aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/pf
Commit message (Expand)AuthorAgeFilesLines
* pf: Skip firewall for refragmented ip6 packetsKristof Provost2015-04-061-0/+1
* o Use new function ip_fillid() in all places throughout the kernel,Gleb Smirnoff2015-04-012-3/+3
* pf: Deal with runt packetsKristof Provost2015-04-011-4/+4
* Preserve IPv6 fragment IDs accross reassembly and refragmentationKristof Provost2015-04-011-1/+7
* Static'ize pf_fillup_fragment body to match its declaration.Sergey Kandaurov2015-03-261-1/+1
* Always lock the hash row of a source node when updating its 'states' counter.Gleb Smirnoff2015-03-172-66/+59
* Reset mbuf pointer to NULL in fastroute case to indicate that mbuf wasAndrey V. Elsukov2015-03-121-0/+1
* Even more fixes to !INET and !INET6 kernels.Gleb Smirnoff2015-02-171-17/+14
* - Improve INET/INET6 scope.Gleb Smirnoff2015-02-161-34/+31
* Toss declarations to fix regular build and NO_INET6 build.Gleb Smirnoff2015-02-161-3/+5
* In the forwarding case refragment the reassembled packets with the sameGleb Smirnoff2015-02-164-2/+93
* Update the pf fragment handling code to closer match recent OpenBSD.Gleb Smirnoff2015-02-162-286/+552
* Back out r276841, r276756, r276747, r276746. The change in r276747 is veryGleb Smirnoff2015-01-225-93/+145
* Do not initialize pfi_unlnkdkifs_mtx and pf_frag_mtx.Craig Rodrigues2015-01-082-8/+0
* Reapply previous patch to fix build.Craig Rodrigues2015-01-064-39/+23
* Instead of creating a purge thread for every vnet, createCraig Rodrigues2015-01-061-58/+24
* Merge: r258322 from projects/pf branchCraig Rodrigues2015-01-065-47/+53
* pf(4) needs to have a correct checksum during its processing.Ermal Luçi2014-11-191-6/+6
* Finish r274315: remove union 'u' from struct pf_send_entry.Alexander V. Chernikov2014-11-091-16/+11
* Remove unused 'struct route' fields.Alexander V. Chernikov2014-11-091-2/+0
* Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed.Gleb Smirnoff2014-11-071-1/+1
* Fix multiple incorrect SYSCTL arguments in the kernel:Hans Petter Selasky2014-10-211-2/+2
* Add a complete implementation of MurmurHash3. Tweak both implementationsDag-Erling Smørgrav2014-10-181-7/+7
* Change the PF hash from Jenkins to Murmur3. In forwarding testsGeorge V. Neville-Neil2014-10-101-7/+7
* Remove lock init from radix.c.Alexander V. Chernikov2014-10-011-6/+2
* Use rn_detachhead() instead of direct free(9) for radix tables.Gleb Smirnoff2014-10-011-2/+2
* Mechanically convert to if_inc_counter().Gleb Smirnoff2014-09-192-8/+8
* Remove ifq_drops from struct ifqueue. Now queue drops are accounted inGleb Smirnoff2014-09-192-2/+1
* - Provide a sleepable lock to protect against ioctl() vs ioctl() races.Gleb Smirnoff2014-09-121-10/+7
* Clean up unused CSUM_FRAGMENT.Gleb Smirnoff2014-09-031-2/+1
* Explicitly free packet on PF_DROP, otherwise a "quick" rule withGleb Smirnoff2014-09-011-0/+8
* Do not lookup source node twice when pf_map_addr() is used.Gleb Smirnoff2014-08-152-13/+19
* pf_map_addr() can fail and in this case we should drop the packet,Gleb Smirnoff2014-08-152-29/+16
* Fix synproxy with IPv6. pf_test6() was missing a check for M_SKIP_FIREWALL.Gleb Smirnoff2014-08-151-0/+3
* Change pr_output's prototype to avoid the need for explicit casts.Kevin Lo2014-08-151-1/+1
* - Count global pf(4) statistics in counter(9).Gleb Smirnoff2014-08-143-23/+120
* Merge 'struct ip6protosw' and 'struct protosw' into one. Now we haveKevin Lo2014-08-081-4/+7
* On machines with strict alignment copy pfsync_state_key from packetGleb Smirnoff2014-07-101-15/+26
* Pull in r267961 and r267973 again. Fix for issues reported will follow.Hans Petter Selasky2014-06-281-2/+0
* Revert r267961, r267973:Glen Barber2014-06-271-0/+2
* Extend the meaning of the CTLFLAG_TUN flag to automatically check ifHans Petter Selasky2014-06-271-2/+0
* Fix pf(4) to build with MAXCPU set to 256. MAXCPU is actually a count,John Baldwin2014-05-291-1/+1
* o In pf_normalize_ip() we don't need mtag inGleb Smirnoff2014-05-171-22/+7
* The current API for adding rules with pool addresses is the following:Gleb Smirnoff2014-04-251-1/+3
* Backport from projects/pf r263908:Martin Matuska2014-04-202-12/+26
|\
* | Backout r257223,r257224,r257225,r257246,r257710. The changes causedGleb Smirnoff2014-04-162-355/+84
* | Merge from projects/pf r264198:Martin Matuska2014-04-071-6/+12
|\ \
| * | Execute pf_overload_task() in vnet context. Fixes a vnet kernel panic.Martin Matuska2014-04-061-6/+12
| |/
| * De-virtualize UMA zone pf_mtag_z and move to global initialization part.Martin Matuska2014-03-292-12/+24
| * Merge head up to r263906.Martin Matuska2014-03-292-11/+4
| |\ | |/ |/|