| Commit message (Expand) | Author | Age | Files | Lines |
* | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 1 | -1/+1 |
* | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 1 | -1/+1 |
* | Properly drop the pf mutex around all copyout (consistency still protected | mlaier | 2007-10-24 | 2 | -1/+9 |
* | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -2/+2 |
* | Rename the kthread_xxx (e.g. kthread_create()) calls | julian | 2007-10-20 | 2 | -4/+4 |
* | When checking the sequence number of a TCP header embedded in an | dhartmei | 2007-08-23 | 1 | -2/+1 |
* | Replace references to NET_CALLOUT_MPSAFE with CALLOUT_MPSAFE, and remove | rwatson | 2007-07-28 | 1 | -4/+4 |
* | Remove unused variable from pf_subr.c to make it -Werror buildable. | mlaier | 2007-07-05 | 1 | -1/+1 |
* | Add two place holders in struct pf_rule for future netgraph integration. | mlaier | 2007-07-03 | 1 | -0/+2 |
* | Link pf 4.1 to the build: | mlaier | 2007-07-03 | 1 | -0/+82 |
* | Commit resolved import of OpenBSD 4.1 pf from perforce. | mlaier | 2007-07-03 | 13 | -2488/+3410 |
* | This commit was generated by cvs2svn to compensate for changes in r171164, | mlaier | 2007-07-03 | 1 | -0/+415 |
|\ |
|
| * | Import pf from OpenBSD 4.1 | mlaier | 2007-07-03 | 12 | -1690/+2973 |
| * | Loopback four fixes from OpenBSD for problems reported to the freebsd-pf | mlaier | 2005-09-08 | 2 | -21/+67 |
| * | Import pf from OpenBSD 3.7 (OPENBSD_3_7 as of today) | mlaier | 2005-05-03 | 11 | -1093/+2403 |
| * | Import a fix from the OpenBSD-stable branch, that slipped by my previous | mlaier | 2004-08-12 | 1 | -2/+3 |
| * | Import a couple of fixes from OpenBSD-current, which did not make -stable in | mlaier | 2004-08-12 | 4 | -7/+17 |
| * | Import from OpenBSD stable branch | mlaier | 2004-07-17 | 1 | -42/+53 |
| * | Import OpenBSD stable branch. | mlaier | 2004-06-17 | 3 | -19/+16 |
* | | Fix hardware checksum verification on fragments. | mlaier | 2007-07-03 | 1 | -0/+9 |
* | | From OpenBSD, rev. 1.524, 1.528, 1.529 | dhartmei | 2007-05-21 | 1 | -3/+52 |
* | | In member interface detach event handler, do not attempt to free state | bms | 2007-04-14 | 1 | -1/+9 |
* | | Teach pfsync(4) that its member interfaces may go away. | bms | 2007-03-19 | 2 | -0/+50 |
* | | Clean up pfr_kentry_pl2 as well. This fixes a kernel panic in the vm.zone | mlaier | 2007-01-01 | 1 | -0/+1 |
* | | Various bpf(4) related fixes to catch places up to the new bpf(4) | jhb | 2006-12-29 | 1 | -0/+4 |
* | | Work around a long standing LOR with user/group rules by doing the socket | mlaier | 2006-12-29 | 1 | -0/+12 |
* | | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -1/+4 |
* | | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -1/+1 |
* | | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 1 | -0/+55 |
* | | Fix stateful filtering of loopback IPv6 traffic to an address not configured | mlaier | 2006-09-06 | 1 | -2/+8 |
* | | Import from OpenBSD 1.168, dhartmei: | mlaier | 2006-07-21 | 1 | -2/+3 |
* | | Revise network interface cloning to take an optional opaque | sam | 2006-07-09 | 2 | -2/+10 |
* | | Make in-kernel multicast protocols for pfsync and carp work after enabling | mlaier | 2006-07-08 | 1 | -0/+5 |
* | | Fix pfsync w/o carp compilation. | mlaier | 2006-06-16 | 1 | -0/+2 |
* | | Fix byteorder of syncpeer and make it actually work. | mlaier | 2006-06-14 | 1 | -6/+23 |
* | | Put debugging messages related to inconsistent ticket numbers under misc and | mlaier | 2006-05-12 | 1 | -4/+10 |
* | | Loopback pf_norm.c rev. 1.106 from OpenBSD: | mlaier | 2006-03-25 | 1 | -4/+22 |
* | | Avoid pulling in the whole <net/pfvar.h> by opaquely declaring | yar | 2006-03-09 | 1 | -2/+3 |
* | | Make pflog a seperate module. As a result pflog_packet() becomes a function | mlaier | 2006-02-05 | 3 | -0/+26 |
* | | fix a bug in the fragment cache (used for 'scrub fragment crop/drop-ovl', | dhartmei | 2006-01-19 | 1 | -1/+1 |
* | | Move m_adj after checking that m_dup succeeded. | mlaier | 2006-01-14 | 1 | -3/+4 |
* | | Only decrement the max-src-conn counter for tcp connections that reached | mlaier | 2005-12-25 | 2 | -0/+8 |
* | | Fix build after timeval.tv_sec changed from long to time_t. | mlaier | 2005-12-25 | 1 | -2/+5 |
* | | Move PFSTATE_EXPIRING from sync_flags to a new local_flags. sync_flags has | mlaier | 2005-12-20 | 2 | -4/+6 |
* | | Fix -Wundef warnings found when compiling i386 LINT, GENERIC and | ru | 2005-12-05 | 5 | -0/+58 |
* | | Move the cloned interface list management in to if_clone. For some drivers the | thompsa | 2005-11-08 | 2 | -6/+0 |
* | | Change the reference counting to count the number of cloned interfaces for each | thompsa | 2005-10-12 | 2 | -2/+3 |
* | | Stop leaking a lock. This used to cause a propagate_priority() page fault | mlaier | 2005-09-11 | 1 | -3/+3 |
* | | Unbreak the build. Committed from the wrong directory. | mlaier | 2005-09-08 | 1 | -4/+5 |
* | | Commit imported changes to HEAD: | mlaier | 2005-09-08 | 2 | -21/+67 |