| Commit message (Expand) | Author | Age | Files | Lines |
* | pf: Skip firewall for refragmented ip6 packets | Kristof Provost | 2015-04-06 | 1 | -0/+1 |
* | o Use new function ip_fillid() in all places throughout the kernel, | Gleb Smirnoff | 2015-04-01 | 2 | -3/+3 |
* | pf: Deal with runt packets | Kristof Provost | 2015-04-01 | 1 | -4/+4 |
* | Preserve IPv6 fragment IDs accross reassembly and refragmentation | Kristof Provost | 2015-04-01 | 1 | -1/+7 |
* | Static'ize pf_fillup_fragment body to match its declaration. | Sergey Kandaurov | 2015-03-26 | 1 | -1/+1 |
* | Always lock the hash row of a source node when updating its 'states' counter. | Gleb Smirnoff | 2015-03-17 | 2 | -66/+59 |
* | Reset mbuf pointer to NULL in fastroute case to indicate that mbuf was | Andrey V. Elsukov | 2015-03-12 | 1 | -0/+1 |
* | Even more fixes to !INET and !INET6 kernels. | Gleb Smirnoff | 2015-02-17 | 1 | -17/+14 |
* | - Improve INET/INET6 scope. | Gleb Smirnoff | 2015-02-16 | 1 | -34/+31 |
* | Toss declarations to fix regular build and NO_INET6 build. | Gleb Smirnoff | 2015-02-16 | 1 | -3/+5 |
* | In the forwarding case refragment the reassembled packets with the same | Gleb Smirnoff | 2015-02-16 | 4 | -2/+93 |
* | Update the pf fragment handling code to closer match recent OpenBSD. | Gleb Smirnoff | 2015-02-16 | 2 | -286/+552 |
* | Back out r276841, r276756, r276747, r276746. The change in r276747 is very | Gleb Smirnoff | 2015-01-22 | 5 | -93/+145 |
* | Do not initialize pfi_unlnkdkifs_mtx and pf_frag_mtx. | Craig Rodrigues | 2015-01-08 | 2 | -8/+0 |
* | Reapply previous patch to fix build. | Craig Rodrigues | 2015-01-06 | 4 | -39/+23 |
* | Instead of creating a purge thread for every vnet, create | Craig Rodrigues | 2015-01-06 | 1 | -58/+24 |
* | Merge: r258322 from projects/pf branch | Craig Rodrigues | 2015-01-06 | 5 | -47/+53 |
* | pf(4) needs to have a correct checksum during its processing. | Ermal Luçi | 2014-11-19 | 1 | -6/+6 |
* | Finish r274315: remove union 'u' from struct pf_send_entry. | Alexander V. Chernikov | 2014-11-09 | 1 | -16/+11 |
* | Remove unused 'struct route' fields. | Alexander V. Chernikov | 2014-11-09 | 1 | -2/+0 |
* | Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed. | Gleb Smirnoff | 2014-11-07 | 1 | -1/+1 |
* | Fix multiple incorrect SYSCTL arguments in the kernel: | Hans Petter Selasky | 2014-10-21 | 1 | -2/+2 |
* | Add a complete implementation of MurmurHash3. Tweak both implementations | Dag-Erling Smørgrav | 2014-10-18 | 1 | -7/+7 |
* | Change the PF hash from Jenkins to Murmur3. In forwarding tests | George V. Neville-Neil | 2014-10-10 | 1 | -7/+7 |
* | Remove lock init from radix.c. | Alexander V. Chernikov | 2014-10-01 | 1 | -6/+2 |
* | Use rn_detachhead() instead of direct free(9) for radix tables. | Gleb Smirnoff | 2014-10-01 | 1 | -2/+2 |
* | Mechanically convert to if_inc_counter(). | Gleb Smirnoff | 2014-09-19 | 2 | -8/+8 |
* | Remove ifq_drops from struct ifqueue. Now queue drops are accounted in | Gleb Smirnoff | 2014-09-19 | 2 | -2/+1 |
* | - Provide a sleepable lock to protect against ioctl() vs ioctl() races. | Gleb Smirnoff | 2014-09-12 | 1 | -10/+7 |
* | Clean up unused CSUM_FRAGMENT. | Gleb Smirnoff | 2014-09-03 | 1 | -2/+1 |
* | Explicitly free packet on PF_DROP, otherwise a "quick" rule with | Gleb Smirnoff | 2014-09-01 | 1 | -0/+8 |
* | Do not lookup source node twice when pf_map_addr() is used. | Gleb Smirnoff | 2014-08-15 | 2 | -13/+19 |
* | pf_map_addr() can fail and in this case we should drop the packet, | Gleb Smirnoff | 2014-08-15 | 2 | -29/+16 |
* | Fix synproxy with IPv6. pf_test6() was missing a check for M_SKIP_FIREWALL. | Gleb Smirnoff | 2014-08-15 | 1 | -0/+3 |
* | Change pr_output's prototype to avoid the need for explicit casts. | Kevin Lo | 2014-08-15 | 1 | -1/+1 |
* | - Count global pf(4) statistics in counter(9). | Gleb Smirnoff | 2014-08-14 | 3 | -23/+120 |
* | Merge 'struct ip6protosw' and 'struct protosw' into one. Now we have | Kevin Lo | 2014-08-08 | 1 | -4/+7 |
* | On machines with strict alignment copy pfsync_state_key from packet | Gleb Smirnoff | 2014-07-10 | 1 | -15/+26 |
* | Pull in r267961 and r267973 again. Fix for issues reported will follow. | Hans Petter Selasky | 2014-06-28 | 1 | -2/+0 |
* | Revert r267961, r267973: | Glen Barber | 2014-06-27 | 1 | -0/+2 |
* | Extend the meaning of the CTLFLAG_TUN flag to automatically check if | Hans Petter Selasky | 2014-06-27 | 1 | -2/+0 |
* | Fix pf(4) to build with MAXCPU set to 256. MAXCPU is actually a count, | John Baldwin | 2014-05-29 | 1 | -1/+1 |
* | o In pf_normalize_ip() we don't need mtag in | Gleb Smirnoff | 2014-05-17 | 1 | -22/+7 |
* | The current API for adding rules with pool addresses is the following: | Gleb Smirnoff | 2014-04-25 | 1 | -1/+3 |
* | Backport from projects/pf r263908: | Martin Matuska | 2014-04-20 | 2 | -12/+26 |
|\ |
|
* | | Backout r257223,r257224,r257225,r257246,r257710. The changes caused | Gleb Smirnoff | 2014-04-16 | 2 | -355/+84 |
* | | Merge from projects/pf r264198: | Martin Matuska | 2014-04-07 | 1 | -6/+12 |
|\ \ |
|
| * | | Execute pf_overload_task() in vnet context. Fixes a vnet kernel panic. | Martin Matuska | 2014-04-06 | 1 | -6/+12 |
| |/ |
|
| * | De-virtualize UMA zone pf_mtag_z and move to global initialization part. | Martin Matuska | 2014-03-29 | 2 | -12/+24 |
| * | Merge head up to r263906. | Martin Matuska | 2014-03-29 | 2 | -11/+4 |
| |\
| |/
|/| |
|