aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/pf
Commit message (Expand)AuthorAgeFilesLines
* Eliminate last rtalloc_ign() caller.Alexander V. Chernikov2015-10-271-3/+0
* pf: Fix TSO issuesKristof Provost2015-10-143-50/+88
* Simplify the way of attaching IPv6 link-layer header.Alexander V. Chernikov2015-09-161-1/+1
* pf: Fix misdetection of forwarding when net.link.bridge.pfil_bridge is setKristof Provost2015-09-011-1/+11
* pf: Remove support for 'scrub fragment crop|drop-ovl'Kristof Provost2015-08-271-479/+31
* Reapply r196551 which was accidentally reverted by r223637 (update toLuiz Otavio O Souza2015-08-241-1/+1
* Add ALTQ(9) support for the CoDel algorithm.Luiz Otavio O Souza2015-08-211-0/+7
* Fix the copy of addresses passed from userland in table replace command.Luiz Otavio O Souza2015-08-171-2/+1
* Use correct src/dst ports when removing states.Mariusz Zaborski2015-08-111-2/+2
* pf: Always initialise pf_fragment.fr_flagsKristof Provost2015-07-291-3/+1
* Simplify logic added in r285945 as suggested by glebiusRenato Botelho2015-07-281-4/+2
* Respect pf rule log option before log dropped packets with IP options orRenato Botelho2015-07-281-2/+4
* Fix a typo in r280169. Of course we are interested in deleting nsn onlyGleb Smirnoff2015-07-281-1/+1
* ALTQ FAIRQ discipline import from DragonFLYErmal Luçi2015-06-243-0/+34
* pf: Remove frc_directionKristof Provost2015-06-111-7/+3
* pf: Save the protocol number in the pf_fragmentKristof Provost2015-06-111-0/+1
* pf: address family must be set when creating a pf_fragmentKristof Provost2015-06-101-0/+1
* CALLOUT_MPSAFE has lost its meaning since r141428, i.e., for more than tenJung-uk Kim2015-05-221-1/+1
* Use MTX_SYSINIT() instead of mtx_init() to separate mutex initializationGleb Smirnoff2015-05-193-17/+9
* During module unload unlock rules before destroying UMA zones, whichGleb Smirnoff2015-05-191-1/+1
* A miss from r283061: don't dereference NULL is pf_get_mtag() fails.Gleb Smirnoff2015-05-181-2/+4
* Don't dereference NULL is pf_get_mtag() fails.Gleb Smirnoff2015-05-181-12/+14
* Move ALTQ from contrib to net/altq. The ALTQ code is for many yearsGleb Smirnoff2015-04-161-1/+1
* pf: Fix forwarding detectionKristof Provost2015-04-141-1/+1
* I can find no reason to allow packets with both SYN and FIN bitsGeorge V. Neville-Neil2015-04-141-1/+1
* pf: Skip firewall for refragmented ip6 packetsKristof Provost2015-04-061-0/+1
* o Use new function ip_fillid() in all places throughout the kernel,Gleb Smirnoff2015-04-012-3/+3
* pf: Deal with runt packetsKristof Provost2015-04-011-4/+4
* Preserve IPv6 fragment IDs accross reassembly and refragmentationKristof Provost2015-04-011-1/+7
* Static'ize pf_fillup_fragment body to match its declaration.Sergey Kandaurov2015-03-261-1/+1
* Always lock the hash row of a source node when updating its 'states' counter.Gleb Smirnoff2015-03-172-66/+59
* Reset mbuf pointer to NULL in fastroute case to indicate that mbuf wasAndrey V. Elsukov2015-03-121-0/+1
* Even more fixes to !INET and !INET6 kernels.Gleb Smirnoff2015-02-171-17/+14
* - Improve INET/INET6 scope.Gleb Smirnoff2015-02-161-34/+31
* Toss declarations to fix regular build and NO_INET6 build.Gleb Smirnoff2015-02-161-3/+5
* In the forwarding case refragment the reassembled packets with the sameGleb Smirnoff2015-02-164-2/+93
* Update the pf fragment handling code to closer match recent OpenBSD.Gleb Smirnoff2015-02-162-286/+552
* Back out r276841, r276756, r276747, r276746. The change in r276747 is veryGleb Smirnoff2015-01-225-93/+145
* Do not initialize pfi_unlnkdkifs_mtx and pf_frag_mtx.Craig Rodrigues2015-01-082-8/+0
* Reapply previous patch to fix build.Craig Rodrigues2015-01-064-39/+23
* Instead of creating a purge thread for every vnet, createCraig Rodrigues2015-01-061-58/+24
* Merge: r258322 from projects/pf branchCraig Rodrigues2015-01-065-47/+53
* pf(4) needs to have a correct checksum during its processing.Ermal Luçi2014-11-191-6/+6
* Finish r274315: remove union 'u' from struct pf_send_entry.Alexander V. Chernikov2014-11-091-16/+11
* Remove unused 'struct route' fields.Alexander V. Chernikov2014-11-091-2/+0
* Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed.Gleb Smirnoff2014-11-071-1/+1
* Fix multiple incorrect SYSCTL arguments in the kernel:Hans Petter Selasky2014-10-211-2/+2
* Add a complete implementation of MurmurHash3. Tweak both implementationsDag-Erling Smørgrav2014-10-181-7/+7
* Change the PF hash from Jenkins to Murmur3. In forwarding testsGeorge V. Neville-Neil2014-10-101-7/+7
* Remove lock init from radix.c.Alexander V. Chernikov2014-10-011-6/+2