aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Fix rule truncation on external action module unloading.Andrey V. Elsukov2019-08-151-5/+5
* pf: zero (another) output buffer in pfioctlEd Maste2019-07-311-1/+1
* dd ipfw_get_action() function to get the pointer to action opcode.Andrey V. Elsukov2019-07-294-17/+44
* pf: Remove partial RFC2675 supportKristof Provost2019-07-292-36/+9
* Avoid possible lock leaking.Andrey V. Elsukov2019-07-291-5/+12
* pf: zero output buffer in pfioctlEd Maste2019-07-241-1/+1
* Eliminate rmlock from ipfw's BPF code.Andrey V. Elsukov2019-07-231-41/+14
* Do not modify cmd pointer if it is already last opcode in the rule.Andrey V. Elsukov2019-07-121-1/+1
* Correctly truncate the rule in case when it has several action opcodes.Andrey V. Elsukov2019-07-121-14/+30
* Convert all IPv4 and IPv6 multicast memberships into using a STAILQHans Petter Selasky2019-06-251-24/+21
* Follow the RFC 3128 and drop short TCP fragments with offset = 1.Andrey V. Elsukov2019-06-251-0/+5
* Mark default rule with IPFW_RULE_NOOPT flag, so it can be showed inAndrey V. Elsukov2019-06-251-0/+1
* Add "tcpmss" opcode to match the TCP MSS value.Andrey V. Elsukov2019-06-212-6/+41
* Separate kernel crc32() implementation to its own header (gsb_crc32.h) andXin LI2019-06-171-0/+1
* Initialize V_nat64out methods explicitly.Andrey V. Elsukov2019-06-051-0/+2
* Remove an uneeded indentation introduced in r223637 to silence gcc warngingLi-Wen Hsu2019-05-251-1/+1
* Restructure mbuf send tags to provide stronger guarantees.John Baldwin2019-05-241-1/+1
* Add IPv6 support for O_IPLEN opcode.Andrey V. Elsukov2019-04-291-2/+4
* pf: No need to M_NOWAIT in DIOCRSETTFLAGSKristof Provost2019-04-181-5/+1
* pf: Fix panic on invalid DIOCRSETTFLAGSKristof Provost2019-04-171-3/+3
* Use IN_foo() macros from sys/netinet/in.h inplace of handcrafted codeRodney W. Grimes2019-04-042-9/+4
* Replace read_random(9) with more appropriate arc4rand(9) KPIsConrad Meyer2019-04-041-1/+1
* pf: use UID_ROOT and GID_WHEEL named constants in make_devEd Maste2019-03-261-1/+1
* Always create ipfw(4) hooks as long as module is loaded.Gleb Smirnoff2019-03-213-41/+81
* pf: Ensure that IP addresses match in ICMP error packetsKristof Provost2019-03-211-3/+22
* Do not enter epoch section recursively.Andrey V. Elsukov2019-03-201-3/+0
* Use NET_EPOCH instead of allocating separate one.Andrey V. Elsukov2019-03-201-10/+4
* Reapply r345274 with build fixes for 32-bit architectures.Andrey V. Elsukov2019-03-193-1727/+1652
* Revert r345274. It appears that not all 32-bit architectures haveAndrey V. Elsukov2019-03-183-1597/+1729
* Update NAT64LSN implementation:Andrey V. Elsukov2019-03-183-1729/+1597
* Add NAT64 CLAT implementation as defined in RFC6877.Andrey V. Elsukov2019-03-185-0/+932
* Add SPDX-License-Identifier and update year in copyright.Andrey V. Elsukov2019-03-1810-30/+40
* Modify struct nat64_config.Andrey V. Elsukov2019-03-1811-88/+126
* pf: Rename pfsync bucket lockKristof Provost2019-03-161-1/+1
* pf :Use counter(9) in pf tables.Kristof Provost2019-03-151-48/+178
* PFIL_MEMPTR for ipfw link level hookGleb Smirnoff2019-03-145-114/+178
* Remove 'dir' argument from dummynet_io(). This makes it possible to makeGleb Smirnoff2019-03-145-40/+36
* Reduce argument list to ipfw_divert(), as args holds the rule ref andGleb Smirnoff2019-03-141-9/+7
* Remove 'dir' argument in ng_ipfw_input, since ip_fw_args now has this info.Gleb Smirnoff2019-03-141-4/+2
* - Add more flags to ip_fw_args. At this changeset only IPFW_ARGS_IN andGleb Smirnoff2019-03-147-73/+66
* Make second argument of ip_divert(), that specifies packet direction a bool.Gleb Smirnoff2019-03-142-6/+4
* Simplify ipfw_bpf_mtap2(). No functional change.Gleb Smirnoff2019-03-141-12/+17
* Add IP_FW_NAT64 to codes that ipfw_chk() can return.Andrey V. Elsukov2019-03-112-0/+5
* Add NULL pointer check to nat64_output().Andrey V. Elsukov2019-03-111-0/+2
* pf: Fix DIOCGETSRCNODESKristof Provost2019-03-081-0/+2
* Fix the problem with O_LIMIT states introduced in r344018.Andrey V. Elsukov2019-03-071-3/+5
* pf: IPv6 fragments with malformed extension headers could be erroneously pass...Kristof Provost2019-03-011-2/+2
* pf: Small performance tweakKristof Provost2019-02-241-1/+1
* Remove `set' field from state structure and use set from parent rule.Andrey V. Elsukov2019-02-111-61/+68
* Place pf_altq_get_nth_active() under the ALTQ ifdefPatrick Kelsey2019-02-111-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-25 13:55:22 +0000