summaryrefslogtreecommitdiffstats
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Use the correct EtherType for logging IPv6 packets.philip2013-09-281-2/+9
* Merge 1.12 of pf_lb.c from OpenBSD, with some changes. Original commit:glebius2013-09-021-26/+29
* Make dummynet use new direct callout(9) execution mechanism. Since the onlymav2013-08-241-4/+6
* Make ipfw nat init/unint work correctly for VIMAGE:trociny2013-08-243-24/+58
* Add m_clrprotoflags() to clear protocol specific mbuf flags at up andandre2013-08-191-2/+2
* Fix a possible NULL-pointer dereference on the pfsync(4) reconfiguration.ae2013-07-291-1/+4
* Improve locking strategy between keys hash and ID hash.glebius2013-06-131-21/+64
* Return meaningful error code from pf_state_key_attach() andglebius2013-05-111-4/+5
* Better debug message.glebius2013-05-111-1/+1
* Fix DIOCADDSTATE operation.glebius2013-05-111-1/+1
* Invalid creatorid is always EINVAL, not only when we are in verbose mode.glebius2013-05-111-3/+4
* Improve KASSERT() message.glebius2013-05-061-2/+2
* Simplify printf().glebius2013-05-061-2/+1
* Use unified method for accessing / updating cached rule pointers.melifaro2013-05-041-40/+35
* Correct a few sizeof()seadler2013-05-011-1/+1
* Remove useless ifdef KLD_MODULE from dummynet module unload path. Thisglebius2013-04-291-7/+0
* Add const qualifier to the dst parameter of the ifnet if_output method.glebius2013-04-263-7/+7
* Fix ipfw rule validation partially broken by r248552.melifaro2013-04-011-4/+5
* When we are removing a specific set, call ipfw_expire_dyn_rules only once.ae2013-03-251-4/+5
* Add ipfw support for setting/matching DiffServ codepoints (DSCP).melifaro2013-03-203-4/+59
* Separate the locking macros that are used in the packet flow pathae2013-03-192-7/+9
* Use m_get/m_gethdr instead of compat macros.glebius2013-03-151-1/+1
* Functions m_getm2() and m_get2() have different order of arguments,glebius2013-03-121-1/+1
* Fix callout expiring dynamic rules.melifaro2013-03-021-3/+3
* Finish the r244185. This fixes ever growing counter of pfsync badglebius2013-02-151-2/+1
* In netpfil/pf:glebius2012-12-2810-34/+31
* Add parentheses to IP_FW_ARG_TABLEARG() definition.melifaro2012-12-231-1/+1
* Use unified IP_FW_ARG_TABLEARG() macro for most tablearg checks.melifaro2012-12-234-25/+17
* Warn about reaching various PF limits.pjd2012-12-172-0/+3
* In pfioctl, if the permission checks failed we returned with vnet contexttrociny2012-12-151-2/+2
* Fix error in r235991. No-sleep version of IFNET_RLOCK() shouldglebius2012-12-141-2/+2
* Fix VIMAGE build broken in r244185.glebius2012-12-141-1/+1
* Merge rev. 1.119 from OpenBSD:glebius2012-12-131-6/+11
* Initialize state id prior to attaching state to key hash. Otherwise aglebius2012-12-131-3/+3
* Merge 1.127 from OpenBSD, that closes a regression from 1.125 (mergedglebius2012-12-111-3/+6
* Rule memory garbage collecting in new pf scans only states that are onglebius2012-12-061-5/+7
* Close possible races between state deletion and sent being sent outglebius2012-12-061-3/+4
* Remove extra PFSYNC_LOCK() in pfsync_bulk_update() which lead to lockglebius2012-12-061-2/+0
* Revert erroneous r242693. A state may have PFTM_UNLINKED being on theglebius2012-12-061-10/+0
* Mechanically substitute flags from historic mbuf allocator withglebius2012-12-053-4/+4
* Use common macros for working with rule/dynamic counters.melifaro2012-11-304-27/+33
* Make ipfw dynamic states operations SMP-ready.melifaro2012-11-304-330/+638
* Simplify sending keepalives.melifaro2012-11-091-47/+38
* Merge rev. 1.125 from OpenBSD:glebius2012-11-071-68/+57
* It may happen that pfsync holds the last reference on a state. In thisglebius2012-11-071-0/+10
* Add assertion to enforce 'nat global' locking requierements changed by r241908.melifaro2012-11-052-0/+2
* Use unified print_dyn_rule_flags() function for debugging messagesmelifaro2012-11-051-93/+27
* Remove the recently added sysctl variable net.pfil.forward.ae2012-11-022-4/+2
* o Remove last argument to ip_fragment(), and obtain all needed informationglebius2012-10-261-9/+9
* Remove the IPFIREWALL_FORWARD kernel option and make possible to turnae2012-10-253-17/+7
OpenPOWER on IntegriCloud