aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* pfsync: Performance improvementKristof Provost2018-12-061-236/+330
* pf: add a comment describing why do we call pf_map_addr again if portKristof Provost2018-12-061-0/+4
* Add ability to request listing and deleting only for dynamic states.Andrey V. Elsukov2018-12-042-6/+27
* Reimplement how net.inet.ip.fw.dyn_keep_states works.Andrey V. Elsukov2018-12-047-162/+401
* Add assertion to check that named object has correct type.Andrey V. Elsukov2018-12-041-0/+2
* pf: Fix panic on overlapping interface namesKristof Provost2018-12-011-1/+2
* Do not limit the mbuf queue length for keepalive packets.Andrey V. Elsukov2018-11-271-3/+2
* Add ability to use dynamic external prefix in ipfw_nptv6 module.Andrey V. Elsukov2018-11-122-15/+169
* pf: Prevent tables referenced by rules in anchors from getting disabled.Kristof Provost2018-11-081-0/+1
* pf: Fix build if INVARIANTS is not setKristof Provost2018-11-021-0/+2
* pf: Keep a reference to struct ifnets we're usingKristof Provost2018-11-021-1/+7
* pfsync: Add missing unlockKristof Provost2018-11-021-0/+1
* pfsync: Allow module to be unloadedKristof Provost2018-11-021-6/+0
* pfsync: Handle syncdev going awayKristof Provost2018-11-023-0/+32
* pfsync: Ensure uninit is done before pfKristof Provost2018-11-021-5/+2
* pfsync: Make pfsync callbacks per-vnetKristof Provost2018-11-023-48/+50
* pf: Limit the fragment entry queue length to 64 per bucket.Kristof Provost2018-11-021-5/+29
* pf: Split the fragment reassembly queue into smaller partsKristof Provost2018-11-021-19/+162
* pf: Count holes rather than fragments for reassemblyKristof Provost2018-11-021-38/+45
* Revert "pf: Limit the maximum number of fragments per packet"Kristof Provost2018-11-021-8/+0
* pf: Make ':0' ignore link-local v6 addresses tooKristof Provost2018-10-281-1/+2
* ipfw: implement ngtee/netgraph actions for layer-2 frames.Eugene Grosbein2018-10-271-5/+19
* pf: Fix copy/paste error in IPv6 address rewritingKristof Provost2018-10-241-1/+1
* pf: ifp can never be NULL in pfi_ifaddr_event()Kristof Provost2018-10-231-1/+4
* Do not decrement RST life time if keep_alive is not turned on.Andrey V. Elsukov2018-10-211-1/+2
* Call inet_ntop() only when its result is needed.Andrey V. Elsukov2018-10-211-8/+11
* Retire IPFIREWALL_NAT64_DIRECT_OUTPUT kernel option. And add abilityAndrey V. Elsukov2018-10-213-36/+92
* pf synproxy will do the 3WHS on behalf of the target machine, and onceKristof Provost2018-10-201-1/+1
* Add extra parentheses to fix "versrcreach" opcode, (oif != NULL) shouldAndrey V. Elsukov2018-10-151-2/+2
* Significantly improve pf purge cpu usage by only taking locksJohn-Mark Gurney2018-09-161-15/+19
* Extended pf(4) ioctl interface and pfctl(8) to allow bandwidths ofPatrick Kelsey2018-08-222-33/+415
* pf: Limit the maximum number of fragments per packetKristof Provost2018-08-171-0/+8
* Fix a typo in comment.Luiz Otavio O Souza2018-08-151-1/+1
* pf: Take the IF_ADDR_RLOCK() when iterating over the group listKristof Provost2018-08-111-3/+8
* pf: Fix 'set skip on' for groupsKristof Provost2018-08-111-4/+14
* Use host byte order when comparing mss values.Andrey V. Elsukov2018-08-081-1/+1
* Use the new VNET_DEFINE_STATIC macro when we are defining static VNETAndrew Turner2018-07-2415-80/+80
* pf: Fix synproxyKristof Provost2018-07-141-3/+5
* pf: Fix panic on vnet jail shutdown with synproxyKristof Provost2018-07-141-1/+2
* Use correct size when we are allocating array for skipto index.Andrey V. Elsukov2018-07-121-4/+2
* Add "record-state", "set-limit" and "defer-action" rule options to ipfw.Andrey V. Elsukov2018-07-092-1/+19
* Create a new macro for static DPCPU data.Andrew Turner2018-07-051-1/+1
* Revert r335833.Will Andrews2018-07-041-0/+408
* pf: remove unused ioctls.Will Andrews2018-07-011-408/+0
* pfsync: Fix state sync during initial bulk updateKristof Provost2018-06-301-1/+1
* pf: Support "return" statements in passing rules when they fail.Kristof Provost2018-06-221-63/+81
* Switch RIB and RADIX_NODE_HEAD lock from rwlock(9) to rmlock(9).Andrey V. Elsukov2018-06-161-0/+1
* pf: Fix deadlock with route-toKristof Provost2018-06-091-8/+8
* uma: implement provisional api for per-cpu zonesMateusz Guzik2018-06-081-2/+2
* pf: Replace rwlock on PF_RULES_LOCK with rmlockKristof Provost2018-05-308-9/+9
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-30 19:21:32 +0000