aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Hide the boottime and bootimebin globals, provide the getboottime(9)Konstantin Belousov2016-07-271-2/+10
* Add named dynamic states support to ipfw(4).Andrey V. Elsukov2016-07-194-22/+253
* Add ipfw_nptv6 module that implements Network Prefix Translation for IPv6Andrey V. Elsukov2016-07-183-0/+1020
* Fix problems in the FQ-PIE AQM cleanup code that could leak memory orDon Lewis2016-07-121-136/+87
* pf: Map hook returns onto the correct error valuesKristof Provost2016-07-091-4/+12
* Fix a race condition between the main thread in aqm_pie_cleanup() and theDon Lewis2016-07-051-33/+28
* In case of the global eventhandler make sure the current VNETBjoern A. Zeeb2016-06-301-1/+5
* Move the ipfw_log_bpf() calls from global module initialisation toBjoern A. Zeeb2016-06-302-17/+22
* The void isn't void.Bjoern A. Zeeb2016-06-241-1/+1
* Proerply virtualize pfsync for bringup after pf is initialized andBjoern A. Zeeb2016-06-231-42/+40
* Make sure pflog is attached after pf is initializaed so we canBjoern A. Zeeb2016-06-231-2/+7
* PFSTATE_NOSYNC goes onto state_flags, not sync_state;Bjoern A. Zeeb2016-06-231-1/+1
* Update pf(4) and pflog(4) to survive basic VNET testing, which includesBjoern A. Zeeb2016-06-234-116/+251
* Import a fix for and old security issue (CVE-2010-3830) in pf whichBjoern A. Zeeb2016-06-231-0/+2
* Get closer to a VIMAGE network stack teardown from top to bottom ratherBjoern A. Zeeb2016-06-215-5/+5
* pf: Filter on and set vlan PCP valuesKristof Provost2016-06-172-1/+75
* Fix 4-byte overflow in ipv6_writemask.Alexander V. Chernikov2016-06-051-1/+2
* Replace constant expressions that contain multiplications byDon Lewis2016-06-013-28/+30
* Cast some expressions that multiply a long long constant by aDon Lewis2016-05-292-12/+12
* Correct a typo in a comment.Don Lewis2016-05-261-1/+1
* Modify BOUND_VAR() macro to wrap all of its arguments in () and tweakDon Lewis2016-05-261-2/+2
* Import Dummynet AQM version 0.2.1 (CoDel, FQ-CoDel, PIE and FQ-PIE).Don Lewis2016-05-2619-2/+4572
* pf: Fix more ICMP mistranslationKristof Provost2016-05-231-1/+1
* pf: Fix ICMP translationKristof Provost2016-05-231-10/+5
* pf: Fix fragment timeoutKristof Provost2016-05-201-1/+1
* Fix the regression introduced in r300143.Andrey V. Elsukov2016-05-201-3/+3
* Move protocol state handling code from lookup_dyn_rule_locked() functionAndrey V. Elsukov2016-05-181-79/+86
* Make named objects set-aware. Now it is possible to create namedAndrey V. Elsukov2016-05-174-296/+493
* Fix memory leak possible in error case.Andrey V. Elsukov2016-05-111-2/+4
* Change the type of objhash_cb_t callback function to be able return anAndrey V. Elsukov2016-05-066-25/+40
* Rename find_name_tlv_type() to ipfw_find_name_tlv_type() and make itAndrey V. Elsukov2016-05-053-44/+9
* sys/net*: minor spelling fixes.Pedro F. Giffuni2016-05-0314-32/+32
* Make create_object callback optional and return EOPNOTSUPP when it isn'tAndrey V. Elsukov2016-04-272-13/+10
* netpfil: for pointers replace 0 with NULL.Pedro F. Giffuni2016-04-153-4/+4
* Add External Actions KPI to ipfw(9).Andrey V. Elsukov2016-04-145-16/+518
* Change the type of 'etlv' field in struct named_object to uint16_t.Andrey V. Elsukov2016-04-142-4/+5
* Adjust some comments and make ref_opcode_object() static.Andrey V. Elsukov2016-04-141-4/+3
* o Teach opcode rewriting framework handle several rewriters forAndrey V. Elsukov2016-04-141-80/+107
* Move several functions related to opcode rewriting framework fromAndrey V. Elsukov2016-04-143-140/+141
* Cleanup unnecessary semicolons from the kernel.Pedro F. Giffuni2016-04-101-1/+1
* pf: Improve forwarding detectionKristof Provost2016-03-161-4/+6
* Use correct size for malloc.Andrey V. Elsukov2016-03-031-1/+1
* Remove taskqueue_enqueue_fast().John Baldwin2016-03-011-1/+1
* pf: Fix possible out-of-bounds writeKristof Provost2016-02-251-2/+3
* Fix bug in filling and handling ipfw's O_DSCP opcode.Andrey V. Elsukov2016-02-241-1/+1
* in pf_print_state_parts, do not use skw->proto to print the protocol but ourKristof Provost2016-02-201-1/+1
* Fix obvious typo, that lead to incorrect sorting.Gleb Smirnoff2016-02-181-1/+1
* These files were getting sys/malloc.h and vm/uma.h with header pollutionGleb Smirnoff2016-02-011-1/+2
* cleanup and document in some detail the internals of the testing codeLuigi Rizzo2016-01-275-143/+199
* the _Static_assert was not supposed to be in the commit.Luigi Rizzo2016-01-271-1/+0