aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Improve upon r309394Marcel Moolenaar2016-12-101-25/+32
* Backout accidentially leaked in r309746 not yet reviewed patch :(Gleb Smirnoff2016-12-091-32/+25
* Use counter_ratecheck() in the ICMP rate limiting.Gleb Smirnoff2016-12-091-25/+32
* Convert result of hash_packet6() into host byte order.Andrey V. Elsukov2016-12-061-6/+5
* pflog: Correctly initialise subrulenrKristof Provost2016-12-051-1/+1
* Fix use-after-free bugs in pfsync(4)Marcel Moolenaar2016-12-021-2/+7
* Fix ICMPv6 Time Exceeded error message translation.Andrey V. Elsukov2016-11-261-2/+2
* Remove the mbuf tag after use (for reinjected packets).Luiz Otavio O Souza2016-11-031-9/+4
* Stop abusing from struct ifnet presence to determine the packet directionLuiz Otavio O Souza2016-11-011-7/+4
* Fix `ipfw table lookup` handler to return entry value, but not its index.Andrey V. Elsukov2016-10-191-1/+5
* pf: port extended DSCP support from OpenBSDKristof Provost2016-10-132-2/+2
* pf: remove fastroute tagKristof Provost2016-10-042-47/+20
* Remove ifa_list, use ifa_link (structure field) instead.Kevin Lo2016-09-281-1/+1
* Move opcode rewriter init and destroy handlers into non-VENT code.Andrey V. Elsukov2016-09-181-2/+2
* Fix swap tables between sets when this functional is enabled.Andrey V. Elsukov2016-09-131-6/+38
* Try to fix gcc compilation errors (which are right).Bjoern A. Zeeb2016-08-181-2/+1
* Fix command: ipfw set (enable|disable) N (where N > 4).Oleg Bulyzhin2016-08-151-2/+4
* pf: Add missing byte-order swap to pf_match_addr_rangeKristof Provost2016-08-151-6/+6
* Use %ju to print unsigned 64-bit value.Andrey V. Elsukov2016-08-131-2/+2
* Add `stats reset` command implementation to NPTv6 moduleAndrey V. Elsukov2016-08-131-0/+36
* Replace __noinline with special debug macro NAT64NOINLINE.Andrey V. Elsukov2016-08-132-17/+17
* Add ipfw_nat64 module that implements stateless and stateful NAT64.Andrey V. Elsukov2016-08-1310-0/+5912
* Add three helper function to manage tables from external modules.Andrey V. Elsukov2016-08-132-2/+57
* Move logging via BPF support into separate file.Andrey V. Elsukov2016-08-134-173/+222
* Restore "nat global" support.Andrey V. Elsukov2016-08-112-10/+16
* Hide the boottime and bootimebin globals, provide the getboottime(9)Konstantin Belousov2016-07-271-2/+10
* Add named dynamic states support to ipfw(4).Andrey V. Elsukov2016-07-194-22/+253
* Add ipfw_nptv6 module that implements Network Prefix Translation for IPv6Andrey V. Elsukov2016-07-183-0/+1020
* Fix problems in the FQ-PIE AQM cleanup code that could leak memory orDon Lewis2016-07-121-136/+87
* pf: Map hook returns onto the correct error valuesKristof Provost2016-07-091-4/+12
* Fix a race condition between the main thread in aqm_pie_cleanup() and theDon Lewis2016-07-051-33/+28
* In case of the global eventhandler make sure the current VNETBjoern A. Zeeb2016-06-301-1/+5
* Move the ipfw_log_bpf() calls from global module initialisation toBjoern A. Zeeb2016-06-302-17/+22
* The void isn't void.Bjoern A. Zeeb2016-06-241-1/+1
* Proerply virtualize pfsync for bringup after pf is initialized andBjoern A. Zeeb2016-06-231-42/+40
* Make sure pflog is attached after pf is initializaed so we canBjoern A. Zeeb2016-06-231-2/+7
* PFSTATE_NOSYNC goes onto state_flags, not sync_state;Bjoern A. Zeeb2016-06-231-1/+1
* Update pf(4) and pflog(4) to survive basic VNET testing, which includesBjoern A. Zeeb2016-06-234-116/+251
* Import a fix for and old security issue (CVE-2010-3830) in pf whichBjoern A. Zeeb2016-06-231-0/+2
* Get closer to a VIMAGE network stack teardown from top to bottom ratherBjoern A. Zeeb2016-06-215-5/+5
* pf: Filter on and set vlan PCP valuesKristof Provost2016-06-172-1/+75
* Fix 4-byte overflow in ipv6_writemask.Alexander V. Chernikov2016-06-051-1/+2
* Replace constant expressions that contain multiplications byDon Lewis2016-06-013-28/+30
* Cast some expressions that multiply a long long constant by aDon Lewis2016-05-292-12/+12
* Correct a typo in a comment.Don Lewis2016-05-261-1/+1
* Modify BOUND_VAR() macro to wrap all of its arguments in () and tweakDon Lewis2016-05-261-2/+2
* Import Dummynet AQM version 0.2.1 (CoDel, FQ-CoDel, PIE and FQ-PIE).Don Lewis2016-05-2619-2/+4572
* pf: Fix more ICMP mistranslationKristof Provost2016-05-231-1/+1
* pf: Fix ICMP translationKristof Provost2016-05-231-10/+5
* pf: Fix fragment timeoutKristof Provost2016-05-201-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-13 18:35:36 +0000