summaryrefslogtreecommitdiffstats
path: root/sys/netpfil/pf
Commit message (Expand)AuthorAgeFilesLines
* Use m_get/m_gethdr instead of compat macros.glebius2013-03-151-1/+1
* Functions m_getm2() and m_get2() have different order of arguments,glebius2013-03-121-1/+1
* Finish the r244185. This fixes ever growing counter of pfsync badglebius2013-02-151-2/+1
* In netpfil/pf:glebius2012-12-2810-34/+31
* Warn about reaching various PF limits.pjd2012-12-172-0/+3
* In pfioctl, if the permission checks failed we returned with vnet contexttrociny2012-12-151-2/+2
* Fix error in r235991. No-sleep version of IFNET_RLOCK() shouldglebius2012-12-141-2/+2
* Fix VIMAGE build broken in r244185.glebius2012-12-141-1/+1
* Merge rev. 1.119 from OpenBSD:glebius2012-12-131-6/+11
* Initialize state id prior to attaching state to key hash. Otherwise aglebius2012-12-131-3/+3
* Merge 1.127 from OpenBSD, that closes a regression from 1.125 (mergedglebius2012-12-111-3/+6
* Rule memory garbage collecting in new pf scans only states that are onglebius2012-12-061-5/+7
* Close possible races between state deletion and sent being sent outglebius2012-12-061-3/+4
* Remove extra PFSYNC_LOCK() in pfsync_bulk_update() which lead to lockglebius2012-12-061-2/+0
* Revert erroneous r242693. A state may have PFTM_UNLINKED being on theglebius2012-12-061-10/+0
* Merge rev. 1.125 from OpenBSD:glebius2012-11-071-68/+57
* It may happen that pfsync holds the last reference on a state. In thisglebius2012-11-071-0/+10
* o Remove last argument to ip_fragment(), and obtain all needed informationglebius2012-10-261-9/+9
* Switch the entire IPv4 stack to keep the IP packet headerglebius2012-10-222-13/+4
* Make the "struct if_clone" opaque to users of the cloning API. Usersglebius2012-10-162-21/+19
* Revert previous commit...kevlo2012-10-103-3/+3
* Prefer NULL over 0 for pointerskevlo2012-10-093-3/+3
* Any pfil(9) hooks should be called with already set VNET context.glebius2012-10-081-4/+0
* After r241245 it appeared that in_delayed_cksum(), which still expectsglebius2012-10-081-9/+6
* A step in resolving mess with byte ordering for AF_INET. After this change:glebius2012-10-061-51/+5
* The pfil(9) layer guarantees us presence of the protocol header,glebius2012-10-061-14/+0
* To reduce volume of pfsync traffic:glebius2012-10-021-4/+8
* Clear and re-setup all function pointers that glue pf(4) and pfsync(4)glebius2012-09-291-19/+39
* Simplify send out queue code:glebius2012-09-291-30/+21
* Simplify and somewhat redesign interaction between pf_purge_thread() andglebius2012-09-281-18/+15
* EBUSY is a better reply for refusing to unload pf(4) or pfsync(4).glebius2012-09-222-2/+2
* When connection rate hits and we overload a source to a table,glebius2012-09-222-81/+109
* In pfr_insert_kentry() return ENOMEM if memory allocation failed.glebius2012-09-221-1/+1
* Fix fallout from r236397 in pfr_update_stats(), that was missedglebius2012-09-221-1/+3
* Reduce copy/paste when freeing an source node.glebius2012-09-201-10/+9
* Utilize Jenkins hash with random seed for source nodes storage.glebius2012-09-201-0/+21
* Provide kernel compile time option to make pf(4) default rule to drop.glebius2012-09-181-0/+4
* Make ruleset anchors in pf(4) reentrant. We've got two problems here:glebius2012-09-182-51/+82
* Fix DIOCNATLOOK: zero key padding before performing lookup.glebius2012-09-181-0/+1
* o Create directory sys/netpfil, where all packet filters shouldglebius2012-09-1411-0/+19514
OpenPOWER on IntegriCloud