summaryrefslogtreecommitdiffstats
path: root/sys/contrib/pf
Commit message (Expand)AuthorAgeFilesLines
* Fix range check for rtable id.mlaier2008-06-051-2/+2
* Add code to allow the system to handle multiple routing tables.julian2008-05-092-6/+34
* Teach pf and ipfw to use read locks in inpcbs write than write locksrwatson2008-04-201-6/+5
* Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros torwatson2008-04-171-4/+4
* Make ALTQ cope with disappearing interfaces (particularly common with mpdmlaier2008-03-293-2/+129
* Bring back pf_if.c revs 1.8 and 1.6 also lost during last import:mlaier2007-11-211-0/+23
* Cleanup pf interface mangement - esp. remove EVENTHANDLER before unloadingmlaier2007-11-212-1/+31
* Reloop OpenBSD rev. 1.563:mlaier2007-11-211-3/+11
* Continue to move from generic network entry points in the TrustedBSD MACrwatson2007-10-281-1/+1
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asrwatson2007-10-261-1/+1
* Properly drop the pf mutex around all copyout (consistency still protectedmlaier2007-10-242-1/+9
* Merge first in a series of TrustedBSD MAC Framework KPI changesrwatson2007-10-241-2/+2
* Rename the kthread_xxx (e.g. kthread_create()) callsjulian2007-10-202-4/+4
* When checking the sequence number of a TCP header embedded in andhartmei2007-08-231-2/+1
* Replace references to NET_CALLOUT_MPSAFE with CALLOUT_MPSAFE, and removerwatson2007-07-281-4/+4
* Remove unused variable from pf_subr.c to make it -Werror buildable.mlaier2007-07-051-1/+1
* Add two place holders in struct pf_rule for future netgraph integration.mlaier2007-07-031-0/+2
* Link pf 4.1 to the build:mlaier2007-07-031-0/+82
* Commit resolved import of OpenBSD 4.1 pf from perforce.mlaier2007-07-0313-2488/+3410
* This commit was generated by cvs2svn to compensate for changes in r171164,mlaier2007-07-031-0/+415
|\
| * Import pf from OpenBSD 4.1mlaier2007-07-0312-1690/+2973
| * Loopback four fixes from OpenBSD for problems reported to the freebsd-pfmlaier2005-09-082-21/+67
| * Import pf from OpenBSD 3.7 (OPENBSD_3_7 as of today)mlaier2005-05-0311-1093/+2403
| * Import a fix from the OpenBSD-stable branch, that slipped by my previousmlaier2004-08-121-2/+3
| * Import a couple of fixes from OpenBSD-current, which did not make -stable inmlaier2004-08-124-7/+17
| * Import from OpenBSD stable branchmlaier2004-07-171-42/+53
| * Import OpenBSD stable branch.mlaier2004-06-173-19/+16
* | Fix hardware checksum verification on fragments.mlaier2007-07-031-0/+9
* | From OpenBSD, rev. 1.524, 1.528, 1.529dhartmei2007-05-211-3/+52
* | In member interface detach event handler, do not attempt to free statebms2007-04-141-1/+9
* | Teach pfsync(4) that its member interfaces may go away.bms2007-03-192-0/+50
* | Clean up pfr_kentry_pl2 as well. This fixes a kernel panic in the vm.zonemlaier2007-01-011-0/+1
* | Various bpf(4) related fixes to catch places up to the new bpf(4)jhb2006-12-291-0/+4
* | Work around a long standing LOR with user/group rules by doing the socketmlaier2006-12-291-0/+12
* | Sweep kernel replacing suser(9) calls with priv(9) calls, assigningrwatson2006-11-061-1/+4
* | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hrwatson2006-10-221-1/+1
* | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointcsjp2006-09-121-0/+55
* | Fix stateful filtering of loopback IPv6 traffic to an address not configuredmlaier2006-09-061-2/+8
* | Import from OpenBSD 1.168, dhartmei:mlaier2006-07-211-2/+3
* | Revise network interface cloning to take an optional opaquesam2006-07-092-2/+10
* | Make in-kernel multicast protocols for pfsync and carp work after enablingmlaier2006-07-081-0/+5
* | Fix pfsync w/o carp compilation.mlaier2006-06-161-0/+2
* | Fix byteorder of syncpeer and make it actually work.mlaier2006-06-141-6/+23
* | Put debugging messages related to inconsistent ticket numbers under misc andmlaier2006-05-121-4/+10
* | Loopback pf_norm.c rev. 1.106 from OpenBSD:mlaier2006-03-251-4/+22
* | Avoid pulling in the whole <net/pfvar.h> by opaquely declaringyar2006-03-091-2/+3
* | Make pflog a seperate module. As a result pflog_packet() becomes a functionmlaier2006-02-053-0/+26
* | fix a bug in the fragment cache (used for 'scrub fragment crop/drop-ovl',dhartmei2006-01-191-1/+1
* | Move m_adj after checking that m_dup succeeded.mlaier2006-01-141-3/+4
* | Only decrement the max-src-conn counter for tcp connections that reachedmlaier2005-12-252-0/+8
OpenPOWER on IntegriCloud