| Commit message (Expand) | Author | Age | Files | Lines |
* | Move uid/gid checking logic out of line and lock inpcb usage. This | sam | 2003-11-07 | 1 | -40/+60 |
* | use ipsec_getnhist() instead of obsoleted ipsec_gethist(). | ume | 2003-11-07 | 1 | -1/+1 |
* | Replace the if_name and if_unit members of struct ifnet with new members | brooks | 2003-10-31 | 1 | -8/+9 |
* | Malloc buckets of size 128 have been having their 64-byte offset | mckusick | 2003-10-16 | 1 | -4/+7 |
* | Bandaid locking change: mark static rule mutex recursive so re-entry when | sam | 2003-09-17 | 1 | -1/+2 |
* | Add locking. | sam | 2003-09-17 | 1 | -164/+309 |
* | Allow set 31 to be used for rules other than 65535. | luigi | 2003-07-15 | 1 | -23/+27 |
* | Implement comments embedded into ipfw2 instructions. | luigi | 2003-07-12 | 1 | -1/+1 |
* | Merge the handlers of O_IP_SRC_MASK and O_IP_DST_MASK opcodes, and | luigi | 2003-07-08 | 1 | -17/+13 |
* | Implement the 'ipsec' option to match packets coming out of an ipsec tunnel. | luigi | 2003-07-04 | 1 | -0/+16 |
* | whitespace fix | luigi | 2003-06-28 | 1 | -1/+1 |
* | Remove whitespace at end of line. | luigi | 2003-06-23 | 1 | -4/+4 |
* | Add support for multiple values and ranges for the "iplen", "ipttl", | luigi | 2003-06-22 | 1 | -12/+29 |
* | Change handling to support strong alignment architectures such as alpha and | ticso | 2003-06-04 | 1 | -6/+15 |
* | Account for packets processed at layer-2 (i.e. net.link.ether.ipfw=1). | kbyanc | 2003-06-02 | 1 | -3/+6 |
* | Add a 'verrevpath' option that verifies the interface that a packet | cjc | 2003-03-15 | 1 | -0/+50 |
* | Back out M_* changes, per decision of the TRB. | imp | 2003-02-19 | 1 | -2/+2 |
* | o Fix ipfw uid rules: socheckuid() returns 0 when uid matches a socket | maxim | 2003-02-17 | 1 | -2/+2 |
* | Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. | alfred | 2003-01-21 | 1 | -2/+2 |
* | If the first action is O_LOG adjust a pointer to the real one, unbreaks | maxim | 2003-01-20 | 1 | -0/+2 |
* | Introduce the ability to flag a sysctl for operation at secure level 2 or 3 | dillon | 2003-01-14 | 1 | -3/+3 |
* | Bridged packets are supplied to the firewall with their IP header | iedowse | 2002-12-27 | 1 | -2/+8 |
* | o De-anonymity dummynet(4) and ipfw(4) messages, prepend them | maxim | 2002-12-24 | 1 | -15/+16 |
* | o Fix byte order logging issue: sa.sin_port is already in host byte order. | maxim | 2002-12-15 | 1 | -1/+1 |
* | Move fw_one_pass from ip_fw2.c to ip_input.c so that neither | luigi | 2002-11-20 | 1 | -1/+0 |
* | Lower a priority of "session drop" messages. | maxim | 2002-10-29 | 1 | -1/+1 |
* | Fix ipfw2 panics on 64-bit platforms. | mux | 2002-10-24 | 1 | -6/+2 |
* | src and dst address were erroneously swapped in SRC_SET and DST_SET | luigi | 2002-10-24 | 1 | -2/+2 |
* | Kill EOL spaces. | maxim | 2002-10-23 | 1 | -24/+23 |
* | Use syslog for messages about dropped sessions, do not flood a console. | maxim | 2002-10-23 | 1 | -1/+1 |
* | Several malloc() calls were passing the M_DONTWAIT flag | mux | 2002-10-19 | 1 | -3/+3 |
* | Replace aux mbufs with packet tags: | sam | 2002-10-16 | 1 | -1/+1 |
* | Lock the sysctl(8) knobs that turn ip{,6}fw(8) firewalling and | cjc | 2002-08-25 | 1 | -3/+6 |
* | Raise limit for port lists to 30 entries/ranges. | luigi | 2002-08-19 | 1 | -6/+4 |
* | sys/netinet/ip_fw2.c: | luigi | 2002-08-16 | 1 | -47/+116 |
* | remove spurious printf | phk | 2002-08-13 | 1 | -1/+1 |
* | One bugfix and one new feature. | luigi | 2002-08-10 | 1 | -18/+95 |
* | Only log things net.inet.ip.fw.verbose is set | luigi | 2002-07-24 | 1 | -1/+2 |
* | Implement keepalives for dynamic rules, so they will not expire | luigi | 2002-07-14 | 1 | -104/+145 |
* | No functional changes, but: | luigi | 2002-07-08 | 1 | -279/+267 |
* | Implement the last 2-3 missing instructions for ipfw, | luigi | 2002-07-05 | 1 | -36/+110 |
* | Fix warning. | dfr | 2002-06-28 | 1 | -1/+1 |
* | The new ipfw code. | luigi | 2002-06-27 | 1 | -0/+2519 |