| Commit message (Expand) | Author | Age | Files | Lines |
* | Fix a possible NULL-pointer dereference on the pfsync(4) reconfiguration. | ae | 2013-07-29 | 1 | -1/+4 |
* | Improve locking strategy between keys hash and ID hash. | glebius | 2013-06-13 | 1 | -21/+64 |
* | Return meaningful error code from pf_state_key_attach() and | glebius | 2013-05-11 | 1 | -4/+5 |
* | Better debug message. | glebius | 2013-05-11 | 1 | -1/+1 |
* | Fix DIOCADDSTATE operation. | glebius | 2013-05-11 | 1 | -1/+1 |
* | Invalid creatorid is always EINVAL, not only when we are in verbose mode. | glebius | 2013-05-11 | 1 | -3/+4 |
* | Improve KASSERT() message. | glebius | 2013-05-06 | 1 | -2/+2 |
* | Simplify printf(). | glebius | 2013-05-06 | 1 | -2/+1 |
* | Add const qualifier to the dst parameter of the ifnet if_output method. | glebius | 2013-04-26 | 2 | -6/+6 |
* | Use m_get/m_gethdr instead of compat macros. | glebius | 2013-03-15 | 1 | -1/+1 |
* | Functions m_getm2() and m_get2() have different order of arguments, | glebius | 2013-03-12 | 1 | -1/+1 |
* | Finish the r244185. This fixes ever growing counter of pfsync bad | glebius | 2013-02-15 | 1 | -2/+1 |
* | In netpfil/pf: | glebius | 2012-12-28 | 10 | -34/+31 |
* | Warn about reaching various PF limits. | pjd | 2012-12-17 | 2 | -0/+3 |
* | In pfioctl, if the permission checks failed we returned with vnet context | trociny | 2012-12-15 | 1 | -2/+2 |
* | Fix error in r235991. No-sleep version of IFNET_RLOCK() should | glebius | 2012-12-14 | 1 | -2/+2 |
* | Fix VIMAGE build broken in r244185. | glebius | 2012-12-14 | 1 | -1/+1 |
* | Merge rev. 1.119 from OpenBSD: | glebius | 2012-12-13 | 1 | -6/+11 |
* | Initialize state id prior to attaching state to key hash. Otherwise a | glebius | 2012-12-13 | 1 | -3/+3 |
* | Merge 1.127 from OpenBSD, that closes a regression from 1.125 (merged | glebius | 2012-12-11 | 1 | -3/+6 |
* | Rule memory garbage collecting in new pf scans only states that are on | glebius | 2012-12-06 | 1 | -5/+7 |
* | Close possible races between state deletion and sent being sent out | glebius | 2012-12-06 | 1 | -3/+4 |
* | Remove extra PFSYNC_LOCK() in pfsync_bulk_update() which lead to lock | glebius | 2012-12-06 | 1 | -2/+0 |
* | Revert erroneous r242693. A state may have PFTM_UNLINKED being on the | glebius | 2012-12-06 | 1 | -10/+0 |
* | Merge rev. 1.125 from OpenBSD: | glebius | 2012-11-07 | 1 | -68/+57 |
* | It may happen that pfsync holds the last reference on a state. In this | glebius | 2012-11-07 | 1 | -0/+10 |
* | o Remove last argument to ip_fragment(), and obtain all needed information | glebius | 2012-10-26 | 1 | -9/+9 |
* | Switch the entire IPv4 stack to keep the IP packet header | glebius | 2012-10-22 | 2 | -13/+4 |
* | Make the "struct if_clone" opaque to users of the cloning API. Users | glebius | 2012-10-16 | 2 | -21/+19 |
* | Revert previous commit... | kevlo | 2012-10-10 | 3 | -3/+3 |
* | Prefer NULL over 0 for pointers | kevlo | 2012-10-09 | 3 | -3/+3 |
* | Any pfil(9) hooks should be called with already set VNET context. | glebius | 2012-10-08 | 1 | -4/+0 |
* | After r241245 it appeared that in_delayed_cksum(), which still expects | glebius | 2012-10-08 | 1 | -9/+6 |
* | A step in resolving mess with byte ordering for AF_INET. After this change: | glebius | 2012-10-06 | 1 | -51/+5 |
* | The pfil(9) layer guarantees us presence of the protocol header, | glebius | 2012-10-06 | 1 | -14/+0 |
* | To reduce volume of pfsync traffic: | glebius | 2012-10-02 | 1 | -4/+8 |
* | Clear and re-setup all function pointers that glue pf(4) and pfsync(4) | glebius | 2012-09-29 | 1 | -19/+39 |
* | Simplify send out queue code: | glebius | 2012-09-29 | 1 | -30/+21 |
* | Simplify and somewhat redesign interaction between pf_purge_thread() and | glebius | 2012-09-28 | 1 | -18/+15 |
* | EBUSY is a better reply for refusing to unload pf(4) or pfsync(4). | glebius | 2012-09-22 | 2 | -2/+2 |
* | When connection rate hits and we overload a source to a table, | glebius | 2012-09-22 | 2 | -81/+109 |
* | In pfr_insert_kentry() return ENOMEM if memory allocation failed. | glebius | 2012-09-22 | 1 | -1/+1 |
* | Fix fallout from r236397 in pfr_update_stats(), that was missed | glebius | 2012-09-22 | 1 | -1/+3 |
* | Reduce copy/paste when freeing an source node. | glebius | 2012-09-20 | 1 | -10/+9 |
* | Utilize Jenkins hash with random seed for source nodes storage. | glebius | 2012-09-20 | 1 | -0/+21 |
* | Provide kernel compile time option to make pf(4) default rule to drop. | glebius | 2012-09-18 | 1 | -0/+4 |
* | Make ruleset anchors in pf(4) reentrant. We've got two problems here: | glebius | 2012-09-18 | 2 | -51/+82 |
* | Fix DIOCNATLOOK: zero key padding before performing lookup. | glebius | 2012-09-18 | 1 | -0/+1 |
* | o Create directory sys/netpfil, where all packet filters should | glebius | 2012-09-14 | 11 | -0/+19514 |