aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Fix panic when prepare_batch_buffer() returns error.Alexander V. Chernikov2015-05-061-3/+5
* Fix KASSERT introduced in r282155.Alexander V. Chernikov2015-04-301-3/+4
* Fix panic introduced by r282070.Alexander V. Chernikov2015-04-282-1/+4
* Fix 'may be used uninitialized' warning not caught by clang.Alexander V. Chernikov2015-04-271-1/+1
* Use free_nat_instance() for nat instance deletion.Alexander V. Chernikov2015-04-271-10/+14
* Make rule table kernel-index rewriting support any kind of objects.Alexander V. Chernikov2015-04-275-388/+879
* Fix memory leak.Gleb Smirnoff2015-04-271-0/+2
* Move ALTQ from contrib to net/altq. The ALTQ code is for many yearsGleb Smirnoff2015-04-161-1/+1
* pf: Fix forwarding detectionKristof Provost2015-04-141-1/+1
* I can find no reason to allow packets with both SYN and FIN bitsGeorge V. Neville-Neil2015-04-141-1/+1
* pf: Skip firewall for refragmented ip6 packetsKristof Provost2015-04-061-0/+1
* o Use new function ip_fillid() in all places throughout the kernel,Gleb Smirnoff2015-04-012-3/+3
* pf: Deal with runt packetsKristof Provost2015-04-011-4/+4
* Preserve IPv6 fragment IDs accross reassembly and refragmentationKristof Provost2015-04-011-1/+7
* The offset variable has been cleared all bits except IP6F_OFF_MASK.Andrey V. Elsukov2015-03-311-1/+1
* Static'ize pf_fillup_fragment body to match its declaration.Sergey Kandaurov2015-03-261-1/+1
* Always lock the hash row of a source node when updating its 'states' counter.Gleb Smirnoff2015-03-172-66/+59
* Fix `ipfw fwd tablearg'. Use dedicated field nh4 in struct table_valueAndrey V. Elsukov2015-03-134-10/+65
* Reset mbuf pointer to NULL in fastroute case to indicate that mbuf wasAndrey V. Elsukov2015-03-121-0/+1
* Even more fixes to !INET and !INET6 kernels.Gleb Smirnoff2015-02-171-17/+14
* - Improve INET/INET6 scope.Gleb Smirnoff2015-02-161-34/+31
* Toss declarations to fix regular build and NO_INET6 build.Gleb Smirnoff2015-02-161-3/+5
* In the forwarding case refragment the reassembled packets with the sameGleb Smirnoff2015-02-164-2/+93
* Update the pf fragment handling code to closer match recent OpenBSD.Gleb Smirnoff2015-02-162-286/+552
* Fix IP_FW_NAT44_LIST_NAT size calculation.Alexander V. Chernikov2015-02-051-2/+2
* * Make sure table algorithm destroy hook is always called without locksAlexander V. Chernikov2015-02-054-12/+27
* Back out r276841, r276756, r276747, r276746. The change in r276747 is veryGleb Smirnoff2015-01-225-93/+145
* Use ipfw runtime lock only when real modification is required.Alexander V. Chernikov2015-01-161-2/+4
* Do not initialize pfi_unlnkdkifs_mtx and pf_frag_mtx.Craig Rodrigues2015-01-082-8/+0
* Reapply previous patch to fix build.Craig Rodrigues2015-01-064-39/+23
* Instead of creating a purge thread for every vnet, createCraig Rodrigues2015-01-061-58/+24
* Merge: r258322 from projects/pf branchCraig Rodrigues2015-01-065-47/+53
* pf(4) needs to have a correct checksum during its processing.Ermal Luçi2014-11-191-6/+6
* Finish r274315: remove union 'u' from struct pf_send_entry.Alexander V. Chernikov2014-11-091-16/+11
* Remove unused 'struct route' fields.Alexander V. Chernikov2014-11-092-4/+0
* Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed.Gleb Smirnoff2014-11-074-52/+56
* Remove unused variable.Alexander V. Chernikov2014-11-041-2/+1
* Bump default dynamic limit to 16k entries.Alexander V. Chernikov2014-10-241-3/+4
* Rename log2 to tal_log2.Alexander V. Chernikov2014-10-221-4/+4
* remove/fix old code for building ipfw and dummynet in userspaceLuigi Rizzo2014-10-223-56/+1
* Fix multiple incorrect SYSCTL arguments in the kernel:Hans Petter Selasky2014-10-211-2/+2
* Use copyout() directly instead of updating various fieldsAlexander V. Chernikov2014-10-201-8/+11
* Perform more checks on the number of tables supplied by user.Alexander V. Chernikov2014-10-191-0/+19
* Add a complete implementation of MurmurHash3. Tweak both implementationsDag-Erling Smørgrav2014-10-181-7/+7
* Use IPFW_RULE_CNTR_SIZE macro instead of non-relevant ip_fw_cntr structure.Alexander V. Chernikov2014-10-182-7/+3
* Fix matching default rule on clear/show commands.Alexander V. Chernikov2014-10-131-5/+10
* Fix KASSERT typo.Alexander V. Chernikov2014-10-111-2/+2
* Remove redundant if_notifier declaration.Alexander V. Chernikov2014-10-101-1/+0
* Change the PF hash from Jenkins to Murmur3. In forwarding testsGeorge V. Neville-Neil2014-10-101-7/+7
* Fix KASSERT argument type.Alexander V. Chernikov2014-10-101-1/+1