aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Use memset with structure size.Andrey V. Elsukov2017-03-141-1/+1
* nat64lsn: Use memset() with structure, not pointer, sizeConrad Meyer2017-03-131-1/+1
* pf: Fix incorrect rw_sleep() in pf_unload()Kristof Provost2017-03-122-4/+2
* pf: Do not lose the VNET lock when ending the purge threadKristof Provost2017-03-121-0/+1
* o Typo in the comment fixed.Maxim Konovalov2017-03-091-1/+1
* pf: Fix a crash in low-memory situationsKristof Provost2017-03-061-1/+1
* Fix the build. Use new ipfw_lookup_table() in the nat64 too.Andrey V. Elsukov2017-03-061-4/+6
* Add IPv6 support to O_IP_DST_LOOKUP opcode.Andrey V. Elsukov2017-03-054-88/+115
* Reject invalid object types that can not be used with specific opcodes.Andrey V. Elsukov2017-03-051-1/+8
* Fix matching table entry value. Use real table value instead of its indexAndrey V. Elsukov2017-03-031-4/+6
* Fix NPTv6 rule counters when one_pass is not enabled.Andrey V. Elsukov2017-03-012-14/+23
* sys: Replace zero with NULL for pointers.Pedro F. Giffuni2017-02-221-1/+1
* Use inet_ntoa_r() instead of inet_ntoa() throughout the kernelEric van Gyzen2017-02-161-1/+2
* pf: use inet_ntoa_r() instead of inet_ntoa(); maybe fix IPv6 OS fingerprintingEric van Gyzen2017-02-161-4/+11
* Fix typos in comments (returing -> returning)Enji Cooper2017-02-071-1/+1
* Fix indentantion in pf_purge_thread(). No functional change.Gleb Smirnoff2017-01-301-23/+29
* Do not run the pf purge thread while the VNET variables are notLuiz Otavio O Souza2017-01-291-0/+8
* Initialize IPFW static rules rmlock with RM_RECURSE flag.Andrey V. Elsukov2017-01-171-1/+1
* In dummynet(4), random chunks of memory are casted to struct dn_*,Marius Strobl2017-01-091-65/+115
* Improve upon r309394Marcel Moolenaar2016-12-101-25/+32
* Backout accidentially leaked in r309746 not yet reviewed patch :(Gleb Smirnoff2016-12-091-32/+25
* Use counter_ratecheck() in the ICMP rate limiting.Gleb Smirnoff2016-12-091-25/+32
* Convert result of hash_packet6() into host byte order.Andrey V. Elsukov2016-12-061-6/+5
* pflog: Correctly initialise subrulenrKristof Provost2016-12-051-1/+1
* Fix use-after-free bugs in pfsync(4)Marcel Moolenaar2016-12-021-2/+7
* Fix ICMPv6 Time Exceeded error message translation.Andrey V. Elsukov2016-11-261-2/+2
* Remove the mbuf tag after use (for reinjected packets).Luiz Otavio O Souza2016-11-031-9/+4
* Stop abusing from struct ifnet presence to determine the packet directionLuiz Otavio O Souza2016-11-011-7/+4
* Fix `ipfw table lookup` handler to return entry value, but not its index.Andrey V. Elsukov2016-10-191-1/+5
* pf: port extended DSCP support from OpenBSDKristof Provost2016-10-132-2/+2
* pf: remove fastroute tagKristof Provost2016-10-042-47/+20
* Remove ifa_list, use ifa_link (structure field) instead.Kevin Lo2016-09-281-1/+1
* Move opcode rewriter init and destroy handlers into non-VENT code.Andrey V. Elsukov2016-09-181-2/+2
* Fix swap tables between sets when this functional is enabled.Andrey V. Elsukov2016-09-131-6/+38
* Try to fix gcc compilation errors (which are right).Bjoern A. Zeeb2016-08-181-2/+1
* Fix command: ipfw set (enable|disable) N (where N > 4).Oleg Bulyzhin2016-08-151-2/+4
* pf: Add missing byte-order swap to pf_match_addr_rangeKristof Provost2016-08-151-6/+6
* Use %ju to print unsigned 64-bit value.Andrey V. Elsukov2016-08-131-2/+2
* Add `stats reset` command implementation to NPTv6 moduleAndrey V. Elsukov2016-08-131-0/+36
* Replace __noinline with special debug macro NAT64NOINLINE.Andrey V. Elsukov2016-08-132-17/+17
* Add ipfw_nat64 module that implements stateless and stateful NAT64.Andrey V. Elsukov2016-08-1310-0/+5912
* Add three helper function to manage tables from external modules.Andrey V. Elsukov2016-08-132-2/+57
* Move logging via BPF support into separate file.Andrey V. Elsukov2016-08-134-173/+222
* Restore "nat global" support.Andrey V. Elsukov2016-08-112-10/+16
* Hide the boottime and bootimebin globals, provide the getboottime(9)Konstantin Belousov2016-07-271-2/+10
* Add named dynamic states support to ipfw(4).Andrey V. Elsukov2016-07-194-22/+253
* Add ipfw_nptv6 module that implements Network Prefix Translation for IPv6Andrey V. Elsukov2016-07-183-0/+1020
* Fix problems in the FQ-PIE AQM cleanup code that could leak memory orDon Lewis2016-07-121-136/+87
* pf: Map hook returns onto the correct error valuesKristof Provost2016-07-091-4/+12
* Fix a race condition between the main thread in aqm_pie_cleanup() and theDon Lewis2016-07-051-33/+28