summaryrefslogtreecommitdiffstats
path: root/sys/netpfil/ipfw
Commit message (Expand)AuthorAgeFilesLines
* MFC r266399:ae2014-05-261-1/+1
* Merge r258708, r258711, r260247, r261117.melifaro2014-05-084-33/+32
* MFC r264963:trociny2014-05-021-2/+2
* MFC r264540:ae2014-04-231-1/+1
* MFC: r264421brueffer2014-04-231-3/+7
* Merge r263497: fix ipfw + VIMAGE sysctls.glebius2014-03-241-14/+6
* Bulk sync of pf changes from head, in attempt to fixup broken build Iglebius2014-03-121-1/+2
* MFC r261915:dim2014-02-192-0/+4
* MFC r258588rodrigc2013-12-041-1/+1
* Use the correct EtherType for logging IPv6 packets.philip2013-09-281-2/+9
* Make dummynet use new direct callout(9) execution mechanism. Since the onlymav2013-08-241-4/+6
* Make ipfw nat init/unint work correctly for VIMAGE:trociny2013-08-243-24/+58
* Use unified method for accessing / updating cached rule pointers.melifaro2013-05-041-40/+35
* Correct a few sizeof()seadler2013-05-011-1/+1
* Remove useless ifdef KLD_MODULE from dummynet module unload path. Thisglebius2013-04-291-7/+0
* Add const qualifier to the dst parameter of the ifnet if_output method.glebius2013-04-261-1/+1
* Fix ipfw rule validation partially broken by r248552.melifaro2013-04-011-4/+5
* When we are removing a specific set, call ipfw_expire_dyn_rules only once.ae2013-03-251-4/+5
* Add ipfw support for setting/matching DiffServ codepoints (DSCP).melifaro2013-03-203-4/+59
* Separate the locking macros that are used in the packet flow pathae2013-03-192-7/+9
* Fix callout expiring dynamic rules.melifaro2013-03-021-3/+3
* Add parentheses to IP_FW_ARG_TABLEARG() definition.melifaro2012-12-231-1/+1
* Use unified IP_FW_ARG_TABLEARG() macro for most tablearg checks.melifaro2012-12-234-25/+17
* Mechanically substitute flags from historic mbuf allocator withglebius2012-12-053-4/+4
* Use common macros for working with rule/dynamic counters.melifaro2012-11-304-27/+33
* Make ipfw dynamic states operations SMP-ready.melifaro2012-11-304-330/+638
* Simplify sending keepalives.melifaro2012-11-091-47/+38
* Add assertion to enforce 'nat global' locking requierements changed by r241908.melifaro2012-11-052-0/+2
* Use unified print_dyn_rule_flags() function for debugging messagesmelifaro2012-11-051-93/+27
* Remove the recently added sysctl variable net.pfil.forward.ae2012-11-022-4/+2
* Remove the IPFIREWALL_FORWARD kernel option and make possible to turnae2012-10-253-17/+7
* Switch the entire IPv4 stack to keep the IP packet headerglebius2012-10-224-16/+2
* Remove unnecessary chain read lock in ipfw nat 'global' code.melifaro2012-10-221-2/+7
* Make the "struct if_clone" opaque to users of the cloning API. Usersglebius2012-10-161-9/+9
* Revert previous commit...kevlo2012-10-102-2/+2
* Prefer NULL over 0 for pointerskevlo2012-10-092-2/+2
* Fix typo: s/unknow/unknownkevlo2012-10-091-2/+2
* Catch up with r241245 and do not return packet back in host byte order.glebius2012-10-081-4/+1
* After r241245 it appeared that in_delayed_cksum(), which still expectsglebius2012-10-081-4/+3
* A step in resolving mess with byte ordering for AF_INET. After this change:glebius2012-10-061-6/+1
* o Create directory sys/netpfil, where all packet filters shouldglebius2012-09-1427-0/+17631
OpenPOWER on IntegriCloud