aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* pf: don't reject dummynet-ed packetsKristof Provost2022-05-061-6/+2
* pf: dummynet fixKristof Provost2022-05-061-1/+1
* pf: fix reverse direction dummynetKristof Provost2022-05-061-1/+1
* dummynet: use m_rcvif_serialize/restore when queueing packetsGleb Smirnoff2022-05-056-7/+46
* pf: clear PF_TAG_DUMMYNET for dummynet fast pathKristof Provost2022-05-051-0/+4
* Revert "dummynet: use m_rcvif_serialize/restore when queueing packets"Marko Zec2022-05-036-46/+7
* pf: Add per-rule timestamps for rule and eth_ruleReid Linnemann2022-04-223-0/+14
* pf: counter argument to pfr_pool_get() may never be NULLKristof Provost2022-04-211-1/+2
* pfsync: NULL check before dereferenceKristof Provost2022-04-211-1/+3
* pf: remove pointless NULL checkKristof Provost2022-04-211-2/+1
* pf: allow the use of tables in ethernet rulesKristof Provost2022-04-204-4/+85
* ipfw: icmp6_type is only used for INET6.John Baldwin2022-04-131-0/+4
* pf: Use __diagused for variables only used in KASSERT().John Baldwin2022-04-131-2/+2
* pf: drain Ethernet rules cleanup before starting a new transactionKristof Provost2022-04-111-0/+2
* ipfw: fix matching and setting DSCP value for IPv6Andrey V. Elsukov2022-04-112-17/+17
* netpfil: Remove a double word in a source code commentGordon Bergling2022-04-091-1/+1
* netpfil: Fix a typo in a source code commentGordon Bergling2022-04-091-1/+1
* pf: Workaround set but unused warning.John Baldwin2022-04-091-8/+4
* pf syncookies: fix memory leakKristof Provost2022-04-071-12/+17
* pf: fix memory leakKristof Provost2022-04-071-2/+0
* pf: use ERROUT_IOCTL()Kristof Provost2022-04-061-6/+6
* netpfil: Fix two typo in source code commentsGordon Bergling2022-04-022-18/+18
* pfsync: Add CTLFLAG_VNET to carp_demotion_factor sysctlLuiz Amaral2022-04-021-1/+1
* pf: handle duplicate rules gracefullyMateusz Guzik2022-04-011-2/+3
* pf: Initialize the table entry zone limit at initialization timeMark Johnston2022-03-301-0/+1
* pf: fixup match rulesKristof Provost2022-03-301-1/+2
* pf: add missing input/error validation for DIOCGETETHRULEKristof Provost2022-03-301-0/+5
* pf: support listing ethernet anchorsKristof Provost2022-03-301-0/+182
* pf: guard against DIOCADDRULE without DIOCXBEGINMateusz Guzik2022-03-291-1/+11
* ipfilter(4): Fix a typo in a source code commentGordon Bergling2022-03-281-1/+1
* pf: add a rule rb treeMateusz Guzik2022-03-281-21/+49
* pf: pre-compute rule hashMateusz Guzik2022-03-281-13/+16
* pf: add pf_config_lockMateusz Guzik2022-03-282-0/+8
* pf: include anchor path when hashing a ruleMateusz Guzik2022-03-281-0/+2
* pf: ether l3 rules can only use addressesKristof Provost2022-03-251-0/+6
* pf: fix !INET or !INET6 buildsGleb Smirnoff2022-03-161-0/+4
* pf: support basic L3 filtering in the Ethernet rulesKristof Provost2022-03-142-8/+86
* pf: hoist the unlinked rules lock out of the mass rule removal loopMateusz Guzik2022-03-101-3/+15
* pf: remove spurious zeroing from pf_ioctl_addruleMateusz Guzik2022-03-101-5/+0
* pf: support masking mac addressesKristof Provost2022-03-022-3/+13
* pf: add anchor support for ether rulesKristof Provost2022-03-024-96/+578
* pf: support dummynet on L2 rulesKristof Provost2022-03-023-3/+42
* pf: Support clearing ether countersKristof Provost2022-03-021-0/+14
* pf: Only hook the Ethernet pfil hook when we have rulesKristof Provost2022-03-021-6/+53
* pf: SDTs for ether rule matchingKristof Provost2022-03-021-4/+35
* pf: Do not hold PF_RULES_RLOCK while processing Ethernet rulesKristof Provost2022-03-023-17/+40
* pf: Initial Ethernet level filtering codeKristof Provost2022-03-025-0/+726
* pf: fix set_prio after nv conversionFranco Fichtner2022-02-141-2/+2
* dummynet: don't use per-vnet locks to protect global data.Kristof Provost2022-02-074-4/+22
* pf: deal with tables gaining or losing countersKristof Provost2022-02-051-2/+34