| Commit message (Expand) | Author | Age | Files | Lines |
* | Fix range check for rtable id. | mlaier | 2008-06-05 | 1 | -2/+2 |
* | Add code to allow the system to handle multiple routing tables. | julian | 2008-05-09 | 2 | -6/+34 |
* | Teach pf and ipfw to use read locks in inpcbs write than write locks | rwatson | 2008-04-20 | 1 | -6/+5 |
* | Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros to | rwatson | 2008-04-17 | 1 | -4/+4 |
* | Make ALTQ cope with disappearing interfaces (particularly common with mpd | mlaier | 2008-03-29 | 3 | -2/+129 |
* | Bring back pf_if.c revs 1.8 and 1.6 also lost during last import: | mlaier | 2007-11-21 | 1 | -0/+23 |
* | Cleanup pf interface mangement - esp. remove EVENTHANDLER before unloading | mlaier | 2007-11-21 | 2 | -1/+31 |
* | Reloop OpenBSD rev. 1.563: | mlaier | 2007-11-21 | 1 | -3/+11 |
* | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 1 | -1/+1 |
* | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 1 | -1/+1 |
* | Properly drop the pf mutex around all copyout (consistency still protected | mlaier | 2007-10-24 | 2 | -1/+9 |
* | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -2/+2 |
* | Rename the kthread_xxx (e.g. kthread_create()) calls | julian | 2007-10-20 | 2 | -4/+4 |
* | When checking the sequence number of a TCP header embedded in an | dhartmei | 2007-08-23 | 1 | -2/+1 |
* | Replace references to NET_CALLOUT_MPSAFE with CALLOUT_MPSAFE, and remove | rwatson | 2007-07-28 | 1 | -4/+4 |
* | Remove unused variable from pf_subr.c to make it -Werror buildable. | mlaier | 2007-07-05 | 1 | -1/+1 |
* | Add two place holders in struct pf_rule for future netgraph integration. | mlaier | 2007-07-03 | 1 | -0/+2 |
* | Link pf 4.1 to the build: | mlaier | 2007-07-03 | 1 | -0/+82 |
* | Commit resolved import of OpenBSD 4.1 pf from perforce. | mlaier | 2007-07-03 | 13 | -2488/+3410 |
* | This commit was generated by cvs2svn to compensate for changes in r171164, | mlaier | 2007-07-03 | 1 | -0/+415 |
|\ |
|
| * | Import pf from OpenBSD 4.1 | mlaier | 2007-07-03 | 12 | -1690/+2973 |
| * | Loopback four fixes from OpenBSD for problems reported to the freebsd-pf | mlaier | 2005-09-08 | 2 | -21/+67 |
| * | Import pf from OpenBSD 3.7 (OPENBSD_3_7 as of today) | mlaier | 2005-05-03 | 11 | -1093/+2403 |
| * | Import a fix from the OpenBSD-stable branch, that slipped by my previous | mlaier | 2004-08-12 | 1 | -2/+3 |
| * | Import a couple of fixes from OpenBSD-current, which did not make -stable in | mlaier | 2004-08-12 | 4 | -7/+17 |
| * | Import from OpenBSD stable branch | mlaier | 2004-07-17 | 1 | -42/+53 |
| * | Import OpenBSD stable branch. | mlaier | 2004-06-17 | 3 | -19/+16 |
* | | Fix hardware checksum verification on fragments. | mlaier | 2007-07-03 | 1 | -0/+9 |
* | | From OpenBSD, rev. 1.524, 1.528, 1.529 | dhartmei | 2007-05-21 | 1 | -3/+52 |
* | | In member interface detach event handler, do not attempt to free state | bms | 2007-04-14 | 1 | -1/+9 |
* | | Teach pfsync(4) that its member interfaces may go away. | bms | 2007-03-19 | 2 | -0/+50 |
* | | Clean up pfr_kentry_pl2 as well. This fixes a kernel panic in the vm.zone | mlaier | 2007-01-01 | 1 | -0/+1 |
* | | Various bpf(4) related fixes to catch places up to the new bpf(4) | jhb | 2006-12-29 | 1 | -0/+4 |
* | | Work around a long standing LOR with user/group rules by doing the socket | mlaier | 2006-12-29 | 1 | -0/+12 |
* | | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -1/+4 |
* | | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -1/+1 |
* | | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 1 | -0/+55 |
* | | Fix stateful filtering of loopback IPv6 traffic to an address not configured | mlaier | 2006-09-06 | 1 | -2/+8 |
* | | Import from OpenBSD 1.168, dhartmei: | mlaier | 2006-07-21 | 1 | -2/+3 |
* | | Revise network interface cloning to take an optional opaque | sam | 2006-07-09 | 2 | -2/+10 |
* | | Make in-kernel multicast protocols for pfsync and carp work after enabling | mlaier | 2006-07-08 | 1 | -0/+5 |
* | | Fix pfsync w/o carp compilation. | mlaier | 2006-06-16 | 1 | -0/+2 |
* | | Fix byteorder of syncpeer and make it actually work. | mlaier | 2006-06-14 | 1 | -6/+23 |
* | | Put debugging messages related to inconsistent ticket numbers under misc and | mlaier | 2006-05-12 | 1 | -4/+10 |
* | | Loopback pf_norm.c rev. 1.106 from OpenBSD: | mlaier | 2006-03-25 | 1 | -4/+22 |
* | | Avoid pulling in the whole <net/pfvar.h> by opaquely declaring | yar | 2006-03-09 | 1 | -2/+3 |
* | | Make pflog a seperate module. As a result pflog_packet() becomes a function | mlaier | 2006-02-05 | 3 | -0/+26 |
* | | fix a bug in the fragment cache (used for 'scrub fragment crop/drop-ovl', | dhartmei | 2006-01-19 | 1 | -1/+1 |
* | | Move m_adj after checking that m_dup succeeded. | mlaier | 2006-01-14 | 1 | -3/+4 |
* | | Only decrement the max-src-conn counter for tcp connections that reached | mlaier | 2005-12-25 | 2 | -0/+8 |