aboutsummaryrefslogtreecommitdiff
path: root/sys/contrib/ipfilter
Commit message (Expand)AuthorAgeFilesLines
* Restore prototype accidently removed by r316811. Also remove $NetBSD$Cy Schubert2017-04-191-1/+1
* Clean up extraneous brackets.Cy Schubert2017-04-151-2/+2
* Add missing free()'s after calls to randomize().Cy Schubert2017-04-141-1/+5
* Keep state incorrectly assumes keep frags. This is counter to theCy Schubert2017-04-142-2/+3
* Fix a use after free panic in ipfilter's fragment processing.Cy Schubert2017-04-141-1/+1
* Fix lookup of original destination address when using a redirect rule.Cy Schubert2017-01-272-4/+4
* Currently the fragment info is placed at the top of the linked listCy Schubert2017-01-262-1/+6
* Get rid of a compiler warning which I saw too often.Bjoern A. Zeeb2017-01-121-4/+4
* In case of removal of m_copy() the macro should remain named M_COPY()Kevin Lo2016-10-082-3/+3
* Remove an extra etter.Eitan Adler2016-09-291-1/+1
* Remove the compatibility macro if_addrlist.Kevin Lo2016-09-291-0/+1
* Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.Kevin Lo2016-09-153-4/+4
* Follow-up to r304953, in which I broke the build: apparently the SOLARISDimitry Andric2016-08-285-14/+28
* Complete r304953.Konstantin Belousov2016-08-281-1/+5
* Define ipfilter's SOLARIS macro in a defined and portable way.Dimitry Andric2016-08-281-1/+5
* Only set the ipfilter running state to 'not running' if we areBjoern A. Zeeb2016-07-061-2/+3
* Virtualise ipfilter.Bjoern A. Zeeb2016-06-305-159/+345
* Remove unused global variables as well as unused memoryBjoern A. Zeeb2016-06-303-23/+0
* Get closer to a VIMAGE network stack teardown from top to bottom ratherBjoern A. Zeeb2016-06-211-1/+1
* Remove extraneous blank line.Cy Schubert2016-05-201-1/+0
* Enable the two ip_frag tuneables. The code is there but the twoCy Schubert2016-05-202-1/+21
* Make subsequent code reachable.Cy Schubert2016-05-151-3/+6
* Use NULL instead of 0 for pointer comparison.Cy Schubert2016-04-151-2/+2
* Add DTrace probes for packets flagged as bad by ipfilter. All probesCy Schubert2016-04-074-11/+62
* Remove redundant NULL pointer comparison.Cy Schubert2016-03-021-4/+0
* These files were getting sys/malloc.h and vm/uma.h with header pollutionGleb Smirnoff2016-02-012-0/+2
* Convert ipfilter to the new routing KPI.Alexander V. Chernikov2016-01-101-41/+30
* Correct __FreeBSD__ check.Cy Schubert2015-12-281-1/+1
* Don't assume checksums will be calculated later when fastfoward isCy Schubert2015-12-201-2/+2
* Really fix ipfilter bug 3600459.Cy Schubert2015-10-181-2/+1
* On some interfaces, ipfilter drops UDP packets with zero checkum.Cy Schubert2015-10-061-0/+16
* Compare the newly allocated array elements to NULL in order to seeBjoern A. Zeeb2015-09-251-2/+2
* Revert ip_fil_freebsd.c -r287674. This should not have gone in yet.Cy Schubert2015-09-111-12/+0
* Fix ipfilter bug 3600459 NAT bucket count wrong.Cy Schubert2015-09-112-1/+14
* Revert $FreeBSD$.Cy Schubert2015-09-111-1/+1
* Fix mutex errors.Cy Schubert2015-09-111-1/+1
* Fixup typos in comments.Cy Schubert2015-09-111-5/+9
* CALLOUT_MPSAFE has lost its meaning since r141428, i.e., for more than tenJung-uk Kim2015-05-221-2/+2
* In ipfilter(4) there is the ipftest(1) program, that compiles half of theGleb Smirnoff2015-04-071-11/+23
* o Use new function ip_fillid() in all places throughout the kernel,Gleb Smirnoff2015-04-014-36/+9
* In order to reduce use of M_EXT outside of the mbuf allocator andRobert Watson2015-01-061-4/+2
* Correctly define constants.Cy Schubert2014-11-282-2/+2
* Set the current vnet inside the ioctl handler for ipfilter.Craig Rodrigues2014-11-201-0/+11
* ipfilter bug #537 NAT rules with sticky have incorrect hostmap IP address.Cy Schubert2014-10-051-2/+4
* ipfilter bug #534 destination list hashing not endian neutralCy Schubert2014-10-051-3/+3
* ipfilter bug #538 ipf_p_dns_del should return voidCy Schubert2014-10-051-3/+2
* ipfilter bug #554 Determining why a ipf rule matches is hard -- replaceCy Schubert2014-10-051-11/+34
* ipfiler bug #550 filter rule list corrupted with inserted rulesCy Schubert2014-10-051-0/+12
* ipfilter bug #558 add in some missing frag table function comments.Cy Schubert2014-09-241-5/+33
* Check for NULL before de-refencing; in particular sel is assigned to NULL,Cy Schubert2014-09-221-2/+2