| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | - Remove rt_metrics_lite and simply put its members into rtentry. | Gleb Smirnoff | 2014-03-05 | 1 | -1/+1 |
| * | Instead of playing games with casts simply add 3 more members to the | Gleb Smirnoff | 2014-03-05 | 1 | -10/+3 |
| * | Revert r262196 | Martin Matuska | 2014-02-19 | 1 | -30/+19 |
| * | De-virtualize pf_mtag_z [1] | Martin Matuska | 2014-02-18 | 1 | -19/+30 |
| * | Summary: Two quick edits to the implementation notes as they're no | George V. Neville-Neil | 2014-02-15 | 1 | -2/+2 |
| * | Under sys/netpfil/ipfw, surround two IPv6-specific static functions with | Dimitry Andric | 2014-02-15 | 2 | -0/+4 |
| * | Once pf became not covered by a single mutex, many counters in it became | Gleb Smirnoff | 2014-02-14 | 3 | -46/+72 |
| * | Reorder struct ip_fw_chain: | Alexander V. Chernikov | 2014-01-24 | 3 | -10/+12 |
| * | Remove NULL pointer dereference. | Gleb Smirnoff | 2014-01-22 | 1 | -1/+0 |
| * | Fix resource leak and simplify code for DIOCCHANGEADDR. | Gleb Smirnoff | 2014-01-22 | 1 | -24/+18 |
| * | Revert r260548. We really should not use IPFW_WLOCK() here | Alexander V. Chernikov | 2014-01-11 | 1 | -3/+3 |
| * | We don't need chain write lock since we're not modifying its contents. | Alexander V. Chernikov | 2014-01-11 | 1 | -3/+3 |
| * | When pf_get_translation() fails, it should leave *sn pointer pristine, | Gleb Smirnoff | 2014-01-06 | 1 | -0/+1 |
| * | Use rnh_matchaddr instead of rnh_lookup for longest-prefix match. | Alexander V. Chernikov | 2014-01-03 | 1 | -3/+3 |
| * | Fix incorrect header guard define in sys/netpfil/pf/pf.h, which snuck in | Dimitry Andric | 2013-12-22 | 1 | -1/+1 |
| * | Fix fallout from r258479: in pf_free_src_node() the node must already | Gleb Smirnoff | 2013-12-22 | 1 | -1/+0 |
| * | Add net.inet.ip.fw.dyn_keep_states sysctl which | Alexander V. Chernikov | 2013-12-18 | 1 | -1/+24 |
| * | Simplify O_NAT opcode handling. | Alexander V. Chernikov | 2013-11-28 | 1 | -19/+16 |
| * | Check ipfw table numbers in both user and kernel space before rule addition. | Alexander V. Chernikov | 2013-11-28 | 1 | -1/+1 |
| * | In sys/netpfil/ipfw/ip_fw_nat.c:vnet_ipfw_nat_uninit() we call "IPFW_WLOCK(ch... | Craig Rodrigues | 2013-11-25 | 1 | -1/+1 |
| * | The DIOCKILLSRCNODES operation was implemented with O(m*n) complexity, | Gleb Smirnoff | 2013-11-22 | 1 | -38/+56 |
| * | To support upcoming changes change internal API for source node handling: | Gleb Smirnoff | 2013-11-22 | 1 | -16/+54 |
| * | Fix off by ones when scanning source nodes hash. | Gleb Smirnoff | 2013-11-22 | 1 | -3/+3 |
| * | Style: don't compare unsigned <= 0. | Gleb Smirnoff | 2013-11-22 | 1 | -3/+3 |
| * | add a counter on the struct mq (a queue of mbufs), | Luigi Rizzo | 2013-11-22 | 3 | -0/+32 |
| * | disable some ipfw match options when compiling in userspace | Luigi Rizzo | 2013-11-22 | 1 | -2/+10 |
| * | make this code compile in userspace on OSX | Luigi Rizzo | 2013-11-22 | 1 | -0/+7 |
| * | more support for userspace compiling of this code: | Luigi Rizzo | 2013-11-22 | 1 | -0/+10 |
| * | make ipfw_check_packet() and ipfw_check_frame() public, | Luigi Rizzo | 2013-11-22 | 1 | -4/+4 |
| * | Some fixups to pf_get_sport after r257223: | Gleb Smirnoff | 2013-11-14 | 1 | -7/+4 |
| * | Fix fallout from r257223. Since pf_test_state_icmp() can call | Gleb Smirnoff | 2013-11-05 | 1 | -0/+4 |
| * | Remove net.link.ether.inet.useloopback sysctl tunable. It was always on by | Gleb Smirnoff | 2013-11-05 | 1 | -1/+1 |
| * | Code logic of handling PFTM_PURGE into pf_find_state(). | Gleb Smirnoff | 2013-11-04 | 1 | -5/+5 |
| * | Remove unused PFTM_UNTIL_PACKET const. | Gleb Smirnoff | 2013-11-04 | 3 | -6/+2 |
| * | - Fix VIMAGE build. | Gleb Smirnoff | 2013-10-28 | 1 | -1/+3 |
| * | Include necessary headers that now are available due to pollution | Gleb Smirnoff | 2013-10-28 | 1 | -0/+1 |
| * | Import pf.c 1.638 from OpenBSD | Baptiste Daroussin | 2013-10-27 | 1 | -3/+3 |
| * | Improt pf.c 1.636 from OpenBSD | Baptiste Daroussin | 2013-10-27 | 1 | -1/+2 |
| * | Import pf.c 1.635 and pf_lb.c 1.4 from OpenBSD | Baptiste Daroussin | 2013-10-27 | 2 | -84/+350 |
| * | Move new pf includes to the pf directory. The pfvar.h remain | Gleb Smirnoff | 2013-10-27 | 7 | -4/+315 |
| * | Provide includes that are needed in these files, and before were read | Gleb Smirnoff | 2013-10-26 | 4 | -0/+4 |
| * | The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare | Gleb Smirnoff | 2013-10-26 | 11 | -1/+27 |
| * | Use the correct EtherType for logging IPv6 packets. | Philip Paeps | 2013-09-28 | 1 | -2/+9 |
| * | Merge 1.12 of pf_lb.c from OpenBSD, with some changes. Original commit: | Gleb Smirnoff | 2013-09-02 | 1 | -26/+29 |
| * | Make dummynet use new direct callout(9) execution mechanism. Since the only | Alexander Motin | 2013-08-24 | 1 | -4/+6 |
| * | Make ipfw nat init/unint work correctly for VIMAGE: | Mikolaj Golub | 2013-08-24 | 3 | -24/+58 |
| * | Add m_clrprotoflags() to clear protocol specific mbuf flags at up and | Andre Oppermann | 2013-08-19 | 1 | -2/+2 |
| * | Fix a possible NULL-pointer dereference on the pfsync(4) reconfiguration. | Andrey V. Elsukov | 2013-07-29 | 1 | -1/+4 |
| * | Improve locking strategy between keys hash and ID hash. | Gleb Smirnoff | 2013-06-13 | 1 | -21/+64 |
| * | Return meaningful error code from pf_state_key_attach() and | Gleb Smirnoff | 2013-05-11 | 1 | -4/+5 |
