summaryrefslogtreecommitdiffstats
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Functions m_getm2() and m_get2() have different order of arguments,glebius2013-03-121-1/+1
* Fix callout expiring dynamic rules.melifaro2013-03-021-3/+3
* Finish the r244185. This fixes ever growing counter of pfsync badglebius2013-02-151-2/+1
* In netpfil/pf:glebius2012-12-2810-34/+31
* Add parentheses to IP_FW_ARG_TABLEARG() definition.melifaro2012-12-231-1/+1
* Use unified IP_FW_ARG_TABLEARG() macro for most tablearg checks.melifaro2012-12-234-25/+17
* Warn about reaching various PF limits.pjd2012-12-172-0/+3
* In pfioctl, if the permission checks failed we returned with vnet contexttrociny2012-12-151-2/+2
* Fix error in r235991. No-sleep version of IFNET_RLOCK() shouldglebius2012-12-141-2/+2
* Fix VIMAGE build broken in r244185.glebius2012-12-141-1/+1
* Merge rev. 1.119 from OpenBSD:glebius2012-12-131-6/+11
* Initialize state id prior to attaching state to key hash. Otherwise aglebius2012-12-131-3/+3
* Merge 1.127 from OpenBSD, that closes a regression from 1.125 (mergedglebius2012-12-111-3/+6
* Rule memory garbage collecting in new pf scans only states that are onglebius2012-12-061-5/+7
* Close possible races between state deletion and sent being sent outglebius2012-12-061-3/+4
* Remove extra PFSYNC_LOCK() in pfsync_bulk_update() which lead to lockglebius2012-12-061-2/+0
* Revert erroneous r242693. A state may have PFTM_UNLINKED being on theglebius2012-12-061-10/+0
* Mechanically substitute flags from historic mbuf allocator withglebius2012-12-053-4/+4
* Use common macros for working with rule/dynamic counters.melifaro2012-11-304-27/+33
* Make ipfw dynamic states operations SMP-ready.melifaro2012-11-304-330/+638
* Simplify sending keepalives.melifaro2012-11-091-47/+38
* Merge rev. 1.125 from OpenBSD:glebius2012-11-071-68/+57
* It may happen that pfsync holds the last reference on a state. In thisglebius2012-11-071-0/+10
* Add assertion to enforce 'nat global' locking requierements changed by r241908.melifaro2012-11-052-0/+2
* Use unified print_dyn_rule_flags() function for debugging messagesmelifaro2012-11-051-93/+27
* Remove the recently added sysctl variable net.pfil.forward.ae2012-11-022-4/+2
* o Remove last argument to ip_fragment(), and obtain all needed informationglebius2012-10-261-9/+9
* Remove the IPFIREWALL_FORWARD kernel option and make possible to turnae2012-10-253-17/+7
* Switch the entire IPv4 stack to keep the IP packet headerglebius2012-10-226-29/+6
* Remove unnecessary chain read lock in ipfw nat 'global' code.melifaro2012-10-221-2/+7
* Make the "struct if_clone" opaque to users of the cloning API. Usersglebius2012-10-163-30/+28
* Revert previous commit...kevlo2012-10-105-5/+5
* Prefer NULL over 0 for pointerskevlo2012-10-095-5/+5
* Fix typo: s/unknow/unknownkevlo2012-10-091-2/+2
* Any pfil(9) hooks should be called with already set VNET context.glebius2012-10-081-4/+0
* Catch up with r241245 and do not return packet back in host byte order.glebius2012-10-081-4/+1
* After r241245 it appeared that in_delayed_cksum(), which still expectsglebius2012-10-082-13/+9
* A step in resolving mess with byte ordering for AF_INET. After this change:glebius2012-10-062-57/+6
* The pfil(9) layer guarantees us presence of the protocol header,glebius2012-10-061-14/+0
* To reduce volume of pfsync traffic:glebius2012-10-021-4/+8
* Clear and re-setup all function pointers that glue pf(4) and pfsync(4)glebius2012-09-291-19/+39
* Simplify send out queue code:glebius2012-09-291-30/+21
* Simplify and somewhat redesign interaction between pf_purge_thread() andglebius2012-09-281-18/+15
* EBUSY is a better reply for refusing to unload pf(4) or pfsync(4).glebius2012-09-222-2/+2
* When connection rate hits and we overload a source to a table,glebius2012-09-222-81/+109
* In pfr_insert_kentry() return ENOMEM if memory allocation failed.glebius2012-09-221-1/+1
* Fix fallout from r236397 in pfr_update_stats(), that was missedglebius2012-09-221-1/+3
* Reduce copy/paste when freeing an source node.glebius2012-09-201-10/+9
* Utilize Jenkins hash with random seed for source nodes storage.glebius2012-09-201-0/+21
* Provide kernel compile time option to make pf(4) default rule to drop.glebius2012-09-181-0/+4
OpenPOWER on IntegriCloud