aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* To avoid possible deadlock do not acquire JQUEUE_LOCK before callout_drain.Andrey V. Elsukov2018-04-131-3/+0
* Fix integer types mismatch for flags field in nat64stl_cfg structure.Andrey V. Elsukov2018-04-122-3/+3
* Use cfg->nomatch_verdict as return value from NAT64LSN handler whenAndrey V. Elsukov2018-04-123-10/+9
* Migrate NAT64 to FIB KPI.Andrey V. Elsukov2018-04-122-121/+84
* pf: limit ioctl to a reasonable and tuneable number of elementsKristof Provost2018-04-112-5/+22
* Fix ipfw table creation when net.inet.ip.fw.tables_sets = 0 and non zero setOleg Bulyzhin2018-04-111-1/+1
* pf: Improve ioctl validationKristof Provost2018-04-061-10/+63
* pf: Improve ioctl validation for DIOCIGETIFACES and DIOCXCOMMITKristof Provost2018-04-061-4/+18
* pf: Improve ioctl validation for DIOCRGETTABLES, DIOCRGETTSTATS, DIOCRCLRTSTA...Kristof Provost2018-04-062-18/+38
* pf: Improve ioctl validation for DIOCRADDTABLES and DIOCRDELTABLESKristof Provost2018-04-061-8/+14
* Use an accessor function to access ifr_data.Brooks Davis2018-03-301-2/+4
* netpfil: Introduce PFIL_FWD flagKristof Provost2018-03-233-47/+29
* pf: Fix memory leak in DIOCRADDTABLESKristof Provost2018-03-191-1/+3
* Do not try to reassemble IPv6 fragments in "reass" rule.Andrey V. Elsukov2018-03-121-1/+3
* pf: Cope with overly large net.pf.states_hashsizeKristof Provost2018-02-251-7/+32
* Remove duplicate #include <netinet/ip_var.h>.Andrey V. Elsukov2018-02-071-1/+0
* Rework ipfw dynamic states implementation to be lockless on fast path.Andrey V. Elsukov2018-02-074-1079/+2502
* pf: Avoid warning without INVARIANTSKristof Provost2018-02-011-3/+3
* When IPv6 packet is handled by O_REJECT opcode, convert ICMP codeAndrey V. Elsukov2018-01-241-3/+32
* pf: States have at least two referencesKristof Provost2018-01-241-1/+3
* Unsign some values related to allocation.Pedro F. Giffuni2018-01-222-3/+3
* Add UDPLite support to ipfw(4).Andrey V. Elsukov2018-01-193-5/+20
* Implement 'domainset', a cpuset based NUMA policy mechanism. This allowsJeff Roberson2018-01-121-0/+1
* netpfil/ipfw: Make some use of mallocarray(9).Pedro F. Giffuni2018-01-113-5/+5
* pf: Avoid integer overflow issues by using mallocarray() iso. malloc()Kristof Provost2018-01-071-18/+108
* pf: Allow the module to be unloadedKristof Provost2017-12-311-6/+0
* pf: Clean all fragments on shutdownKristof Provost2017-12-312-3/+10
* SPDX: license IDs for some ISC-related files.Pedro F. Giffuni2017-12-084-2/+6
* SPDX: Fix some cases wrongly attributed to MIT.Pedro F. Giffuni2017-11-301-1/+1
* sys: general adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-2732-8/+72
* Add to ipfw support for sending an SCTP packet containing an ABORT chunk.Michael Tuexen2017-11-262-5/+267
* Modify ipfw's dynamic states KPI.Andrey V. Elsukov2017-11-233-52/+42
* Check that address family of state matches address family of packet.Andrey V. Elsukov2017-11-231-0/+3
* Move ipfw_send_pkt() from ip_fw_dynamic.c into ip_fw2.c.Andrey V. Elsukov2017-11-232-149/+149
* Rework rule ranges matching. Use comparison rule id with UINT32_MAX toAndrey V. Elsukov2017-11-231-7/+6
* Add ipfw_add_protected_rule() function that creates rule with 65535Andrey V. Elsukov2017-11-223-13/+31
* sys: further adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-201-0/+2
* Add comment for accidentally committed unrelated change in r325960.Andrey V. Elsukov2017-11-171-0/+4
* Unconditionally enable support for O_IPSEC opcode.Andrey V. Elsukov2017-11-171-4/+1
* Fix Dummynet AQM packet marking function ecn_mark() and fq_codel /Don Lewis2017-10-269-26/+44
* Add IPv6 support for O_TCPDATALEN opcode.Andrey V. Elsukov2017-10-241-5/+21
* Fix regression in handling O_FORWARD_IP opcode after r279948.Andrey V. Elsukov2017-10-131-0/+3
* Fix a bug which avoided that rules for matching port numbers for SCTPMichael Tuexen2017-10-021-2/+2
* Use in_localip() function instead of unlocked access to addresses hashAndrey V. Elsukov2017-09-201-8/+2
* Do not acquire IPFW_WLOCK when a named object is created and destroyed.Andrey V. Elsukov2017-09-205-24/+0
* pf_get_sport(): Prevent possible endless loop when searching for an unused na...Kristof Provost2017-08-081-3/+5
* Fix a couple of typos in a comment.Luiz Otavio O Souza2017-07-211-1/+1
* Fix GRE over IPv6 tunnels with IPFWPhilip Paeps2017-07-131-0/+7
* pf: Fix vnet purgingKristof Provost2017-07-091-3/+6
* Fix IPv6 extension header parsing. The length field doesn't include theAndrey V. Elsukov2017-06-293-3/+3
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-20 13:36:35 +0000