summaryrefslogtreecommitdiffstats
path: root/sys/netpfil/pf
Commit message (Expand)AuthorAgeFilesLines
* Merge rev. 1.119 from OpenBSD:glebius2012-12-131-6/+11
* Initialize state id prior to attaching state to key hash. Otherwise aglebius2012-12-131-3/+3
* Merge 1.127 from OpenBSD, that closes a regression from 1.125 (mergedglebius2012-12-111-3/+6
* Rule memory garbage collecting in new pf scans only states that are onglebius2012-12-061-5/+7
* Close possible races between state deletion and sent being sent outglebius2012-12-061-3/+4
* Remove extra PFSYNC_LOCK() in pfsync_bulk_update() which lead to lockglebius2012-12-061-2/+0
* Revert erroneous r242693. A state may have PFTM_UNLINKED being on theglebius2012-12-061-10/+0
* Merge rev. 1.125 from OpenBSD:glebius2012-11-071-68/+57
* It may happen that pfsync holds the last reference on a state. In thisglebius2012-11-071-0/+10
* o Remove last argument to ip_fragment(), and obtain all needed informationglebius2012-10-261-9/+9
* Switch the entire IPv4 stack to keep the IP packet headerglebius2012-10-222-13/+4
* Make the "struct if_clone" opaque to users of the cloning API. Usersglebius2012-10-162-21/+19
* Revert previous commit...kevlo2012-10-103-3/+3
* Prefer NULL over 0 for pointerskevlo2012-10-093-3/+3
* Any pfil(9) hooks should be called with already set VNET context.glebius2012-10-081-4/+0
* After r241245 it appeared that in_delayed_cksum(), which still expectsglebius2012-10-081-9/+6
* A step in resolving mess with byte ordering for AF_INET. After this change:glebius2012-10-061-51/+5
* The pfil(9) layer guarantees us presence of the protocol header,glebius2012-10-061-14/+0
* To reduce volume of pfsync traffic:glebius2012-10-021-4/+8
* Clear and re-setup all function pointers that glue pf(4) and pfsync(4)glebius2012-09-291-19/+39
* Simplify send out queue code:glebius2012-09-291-30/+21
* Simplify and somewhat redesign interaction between pf_purge_thread() andglebius2012-09-281-18/+15
* EBUSY is a better reply for refusing to unload pf(4) or pfsync(4).glebius2012-09-222-2/+2
* When connection rate hits and we overload a source to a table,glebius2012-09-222-81/+109
* In pfr_insert_kentry() return ENOMEM if memory allocation failed.glebius2012-09-221-1/+1
* Fix fallout from r236397 in pfr_update_stats(), that was missedglebius2012-09-221-1/+3
* Reduce copy/paste when freeing an source node.glebius2012-09-201-10/+9
* Utilize Jenkins hash with random seed for source nodes storage.glebius2012-09-201-0/+21
* Provide kernel compile time option to make pf(4) default rule to drop.glebius2012-09-181-0/+4
* Make ruleset anchors in pf(4) reentrant. We've got two problems here:glebius2012-09-182-51/+82
* Fix DIOCNATLOOK: zero key padding before performing lookup.glebius2012-09-181-0/+1
* o Create directory sys/netpfil, where all packet filters shouldglebius2012-09-1411-0/+19514
OpenPOWER on IntegriCloud