index
:
FreeBSD-src
RELENG_2_2
RELENG_2_3
RELENG_2_3_0
RELENG_2_3_1
RELENG_2_3_2
RELENG_2_3_3
RELENG_2_3_4
RELENG_2_4
RELENG_2_4_4
RELENG_2_4_OLD
devel
devel-11
releng/10.1
releng/10.3
releng/11.0
releng/11.1
stable/10
stable/11
Raptor Engineering's fork of pfsense FreeBSD src with pfSense changes
Raptor Engineering, LLC
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
sys
/
netpfil
/
ipfw
Commit message (
Expand
)
Author
Age
Files
Lines
*
Fix breakage in ipfw+VIMAGE after r261590.
glebius
2014-03-21
1
-14
/
+6
*
Summary: Two quick edits to the implementation notes as they're no
gnn
2014-02-15
1
-2
/
+2
*
Under sys/netpfil/ipfw, surround two IPv6-specific static functions with
dim
2014-02-15
2
-0
/
+4
*
Reorder struct ip_fw_chain:
melifaro
2014-01-24
3
-10
/
+12
*
Revert r260548. We really should not use IPFW_WLOCK() here
melifaro
2014-01-11
1
-3
/
+3
*
We don't need chain write lock since we're not modifying its contents.
melifaro
2014-01-11
1
-3
/
+3
*
Use rnh_matchaddr instead of rnh_lookup for longest-prefix match.
melifaro
2014-01-03
1
-3
/
+3
*
Add net.inet.ip.fw.dyn_keep_states sysctl which
melifaro
2013-12-18
1
-1
/
+24
*
Simplify O_NAT opcode handling.
melifaro
2013-11-28
1
-19
/
+16
*
Check ipfw table numbers in both user and kernel space before rule addition.
melifaro
2013-11-28
1
-1
/
+1
*
In sys/netpfil/ipfw/ip_fw_nat.c:vnet_ipfw_nat_uninit() we call "IPFW_WLOCK(ch...
rodrigc
2013-11-25
1
-1
/
+1
*
add a counter on the struct mq (a queue of mbufs),
luigi
2013-11-22
3
-0
/
+32
*
disable some ipfw match options when compiling in userspace
luigi
2013-11-22
1
-2
/
+10
*
make this code compile in userspace on OSX
luigi
2013-11-22
1
-0
/
+7
*
more support for userspace compiling of this code:
luigi
2013-11-22
1
-0
/
+10
*
make ipfw_check_packet() and ipfw_check_frame() public,
luigi
2013-11-22
1
-4
/
+4
*
Remove net.link.ether.inet.useloopback sysctl tunable. It was always on by
glebius
2013-11-05
1
-1
/
+1
*
Include necessary headers that now are available due to pollution
glebius
2013-10-28
1
-0
/
+1
*
Move new pf includes to the pf directory. The pfvar.h remain
glebius
2013-10-27
1
-1
/
+2
*
Provide includes that are needed in these files, and before were read
glebius
2013-10-26
2
-0
/
+2
*
The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare
glebius
2013-10-26
4
-0
/
+5
*
Use the correct EtherType for logging IPv6 packets.
philip
2013-09-28
1
-2
/
+9
*
Make dummynet use new direct callout(9) execution mechanism. Since the only
mav
2013-08-24
1
-4
/
+6
*
Make ipfw nat init/unint work correctly for VIMAGE:
trociny
2013-08-24
3
-24
/
+58
*
Use unified method for accessing / updating cached rule pointers.
melifaro
2013-05-04
1
-40
/
+35
*
Correct a few sizeof()s
eadler
2013-05-01
1
-1
/
+1
*
Remove useless ifdef KLD_MODULE from dummynet module unload path. This
glebius
2013-04-29
1
-7
/
+0
*
Add const qualifier to the dst parameter of the ifnet if_output method.
glebius
2013-04-26
1
-1
/
+1
*
Fix ipfw rule validation partially broken by r248552.
melifaro
2013-04-01
1
-4
/
+5
*
When we are removing a specific set, call ipfw_expire_dyn_rules only once.
ae
2013-03-25
1
-4
/
+5
*
Add ipfw support for setting/matching DiffServ codepoints (DSCP).
melifaro
2013-03-20
3
-4
/
+59
*
Separate the locking macros that are used in the packet flow path
ae
2013-03-19
2
-7
/
+9
*
Fix callout expiring dynamic rules.
melifaro
2013-03-02
1
-3
/
+3
*
Add parentheses to IP_FW_ARG_TABLEARG() definition.
melifaro
2012-12-23
1
-1
/
+1
*
Use unified IP_FW_ARG_TABLEARG() macro for most tablearg checks.
melifaro
2012-12-23
4
-25
/
+17
*
Mechanically substitute flags from historic mbuf allocator with
glebius
2012-12-05
3
-4
/
+4
*
Use common macros for working with rule/dynamic counters.
melifaro
2012-11-30
4
-27
/
+33
*
Make ipfw dynamic states operations SMP-ready.
melifaro
2012-11-30
4
-330
/
+638
*
Simplify sending keepalives.
melifaro
2012-11-09
1
-47
/
+38
*
Add assertion to enforce 'nat global' locking requierements changed by r241908.
melifaro
2012-11-05
2
-0
/
+2
*
Use unified print_dyn_rule_flags() function for debugging messages
melifaro
2012-11-05
1
-93
/
+27
*
Remove the recently added sysctl variable net.pfil.forward.
ae
2012-11-02
2
-4
/
+2
*
Remove the IPFIREWALL_FORWARD kernel option and make possible to turn
ae
2012-10-25
3
-17
/
+7
*
Switch the entire IPv4 stack to keep the IP packet header
glebius
2012-10-22
4
-16
/
+2
*
Remove unnecessary chain read lock in ipfw nat 'global' code.
melifaro
2012-10-22
1
-2
/
+7
*
Make the "struct if_clone" opaque to users of the cloning API. Users
glebius
2012-10-16
1
-9
/
+9
*
Revert previous commit...
kevlo
2012-10-10
2
-2
/
+2
*
Prefer NULL over 0 for pointers
kevlo
2012-10-09
2
-2
/
+2
*
Fix typo: s/unknow/unknown
kevlo
2012-10-09
1
-2
/
+2
*
Catch up with r241245 and do not return packet back in host byte order.
glebius
2012-10-08
1
-4
/
+1
[next]