aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Revert one chunk from commit 285362, which introduced an off-by-one errorLuigi Rizzo2016-01-261-2/+6
* MFP r287070,r287073: split radix implementation and route table structure.Alexander V. Chernikov2016-01-252-54/+55
* Fix panic on table/table entry delete. The panic could have happenedAlexander V. Chernikov2016-01-211-0/+1
* Initialize error value ta_lookup_kfib() by default to please compiler.Alexander V. Chernikov2016-01-101-3/+1
* Initialize error after r293626 in case neither INET nor INET6 isBjoern A. Zeeb2016-01-101-0/+3
* Make ipfw addr:kfib lookup algo use new routing KPI.Alexander V. Chernikov2016-01-101-49/+72
* Use already pre-calculated number of entries instead of tc->count.Alexander V. Chernikov2016-01-101-1/+1
* Remove sys/eventhandler.h from net/route.hAlexander V. Chernikov2016-01-091-0/+1
* Convert pf(4) to the new routing API.Alexander V. Chernikov2016-01-071-42/+89
* Properly drain callouts in the IPFW subsystem to avoid use after freeHans Petter Selasky2015-12-153-6/+12
* Merge helper fib* functions used for basic lookups.Alexander V. Chernikov2015-12-081-59/+23
* Add destroy_object callback to object rewriting framework.Andrey V. Elsukov2015-11-232-2/+11
* Fix dynamic IPv6 rules showing junk for non-specified address masks.Bryan Drewery2015-11-171-0/+3
* Bring back the ability of passing cached route via nd6_output_ifp().Alexander V. Chernikov2015-11-151-1/+1
* This fixes several places where callout_stops return is examined. TheRandall Stewart2015-11-131-2/+2
* Print proper setfib values in ipfw log.Alexander V. Chernikov2015-11-081-1/+1
* Fix setfib target.Alexander V. Chernikov2015-11-082-3/+3
* pf: Fix broken rule skip calculationKristof Provost2015-11-071-2/+2
* Remove now obsolete KASSERT.Andrey V. Elsukov2015-11-031-6/+0
* Eliminate any conditional increments of object_opcodes in theAndrey V. Elsukov2015-11-032-3/+9
* Add ipfw_check_object_name_generic() function to do basic checks for anAndrey V. Elsukov2015-11-034-30/+17
* Implement `ipfw internal olist` command to list named objects.Andrey V. Elsukov2015-11-032-5/+63
* pf: Fix IPv6 checksums with route-to.Kristof Provost2015-10-291-0/+7
* Eliminate last rtalloc_ign() caller.Alexander V. Chernikov2015-10-271-3/+0
* pf: Fix TSO issuesKristof Provost2015-10-143-50/+88
* Bump number of prefixes in O_IP_<SRC|DST> from 15 to 31 (max possible).Alexander V. Chernikov2015-10-031-1/+1
* Simplify the way of attaching IPv6 link-layer header.Alexander V. Chernikov2015-09-161-1/+1
* pf: Fix misdetection of forwarding when net.link.bridge.pfil_bridge is setKristof Provost2015-09-011-1/+11
* pf: Remove support for 'scrub fragment crop|drop-ovl'Kristof Provost2015-08-271-479/+31
* Fix packets/bytes accounting on i386.Alexander V. Chernikov2015-08-271-1/+1
* Reapply r196551 which was accidentally reverted by r223637 (update toLuiz Otavio O Souza2015-08-241-1/+1
* Add ALTQ(9) support for the CoDel algorithm.Luiz Otavio O Souza2015-08-211-0/+7
* Fix the copy of addresses passed from userland in table replace command.Luiz Otavio O Souza2015-08-171-2/+1
* Use correct src/dst ports when removing states.Mariusz Zaborski2015-08-111-2/+2
* Reduce overhead of ipfw's me6 opcode.Andrey V. Elsukov2015-07-291-23/+27
* pf: Always initialise pf_fragment.fr_flagsKristof Provost2015-07-291-3/+1
* Simplify logic added in r285945 as suggested by glebiusRenato Botelho2015-07-281-4/+2
* Respect pf rule log option before log dropped packets with IP options orRenato Botelho2015-07-281-2/+4
* Fix a typo in r280169. Of course we are interested in deleting nsn onlyGleb Smirnoff2015-07-281-1/+1
* Add helper functions for IP checksum adjusting. Use these functions inAndrey V. Elsukov2015-07-203-17/+26
* assorted algorithmic fixes from Paolo Valente (one of my qfq coauthors):Luigi Rizzo2015-07-101-7/+13
* one more warning suppression when compiling the test code in userspace.Luigi Rizzo2015-07-101-1/+1
* add code to compute fairness indexes;Luigi Rizzo2015-07-102-9/+68
* ALTQ FAIRQ discipline import from DragonFLYErmal Luçi2015-06-243-0/+34
* pf: Remove frc_directionKristof Provost2015-06-111-7/+3
* pf: Save the protocol number in the pf_fragmentKristof Provost2015-06-111-0/+1
* pf: address family must be set when creating a pf_fragmentKristof Provost2015-06-101-0/+1
* CALLOUT_MPSAFE has lost its meaning since r141428, i.e., for more than tenJung-uk Kim2015-05-223-3/+3
* use proper types to represent function pointersLuigi Rizzo2015-05-192-2/+2
* remove a redundant ; at the end of a functionLuigi Rizzo2015-05-191-1/+1