 2015-03-17 | 2 | -66/+59 |
* | Reset mbuf pointer to NULL in fastroute case to indicate that mbuf was | Andrey V. Elsukov | 2015-03-12 | 1 | -0/+1 |
* | Even more fixes to !INET and !INET6 kernels. | Gleb Smirnoff | 2015-02-17 | 1 | -17/+14 |
* | - Improve INET/INET6 scope. | Gleb Smirnoff | 2015-02-16 | 1 | -34/+31 |
* | Toss declarations to fix regular build and NO_INET6 build. | Gleb Smirnoff | 2015-02-16 | 1 | -3/+5 |
* | In the forwarding case refragment the reassembled packets with the same | Gleb Smirnoff | 2015-02-16 | 4 | -2/+93 |
* | Update the pf fragment handling code to closer match recent OpenBSD. | Gleb Smirnoff | 2015-02-16 | 2 | -286/+552 |
* | Back out r276841, r276756, r276747, r276746. The change in r276747 is very | Gleb Smirnoff | 2015-01-22 | 5 | -93/+145 |
* | Do not initialize pfi_unlnkdkifs_mtx and pf_frag_mtx. | Craig Rodrigues | 2015-01-08 | 2 | -8/+0 |
* | Reapply previous patch to fix build. | Craig Rodrigues | 2015-01-06 | 4 | -39/+23 |
* | Instead of creating a purge thread for every vnet, create | Craig Rodrigues | 2015-01-06 | 1 | -58/+24 |
* | Merge: r258322 from projects/pf branch | Craig Rodrigues | 2015-01-06 | 5 | -47/+53 |
* | pf(4) needs to have a correct checksum during its processing. | Ermal Luçi | 2014-11-19 | 1 | -6/+6 |
* | Finish r274315: remove union 'u' from struct pf_send_entry. | Alexander V. Chernikov | 2014-11-09 | 1 | -16/+11 |
* | Remove unused 'struct route' fields. | Alexander V. Chernikov | 2014-11-09 | 1 | -2/+0 |
* | Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed. | Gleb Smirnoff | 2014-11-07 | 1 | -1/+1 |
* | Fix multiple incorrect SYSCTL arguments in the kernel: | Hans Petter Selasky | 2014-10-21 | 1 | -2/+2 |
* | Add a complete implementation of MurmurHash3. Tweak both implementations | Dag-Erling Smørgrav | 2014-10-18 | 1 | -7/+7 |
* | Change the PF hash from Jenkins to Murmur3. In forwarding tests | George V. Neville-Neil | 2014-10-10 | 1 | -7/+7 |
* | Remove lock init from radix.c. | Alexander V. Chernikov | 2014-10-01 | 1 | -6/+2 |
* | Use rn_detachhead() instead of direct free(9) for radix tables. | Gleb Smirnoff | 2014-10-01 | 1 | -2/+2 |
* | Mechanically convert to if_inc_counter(). | Gleb Smirnoff | 2014-09-19 | 2 | -8/+8 |
* | Remove ifq_drops from struct ifqueue. Now queue drops are accounted in | Gleb Smirnoff | 2014-09-19 | 2 | -2/+1 |
* | - Provide a sleepable lock to protect against ioctl() vs ioctl() races. | Gleb Smirnoff | 2014-09-12 | 1 | -10/+7 |
* | Clean up unused CSUM_FRAGMENT. | Gleb Smirnoff | 2014-09-03 | 1 | -2/+1 |
* | Explicitly free packet on PF_DROP, otherwise a "quick" rule with | Gleb Smirnoff | 2014-09-01 | 1 | -0/+8 |
* | Do not lookup source node twice when pf_map_addr() is used. | Gleb Smirnoff | 2014-08-15 | 2 | -13/+19 |
* | pf_map_addr() can fail and in this case we should drop the packet, | Gleb Smirnoff | 2014-08-15 | 2 | -29/+16 |
* | Fix synproxy with IPv6. pf_test6() was missing a check for M_SKIP_FIREWALL. | Gleb Smirnoff | 2014-08-15 | 1 | -0/+3 |
* | Change pr_output's prototype to avoid the need for explicit casts. | Kevin Lo | 2014-08-15 | 1 | -1/+1 |
* | - Count global pf(4) statistics in counter(9). | Gleb Smirnoff | 2014-08-14 | 3 | -23/+120 |
* | Merge 'struct ip6protosw' and 'struct protosw' into one. Now we have | Kevin Lo | 2014-08-08 | 1 | -4/+7 |
* | On machines with strict alignment copy pfsync_state_key from packet | Gleb Smirnoff | 2014-07-10 | 1 | -15/+26 |