summaryrefslogtreecommitdiffstats
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* DNOLD_IS_ECN introduced by r266941 is not required.hiren2014-06-011-3/+0
* ECN marking implenetation for dummynet.hiren2014-06-013-5/+81
* Fix pf(4) to build with MAXCPU set to 256. MAXCPU is actually a count,jhb2014-05-291-1/+1
* Since ipfw nat configures all options in one step, we should set all bitsae2014-05-181-1/+1
* Fix wrong formatting of 0.0.0.0/X table records in ipfw(8).melifaro2014-05-171-0/+1
* o In pf_normalize_ip() we don't need mtag inglebius2014-05-171-22/+7
* Define startup order the same way as it is in dummynet.trociny2014-04-261-2/+2
* The current API for adding rules with pool addresses is the following:glebius2014-04-251-1/+3
* Backport from projects/pf r263908:mm2014-04-202-12/+26
* Set oif only for outgoing packets.ae2014-04-161-1/+1
* Backout r257223,r257224,r257225,r257246,r257710. The changes causedglebius2014-04-162-355/+84
* Free resources and error cases; re-indent a curly brace while here.brueffer2014-04-131-3/+7
* Merge from projects/pf r264198:mm2014-04-071-6/+12
* Merge from projects/pf r251993 (glebius@):mm2014-03-253-45/+43
* Fix breakage in ipfw+VIMAGE after r261590.glebius2014-03-211-14/+6
* - Remove rt_metrics_lite and simply put its members into rtentry.glebius2014-03-051-1/+1
* Instead of playing games with casts simply add 3 more members to theglebius2014-03-051-10/+3
* Revert r262196mm2014-02-191-30/+19
* De-virtualize pf_mtag_z [1]mm2014-02-181-19/+30
* Summary: Two quick edits to the implementation notes as they're nognn2014-02-151-2/+2
* Under sys/netpfil/ipfw, surround two IPv6-specific static functions withdim2014-02-152-0/+4
* Once pf became not covered by a single mutex, many counters in it becameglebius2014-02-143-46/+72
* Reorder struct ip_fw_chain:melifaro2014-01-243-10/+12
* Remove NULL pointer dereference.glebius2014-01-221-1/+0
* Fix resource leak and simplify code for DIOCCHANGEADDR.glebius2014-01-221-24/+18
* Revert r260548. We really should not use IPFW_WLOCK() heremelifaro2014-01-111-3/+3
* We don't need chain write lock since we're not modifying its contents.melifaro2014-01-111-3/+3
* When pf_get_translation() fails, it should leave *sn pointer pristine,glebius2014-01-061-0/+1
* Use rnh_matchaddr instead of rnh_lookup for longest-prefix match.melifaro2014-01-031-3/+3
* Fix incorrect header guard define in sys/netpfil/pf/pf.h, which snuck indim2013-12-221-1/+1
* Fix fallout from r258479: in pf_free_src_node() the node must alreadyglebius2013-12-221-1/+0
* Add net.inet.ip.fw.dyn_keep_states sysctl whichmelifaro2013-12-181-1/+24
* Simplify O_NAT opcode handling.melifaro2013-11-281-19/+16
* Check ipfw table numbers in both user and kernel space before rule addition.melifaro2013-11-281-1/+1
* In sys/netpfil/ipfw/ip_fw_nat.c:vnet_ipfw_nat_uninit() we call "IPFW_WLOCK(ch...rodrigc2013-11-251-1/+1
* The DIOCKILLSRCNODES operation was implemented with O(m*n) complexity,glebius2013-11-221-38/+56
* To support upcoming changes change internal API for source node handling:glebius2013-11-221-16/+54
* Fix off by ones when scanning source nodes hash.glebius2013-11-221-3/+3
* Style: don't compare unsigned <= 0.glebius2013-11-221-3/+3
* add a counter on the struct mq (a queue of mbufs),luigi2013-11-223-0/+32
* disable some ipfw match options when compiling in userspaceluigi2013-11-221-2/+10
* make this code compile in userspace on OSXluigi2013-11-221-0/+7
* more support for userspace compiling of this code:luigi2013-11-221-0/+10
* make ipfw_check_packet() and ipfw_check_frame() public,luigi2013-11-221-4/+4
* Some fixups to pf_get_sport after r257223:glebius2013-11-141-7/+4
* Fix fallout from r257223. Since pf_test_state_icmp() can callglebius2013-11-051-0/+4
* Remove net.link.ether.inet.useloopback sysctl tunable. It was always on byglebius2013-11-051-1/+1
* Code logic of handling PFTM_PURGE into pf_find_state().glebius2013-11-041-5/+5
* Remove unused PFTM_UNTIL_PACKET const.glebius2013-11-043-6/+2
* - Fix VIMAGE build.glebius2013-10-281-1/+3
OpenPOWER on IntegriCloud