aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* pf: remove unused ioctls.Will Andrews2018-07-011-408/+0
* pfsync: Fix state sync during initial bulk updateKristof Provost2018-06-301-1/+1
* pf: Support "return" statements in passing rules when they fail.Kristof Provost2018-06-221-63/+81
* Switch RIB and RADIX_NODE_HEAD lock from rwlock(9) to rmlock(9).Andrey V. Elsukov2018-06-161-0/+1
* pf: Fix deadlock with route-toKristof Provost2018-06-091-8/+8
* uma: implement provisional api for per-cpu zonesMateusz Guzik2018-06-081-2/+2
* pf: Replace rwlock on PF_RULES_LOCK with rmlockKristof Provost2018-05-308-9/+9
* UDP: further performance improvements on txMatt Macy2018-05-231-9/+9
* Restore the ability to keep states after parent rule deletion.Andrey V. Elsukov2018-05-221-6/+30
* Remove check for matching the rulenum, ruleid and rule pointer fromAndrey V. Elsukov2018-05-211-28/+7
* ifnet: Replace if_addr_lock rwlock with epoch + mutexMatt Macy2018-05-184-5/+4
* Bring in some last changes in NAT64 implementation:Andrey V. Elsukov2018-05-0910-350/+380
* Retire ixgb(4)Sean Bruno2018-05-021-2/+1
* To avoid possible deadlock do not acquire JQUEUE_LOCK before callout_drain.Andrey V. Elsukov2018-04-131-3/+0
* Fix integer types mismatch for flags field in nat64stl_cfg structure.Andrey V. Elsukov2018-04-122-3/+3
* Use cfg->nomatch_verdict as return value from NAT64LSN handler whenAndrey V. Elsukov2018-04-123-10/+9
* Migrate NAT64 to FIB KPI.Andrey V. Elsukov2018-04-122-121/+84
* pf: limit ioctl to a reasonable and tuneable number of elementsKristof Provost2018-04-112-5/+22
* Fix ipfw table creation when net.inet.ip.fw.tables_sets = 0 and non zero setOleg Bulyzhin2018-04-111-1/+1
* pf: Improve ioctl validationKristof Provost2018-04-061-10/+63
* pf: Improve ioctl validation for DIOCIGETIFACES and DIOCXCOMMITKristof Provost2018-04-061-4/+18
* pf: Improve ioctl validation for DIOCRGETTABLES, DIOCRGETTSTATS, DIOCRCLRTSTA...Kristof Provost2018-04-062-18/+38
* pf: Improve ioctl validation for DIOCRADDTABLES and DIOCRDELTABLESKristof Provost2018-04-061-8/+14
* Use an accessor function to access ifr_data.Brooks Davis2018-03-301-2/+4
* netpfil: Introduce PFIL_FWD flagKristof Provost2018-03-233-47/+29
* pf: Fix memory leak in DIOCRADDTABLESKristof Provost2018-03-191-1/+3
* Do not try to reassemble IPv6 fragments in "reass" rule.Andrey V. Elsukov2018-03-121-1/+3
* pf: Cope with overly large net.pf.states_hashsizeKristof Provost2018-02-251-7/+32
* Remove duplicate #include <netinet/ip_var.h>.Andrey V. Elsukov2018-02-071-1/+0
* Rework ipfw dynamic states implementation to be lockless on fast path.Andrey V. Elsukov2018-02-074-1079/+2502
* pf: Avoid warning without INVARIANTSKristof Provost2018-02-011-3/+3
* When IPv6 packet is handled by O_REJECT opcode, convert ICMP codeAndrey V. Elsukov2018-01-241-3/+32
* pf: States have at least two referencesKristof Provost2018-01-241-1/+3
* Unsign some values related to allocation.Pedro F. Giffuni2018-01-222-3/+3
* Add UDPLite support to ipfw(4).Andrey V. Elsukov2018-01-193-5/+20
* Implement 'domainset', a cpuset based NUMA policy mechanism. This allowsJeff Roberson2018-01-121-0/+1
* netpfil/ipfw: Make some use of mallocarray(9).Pedro F. Giffuni2018-01-113-5/+5
* pf: Avoid integer overflow issues by using mallocarray() iso. malloc()Kristof Provost2018-01-071-18/+108
* pf: Allow the module to be unloadedKristof Provost2017-12-311-6/+0
* pf: Clean all fragments on shutdownKristof Provost2017-12-312-3/+10
* SPDX: license IDs for some ISC-related files.Pedro F. Giffuni2017-12-084-2/+6
* SPDX: Fix some cases wrongly attributed to MIT.Pedro F. Giffuni2017-11-301-1/+1
* sys: general adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-2732-8/+72
* Add to ipfw support for sending an SCTP packet containing an ABORT chunk.Michael Tuexen2017-11-262-5/+267
* Modify ipfw's dynamic states KPI.Andrey V. Elsukov2017-11-233-52/+42
* Check that address family of state matches address family of packet.Andrey V. Elsukov2017-11-231-0/+3
* Move ipfw_send_pkt() from ip_fw_dynamic.c into ip_fw2.c.Andrey V. Elsukov2017-11-232-149/+149
* Rework rule ranges matching. Use comparison rule id with UINT32_MAX toAndrey V. Elsukov2017-11-231-7/+6
* Add ipfw_add_protected_rule() function that creates rule with 65535Andrey V. Elsukov2017-11-223-13/+31
* sys: further adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-201-0/+2
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-24 07:53:35 +0000