aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/pf
Commit message (Expand)AuthorAgeFilesLines
* Use m_get/m_gethdr instead of compat macros.Gleb Smirnoff2013-03-151-1/+1
* Functions m_getm2() and m_get2() have different order of arguments,Gleb Smirnoff2013-03-121-1/+1
* Finish the r244185. This fixes ever growing counter of pfsync badGleb Smirnoff2013-02-151-2/+1
* In netpfil/pf:Gleb Smirnoff2012-12-2810-34/+31
* Warn about reaching various PF limits.Pawel Jakub Dawidek2012-12-172-0/+3
* In pfioctl, if the permission checks failed we returned with vnet contextMikolaj Golub2012-12-151-2/+2
* Fix error in r235991. No-sleep version of IFNET_RLOCK() shouldGleb Smirnoff2012-12-141-2/+2
* Fix VIMAGE build broken in r244185.Gleb Smirnoff2012-12-141-1/+1
* Merge rev. 1.119 from OpenBSD:Gleb Smirnoff2012-12-131-6/+11
* Initialize state id prior to attaching state to key hash. Otherwise aGleb Smirnoff2012-12-131-3/+3
* Merge 1.127 from OpenBSD, that closes a regression from 1.125 (mergedGleb Smirnoff2012-12-111-3/+6
* Rule memory garbage collecting in new pf scans only states that are onGleb Smirnoff2012-12-061-5/+7
* Close possible races between state deletion and sent being sent outGleb Smirnoff2012-12-061-3/+4
* Remove extra PFSYNC_LOCK() in pfsync_bulk_update() which lead to lockGleb Smirnoff2012-12-061-2/+0
* Revert erroneous r242693. A state may have PFTM_UNLINKED being on theGleb Smirnoff2012-12-061-10/+0
* Merge rev. 1.125 from OpenBSD:Gleb Smirnoff2012-11-071-68/+57
* It may happen that pfsync holds the last reference on a state. In thisGleb Smirnoff2012-11-071-0/+10
* o Remove last argument to ip_fragment(), and obtain all needed informationGleb Smirnoff2012-10-261-9/+9
* Switch the entire IPv4 stack to keep the IP packet headerGleb Smirnoff2012-10-222-13/+4
* Make the "struct if_clone" opaque to users of the cloning API. UsersGleb Smirnoff2012-10-162-21/+19
* Revert previous commit...Kevin Lo2012-10-103-3/+3
* Prefer NULL over 0 for pointersKevin Lo2012-10-093-3/+3
* Any pfil(9) hooks should be called with already set VNET context.Gleb Smirnoff2012-10-081-4/+0
* After r241245 it appeared that in_delayed_cksum(), which still expectsGleb Smirnoff2012-10-081-9/+6
* A step in resolving mess with byte ordering for AF_INET. After this change:Gleb Smirnoff2012-10-061-51/+5
* The pfil(9) layer guarantees us presence of the protocol header,Gleb Smirnoff2012-10-061-14/+0
* To reduce volume of pfsync traffic:Gleb Smirnoff2012-10-021-4/+8
* Clear and re-setup all function pointers that glue pf(4) and pfsync(4)Gleb Smirnoff2012-09-291-19/+39
* Simplify send out queue code:Gleb Smirnoff2012-09-291-30/+21
* Simplify and somewhat redesign interaction between pf_purge_thread() andGleb Smirnoff2012-09-281-18/+15
* EBUSY is a better reply for refusing to unload pf(4) or pfsync(4).Gleb Smirnoff2012-09-222-2/+2
* When connection rate hits and we overload a source to a table,Gleb Smirnoff2012-09-222-81/+109
* In pfr_insert_kentry() return ENOMEM if memory allocation failed.Gleb Smirnoff2012-09-221-1/+1
* Fix fallout from r236397 in pfr_update_stats(), that was missedGleb Smirnoff2012-09-221-1/+3
* Reduce copy/paste when freeing an source node.Gleb Smirnoff2012-09-201-10/+9
* Utilize Jenkins hash with random seed for source nodes storage.Gleb Smirnoff2012-09-201-0/+21
* Provide kernel compile time option to make pf(4) default rule to drop.Gleb Smirnoff2012-09-181-0/+4
* Make ruleset anchors in pf(4) reentrant. We've got two problems here:Gleb Smirnoff2012-09-182-51/+82
* Fix DIOCNATLOOK: zero key padding before performing lookup.Gleb Smirnoff2012-09-181-0/+1
* o Create directory sys/netpfil, where all packet filters shouldGleb Smirnoff2012-09-1411-0/+19514