| Commit message (Expand) | Author | Age | Files | Lines |
* | Back out M_* changes, per decision of the TRB. | imp | 2003-02-19 | 1 | -2/+2 |
* | Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. | alfred | 2003-01-21 | 1 | -2/+2 |
* | Bridged packets are supplied to the firewall with their IP header | iedowse | 2002-12-27 | 1 | -1/+6 |
* | o Untangle the confusion with the malloc flags {M_WAITOK, M_NOWAIT} and | bmilekic | 2002-12-19 | 1 | -2/+2 |
* | Remove (almost all) global variables that were used to hold | luigi | 2002-06-22 | 1 | -38/+42 |
* | Remove custom definitions (IP_FW_TCPF_SYN etc.) of TCP header flags | luigi | 2002-05-13 | 1 | -2/+1 |
* | Add code to match MAC header fields (at the moment supported on | luigi | 2002-05-12 | 1 | -62/+108 |
* | Cleanup the interface to ip_fw_chk, two of the input arguments | luigi | 2002-05-09 | 1 | -75/+82 |
* | Enlighten those who read the FINE POINTS of the documentation a bit | cjc | 2002-05-01 | 1 | -2/+6 |
* | Simple p_ucred -> td_ucred changes to start using the per-thread ucred | jhb | 2002-02-27 | 1 | -1/+1 |
* | BUGFIX: make use of the pointer to the target of skipto rules, | luigi | 2002-02-20 | 1 | -2/+4 |
* | o Move NTOHL() and associated macros into <sys/param.h>. These are | mike | 2002-02-18 | 1 | -2/+2 |
* | Silence unused variable warning in the !KLD_MODULE case. | dd | 2002-02-10 | 1 | -0/+2 |
* | Fix a missing "ipfw:" in a syslog message. | cjc | 2002-01-07 | 1 | -1/+1 |
* | Implement matching IP precedence in ipfw(4). | yar | 2001-12-21 | 1 | -1/+4 |
* | minor whitespace fixes. | jlemon | 2001-12-14 | 1 | -1/+1 |
* | ipfw_modevent(): Don't use an unnatural block to define a variable | dd | 2001-11-27 | 1 | -3/+0 |
* | Remove debugging printfs that weren't conditional on any debugging | dd | 2001-11-27 | 1 | -2/+0 |
* | MFS: sync the ipfw/dummynet/bridge code with the one recently merged | luigi | 2001-11-04 | 1 | -76/+95 |
* | Only allow users to see their own socket connections if | ps | 2001-10-05 | 1 | -4/+2 |
* | Make it so dummynet and bridge can be loaded as modules. | ps | 2001-10-05 | 1 | -13/+5 |
* | Fix a problem with unnumbered rules introduced in latest commit. | luigi | 2001-10-01 | 1 | -3/+3 |
* | Two main changes here: | luigi | 2001-09-27 | 1 | -164/+242 |
* | o Modify IPFW and DUMMYNET administrative setsockopt() calls to use | rwatson | 2001-09-26 | 1 | -3/+8 |
* | Fix a null pointer dereference introduced in the last commit, plus | luigi | 2001-09-24 | 1 | -6/+4 |
* | A bunch of minor changes to the code (see below) for readability, code size | luigi | 2001-09-20 | 1 | -304/+318 |
* | the IP_FW_GET code in ip_fw_ctl() sizes a buffer to hold information | billf | 2001-08-26 | 1 | -0/+3 |
* | While in there fixing a fragment logging bug, fix it so we log | cjc | 2001-07-02 | 1 | -8/+11 |
* | pipe/queue are the only consumers of flow_id, so only set it in those cases | billf | 2001-04-06 | 1 | -1/+1 |
* | Replace dyn_fin_lifetime with dyn_ack_lifetime for half-closed state. | simokawa | 2001-03-27 | 1 | -1/+1 |
* | Only flush rules that have a rule number above that set by a new | paul | 2001-03-21 | 1 | -8/+17 |
* | The TCP sequence number used for sending a RST with the ipfw reset rule | jlemon | 2001-03-09 | 1 | -1/+1 |
* | The TCP header-specific section suffered a little bit of bitrot recently: | billf | 2001-02-27 | 1 | -1/+1 |
* | Clean up warning. | jlemon | 2001-02-15 | 1 | -1/+0 |
* | Introduce a new feature in IPFW: Check of the source or destination | phk | 2001-02-13 | 1 | -0/+12 |
* | Sync with the bridge/dummynet/ipfw code already tested in stable. | luigi | 2001-02-10 | 1 | -43/+41 |
* | Mechanical change to use <sys/queue.h> macro API instead of | phk | 2001-02-04 | 1 | -15/+14 |
* | MFS: bridge/ipfw/dummynet fixes (bridge.c will be committed separately) | luigi | 2001-02-02 | 1 | -4/+2 |
* | Make sure we do not follow an invalid pointer in ipfw_report | luigi | 2001-01-27 | 1 | -1/+2 |
* | Minor cleanups after yesterday's patch. | luigi | 2001-01-26 | 1 | -4/+3 |
* | Bring dummynet in line with the code that now works in -STABLE. | luigi | 2001-01-26 | 1 | -41/+39 |
* | o IPFW incorrectly handled filtering in the presence of previously | rwatson | 2001-01-09 | 1 | -5/+13 |
* | Convert more malloc+bzero to malloc+M_ZERO. | dwmalone | 2000-12-08 | 1 | -6/+3 |
* | Fixed the security breach I introduced in rev 1.145. | ru | 2000-11-07 | 1 | -3/+3 |
* | Remove unneeded #include <sys/proc.h> lines. | phk | 2000-10-29 | 1 | -1/+0 |
* | Fetch the protocol header (TCP, UDP, ICMP) only from the first fragment | ru | 2000-10-27 | 1 | -16/+11 |
* | Close PR22152 and PR19511 -- correct the naming of a variable | luigi | 2000-10-26 | 1 | -1/+1 |
* | Allow for IP_FW_ADD to be used in getsockopt(2) incarnation as | ru | 2000-10-12 | 1 | -1/+3 |
* | As we now may check the TCP header window field, make sure we pullup | ru | 2000-10-06 | 1 | -4/+4 |
* | Added the missing ntohs() conversion when matching IP packet with | ru | 2000-10-03 | 1 | -1/+1 |