| Commit message (Expand) | Author | Age | Files | Lines |
* | o Create directory sys/netpfil, where all packet filters should | glebius | 2012-09-14 | 1 | -6270/+0 |
* | Merge the projects/pf/head branch, that was worked on for last six months, | glebius | 2012-09-08 | 1 | -2791/+1441 |
* | Merge revision 1.715 from OpenBSD: | glebius | 2012-06-06 | 1 | -2/+2 |
* | Revert r234834 per luigi@ request. | melifaro | 2012-05-03 | 1 | -0/+1 |
* | Move several enums and structures required for L2 filtering from ip_fw_privat... | melifaro | 2012-04-30 | 1 | -1/+0 |
* | Merge multi-FIB IPv6 support from projects/multi-fibv6/head/: | bz | 2012-02-17 | 1 | -36/+43 |
* | In FreeBSD we determine presence of pfsync(4) at run-time, not | glebius | 2012-01-09 | 1 | -17/+1 |
* | Return value should be conditional on return value of pfsync_defer_ptr() | glebius | 2011-11-30 | 1 | -2/+2 |
* | Add missing PF_UNLOCK in pf_test | kevlo | 2011-10-30 | 1 | -1/+5 |
* | Fix a bug when NPFSYNC > 0 that on FreeBSD we would always return | bz | 2011-10-19 | 1 | -2/+2 |
* | Fix indentation in a loop and a tiny maze of #ifdefs for just the | bz | 2011-10-19 | 1 | -27/+27 |
* | Use the correct byte order for the ip_divert(4) mbuf tag port meta | bz | 2011-08-25 | 1 | -1/+2 |
* | Update packet filter (pf) code to OpenBSD 4.5. | bz | 2011-06-28 | 1 | -2896/+2736 |
* | Add _mbuf() variants of various inpcb-related interfaces, including lookup, | rwatson | 2011-06-04 | 1 | -0/+8 |
* | Remove some further INET related symbols from pf to allow the module | bz | 2011-05-31 | 1 | -0/+8 |
* | Decompose the current single inpcbinfo lock into two locks: | rwatson | 2011-05-30 | 1 | -17/+14 |
* | Make pf compile without INET support by adding #ifdef INETs and | bz | 2011-04-27 | 1 | -0/+2 |
* | When using pf routing options, properly handle IP fragmentation | bz | 2010-09-10 | 1 | -1/+2 |
* | Adapt OpenBSD pf's "sloopy" TCP state machine which is useful for Direct | delphij | 2009-12-24 | 1 | -171/+289 |
* | If we cannot immediately get the pf_consistency_lock in the purge thread, | mlaier | 2009-08-19 | 1 | -24/+65 |
* | Many network stack subsystems use a single global data structure to hold | rwatson | 2009-08-02 | 1 | -14/+14 |
* | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | rwatson | 2009-08-01 | 1 | -1/+0 |
* | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | rwatson | 2009-07-14 | 1 | -14/+0 |
* | Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC | rwatson | 2009-06-05 | 1 | -1/+0 |
* | Change if_output to take a struct route as its fourth argument in order | kmacy | 2009-04-16 | 1 | -1/+1 |
* | Update stats in struct icmpstat and icmp6stat using four new | rwatson | 2009-04-12 | 1 | -4/+4 |
* | Update stats in struct udpstat using two new macros, UDPSTAT_ADD() | rwatson | 2009-04-12 | 1 | -3/+3 |
* | Update stats in struct ipstat using four new macros, IPSTAT_ADD(), | rwatson | 2009-04-11 | 1 | -4/+4 |
* | Update stats in struct tcpstat using two new macros, TCPSTAT_ADD() and | rwatson | 2009-04-11 | 1 | -3/+3 |
* | This main goals of this project are: | qingli | 2008-12-15 | 1 | -6/+6 |
* | Rather than using hidden includes (with cicular dependencies), | bz | 2008-12-02 | 1 | -0/+4 |
* | Cache so_cred as inp_cred in the inpcb. | bz | 2008-10-04 | 1 | -15/+5 |
* | Step 1.5 of importing the network stack virtualization infrastructure | zec | 2008-10-02 | 1 | -0/+18 |
* | Commit step 1 of the vimage project, (network stack) | bz | 2008-08-17 | 1 | -22/+23 |
* | Merge state reuse for tcp. | mlaier | 2008-08-04 | 1 | -0/+17 |
* | Add code to allow the system to handle multiple routing tables. | julian | 2008-05-09 | 1 | -4/+32 |
* | Teach pf and ipfw to use read locks in inpcbs write than write locks | rwatson | 2008-04-20 | 1 | -6/+5 |
* | Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros to | rwatson | 2008-04-17 | 1 | -4/+4 |
* | Reloop OpenBSD rev. 1.563: | mlaier | 2007-11-21 | 1 | -3/+11 |
* | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 1 | -1/+1 |
* | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 1 | -1/+1 |
* | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -2/+2 |
* | Rename the kthread_xxx (e.g. kthread_create()) calls | julian | 2007-10-20 | 1 | -1/+1 |
* | When checking the sequence number of a TCP header embedded in an | dhartmei | 2007-08-23 | 1 | -2/+1 |
* | Commit resolved import of OpenBSD 4.1 pf from perforce. | mlaier | 2007-07-03 | 1 | -543/+891 |
* | From OpenBSD, rev. 1.524, 1.528, 1.529 | dhartmei | 2007-05-21 | 1 | -3/+52 |
* | Work around a long standing LOR with user/group rules by doing the socket | mlaier | 2006-12-29 | 1 | -0/+12 |
* | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -1/+1 |
* | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 1 | -0/+55 |
* | Only decrement the max-src-conn counter for tcp connections that reached | mlaier | 2005-12-25 | 1 | -0/+7 |