| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | o Fix bug I introduced in the previous commit (ipfw set extention): | maxim | 2007-08-26 | 1 | -1/+4 |
| * | Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which | rwatson | 2007-08-06 | 1 | -4/+1 |
| * | Replace references to NET_CALLOUT_MPSAFE with CALLOUT_MPSAFE, and remove | rwatson | 2007-07-28 | 1 | -1/+1 |
| * | Link pf 4.1 to the build: | mlaier | 2007-07-03 | 1 | -8/+6 |
| * | Commit the change from FAST_IPSEC to IPSEC. The FAST_IPSEC | gnn | 2007-07-03 | 1 | -1/+1 |
| * | Commit IPv6 support for FAST_IPSEC to the tree. | gnn | 2007-07-01 | 1 | -7/+0 |
| * | o Make ipfw set more robust -- now it is possible: | maxim | 2007-06-18 | 1 | -18/+60 |
| * | Move universally to ANSI C function declarations, with relatively | rwatson | 2007-05-10 | 1 | -18/+23 |
| * | Add support for filtering on Routing Header Type 0 and | bz | 2007-05-04 | 1 | -0/+4 |
| * | Shorten text string for ip_fw2 dynamic rules zone by removing the word | rwatson | 2007-04-17 | 1 | -1/+1 |
| * | Since we switched to using monatomically increasing timestamps, | julian | 2007-04-03 | 1 | -0/+9 |
| * | Include opt_ipdivert.h so that the message announcing ipfw correctly | alc | 2007-02-03 | 1 | -0/+1 |
| * | Remove two lines that somehow snuck back in after testing. | julian | 2007-01-09 | 1 | -2/+0 |
| * | Prevent adding a rule with a nat action in case IPFIREWALL_NAT was not defined. | piso | 2007-01-05 | 1 | -0/+4 |
| * | Wrap ipfw nat support in a new kernel config option named | piso | 2007-01-03 | 1 | -1/+16 |
| * | Remove a bunch of dependencies in the IP header being the first thing in the | julian | 2007-01-02 | 1 | -57/+94 |
| * | Summer of Code 2005: improve libalias - part 2 of 2 | piso | 2006-12-29 | 1 | -2/+546 |
| * | MFp4: 92972, 98913 + one more change | bz | 2006-12-12 | 1 | -4/+6 |
| * | Add SCTP as a known upper layer protocol over v6. | bz | 2006-11-13 | 1 | -0/+8 |
| * | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -1/+2 |
| * | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -1/+2 |
| * | o Do not do args->f_id.addr_type == 6 when there is | maxim | 2006-10-11 | 1 | -2/+2 |
| * | o Kill a nit in the comment. | maxim | 2006-10-11 | 1 | -1/+1 |
| * | o Extend not very informative ipfw(4) message 'drop session, too many | maxim | 2006-10-11 | 1 | -2/+32 |
| * | Set scope on MC address so IPv6 carp advertisement will not get dropped | bz | 2006-10-07 | 1 | -0/+11 |
| * | Handle a list of IPv6 src and dst addresses correctly, eg. | jhay | 2006-09-16 | 1 | -14/+17 |
| * | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 1 | -5/+20 |
| * | Recognise IPv6 PIM packets. | jhay | 2006-08-31 | 1 | -0/+6 |
| * | comply with style police | julian | 2006-08-18 | 1 | -5/+8 |
| * | Allow ipfw to forward to a destination that is specified by a table. | julian | 2006-08-17 | 1 | -7/+23 |
| * | Remove useless NULL pointer check: we are using M_WAITOK flag for memory | oleg | 2006-08-04 | 1 | -4/+0 |
| * | Do not leak memory while flushing rules. | oleg | 2006-08-02 | 1 | -2/+3 |
| * | There is a consensus that ifaddr.ifa_addr should never be NULL, | yar | 2006-06-29 | 1 | -4/+0 |
| * | Use TAILQ_FOREACH consistently. | yar | 2006-06-29 | 1 | -2/+1 |
| * | Eliminate the offset argument from send_reject. It's not been | bz | 2006-06-29 | 1 | -9/+7 |
| * | Use INPLOOKUP_WILDCARD instead of just 1 more consistently. | bz | 2006-06-29 | 1 | -1/+1 |
| * | - Pullup even when the extention header is unknown, to prevent | ume | 2006-06-22 | 1 | -1/+13 |
| * | Add support of 'tablearg' feature for: | oleg | 2006-06-15 | 1 | -15/+30 |
| * | install_state(): style(9) cleanup | oleg | 2006-06-15 | 1 | -33/+36 |
| * | install_state() should properly initialize 'addr_type' field of newly created | oleg | 2006-06-08 | 1 | -0/+1 |
| * | Implement internal (i.e. inside kernel) packet tagging using mbuf_tags(9). | oleg | 2006-05-24 | 1 | -1/+57 |
| * | Use only lower 64bit of src/dest (and src/dest port) for hashing of IPv6 | mlaier | 2006-05-14 | 1 | -4/+4 |
| * | Remove ip6fw. Since ipfw has full functional IPv6 support now and - in | mlaier | 2006-05-12 | 1 | -1/+0 |
| * | Reintroduce net.inet6.ip6.fw.enable sysctl to dis/enable the ipv6 processing | mlaier | 2006-05-12 | 1 | -8/+13 |
| * | Don't claim "(+ipv6)" if we didn't build with INET6. | mlaier | 2006-05-11 | 1 | -1/+5 |
| * | - Do not leak read lock in IP_FW_TABLE_GETSIZE case of ipfw_ctl(). | glebius | 2006-03-03 | 1 | -7/+5 |
| * | Use PFIL_HOOKED macros in if_bridge and pass the right argument to | csjp | 2006-02-02 | 1 | -1/+1 |
| * | Somewhat re-factor the read/write locking mechanism associated with the packet | csjp | 2006-02-02 | 1 | -45/+10 |
| * | Fix minor bug in uRPF: | oleg | 2006-01-24 | 1 | -2/+8 |
| * | - Change the return type for init_tables from void to int so we can propagate | csjp | 2006-01-20 | 1 | -10/+25 |
