aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* pf: Add a new zone for per-table entry counters.Mark Johnston2020-05-161-69/+31
* pf: Don't allocate per-table entry counters unless required.Mark Johnston2020-05-111-47/+59
* pf: Improve DIOCADDRULE validationKristof Provost2020-05-031-0/+5
* ipfw: whitespace fix in SCTP_ABORT_ASSOCIATION case statement commentEd Maste2020-05-031-2/+2
* Move route_temporal.c and route_var.h to net/route.Alexander V. Chernikov2020-04-281-1/+1
* pf: Virtualise pf_frag_mtxKristof Provost2020-04-261-5/+9
* pf: Improve input validationKristof Provost2020-04-261-4/+29
* pf: Improve ioctl() input validationKristof Provost2020-04-191-0/+8
* pf: Do not allow negative ps_len in DIOCGETSTATESKristof Provost2020-04-171-1/+1
* Convert pf rtable checks to the new routing KPI.Alexander V. Chernikov2020-04-151-138/+15
* Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki2020-02-269-73/+98
* Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (6 of many)Pawel Biernacki2020-02-212-2/+4
* Use NET_TASK_INIT() and NET_GROUPTASK_INIT() for drivers that processHans Petter Selasky2020-02-181-1/+1
* Add missing EPOCH(9) wrapper in ipfw(8).Hans Petter Selasky2020-02-111-0/+3
* pf: Apply kif flags to new group membersKristof Provost2020-01-231-0/+14
* pfsync: Ensure we enter network epoch before calling ip_outputKristof Provost2020-01-221-0/+6
* Introduce NET_EPOCH_CALL() macro and use it everywhere where we freeGleb Smirnoff2020-01-151-1/+1
* ipfw: Don't rollback state in alloc_table_vidx() if atomicity is not required.Alexander V. Chernikov2019-12-193-12/+20
* Revert r355908 to commit it with a proper message.Alexander V. Chernikov2019-12-193-20/+12
* svn-commit.tmpAlexander V. Chernikov2019-12-193-12/+20
* pf: Make request_maxcount runtime adjustableKristof Provost2019-12-141-1/+1
* Make TCP options parsing stricter.Andrey V. Elsukov2019-12-131-8/+22
* Follow RFC 4443 p2.2 and always use own addresses for reflected ICMPv6Andrey V. Elsukov2019-12-121-14/+66
* Avoid access to stale ip pointer and call UPDATE_POINTERS() afterAndrey V. Elsukov2019-12-101-1/+2
* pf: Add endline to all DPFPRINTF()Kristof Provost2019-11-242-15/+17
* pf: Must be in NET_EPOCH to call icmp_errorKristof Provost2019-10-181-0/+4
* Use epoch(9) directly instead of obsoleted KPI.Gleb Smirnoff2019-10-142-4/+7
* ipfw(4) rule matching always happens in network epoch.Gleb Smirnoff2019-10-141-6/+4
* Fix the build after r353458.Mark Johnston2019-10-131-1/+5
* Add a missing include of opt_sctp.h.Mark Johnston2019-10-121-0/+1
* Widen NET_EPOCH coverage.Gleb Smirnoff2019-10-072-60/+94
* Drivers may pass runt packets to filter. This is okay.Gleb Smirnoff2019-09-131-1/+4
* Fix rule truncation on external action module unloading.Andrey V. Elsukov2019-08-151-5/+5
* pf: zero (another) output buffer in pfioctlEd Maste2019-07-311-1/+1
* dd ipfw_get_action() function to get the pointer to action opcode.Andrey V. Elsukov2019-07-294-17/+44
* pf: Remove partial RFC2675 supportKristof Provost2019-07-292-36/+9
* Avoid possible lock leaking.Andrey V. Elsukov2019-07-291-5/+12
* pf: zero output buffer in pfioctlEd Maste2019-07-241-1/+1
* Eliminate rmlock from ipfw's BPF code.Andrey V. Elsukov2019-07-231-41/+14
* Do not modify cmd pointer if it is already last opcode in the rule.Andrey V. Elsukov2019-07-121-1/+1
* Correctly truncate the rule in case when it has several action opcodes.Andrey V. Elsukov2019-07-121-14/+30
* Convert all IPv4 and IPv6 multicast memberships into using a STAILQHans Petter Selasky2019-06-251-24/+21
* Follow the RFC 3128 and drop short TCP fragments with offset = 1.Andrey V. Elsukov2019-06-251-0/+5
* Mark default rule with IPFW_RULE_NOOPT flag, so it can be showed inAndrey V. Elsukov2019-06-251-0/+1
* Add "tcpmss" opcode to match the TCP MSS value.Andrey V. Elsukov2019-06-212-6/+41
* Separate kernel crc32() implementation to its own header (gsb_crc32.h) andXin LI2019-06-171-0/+1
* Initialize V_nat64out methods explicitly.Andrey V. Elsukov2019-06-051-0/+2
* Remove an uneeded indentation introduced in r223637 to silence gcc warngingLi-Wen Hsu2019-05-251-1/+1
* Restructure mbuf send tags to provide stronger guarantees.John Baldwin2019-05-241-1/+1
* Add IPv6 support for O_IPLEN opcode.Andrey V. Elsukov2019-04-291-2/+4
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-28 16:21:23 +0000