| Commit message (Expand) | Author | Age | Files | Lines |
* | Since ipfw nat configures all options in one step, we should set all bits | ae | 2014-05-18 | 1 | -1/+1 |
* | Fix wrong formatting of 0.0.0.0/X table records in ipfw(8). | melifaro | 2014-05-17 | 1 | -0/+1 |
* | o In pf_normalize_ip() we don't need mtag in | glebius | 2014-05-17 | 1 | -22/+7 |
* | Define startup order the same way as it is in dummynet. | trociny | 2014-04-26 | 1 | -2/+2 |
* | The current API for adding rules with pool addresses is the following: | glebius | 2014-04-25 | 1 | -1/+3 |
* | Backport from projects/pf r263908: | mm | 2014-04-20 | 2 | -12/+26 |
* | Set oif only for outgoing packets. | ae | 2014-04-16 | 1 | -1/+1 |
* | Backout r257223,r257224,r257225,r257246,r257710. The changes caused | glebius | 2014-04-16 | 2 | -355/+84 |
* | Free resources and error cases; re-indent a curly brace while here. | brueffer | 2014-04-13 | 1 | -3/+7 |
* | Merge from projects/pf r264198: | mm | 2014-04-07 | 1 | -6/+12 |
* | Merge from projects/pf r251993 (glebius@): | mm | 2014-03-25 | 3 | -45/+43 |
* | Fix breakage in ipfw+VIMAGE after r261590. | glebius | 2014-03-21 | 1 | -14/+6 |
* | - Remove rt_metrics_lite and simply put its members into rtentry. | glebius | 2014-03-05 | 1 | -1/+1 |
* | Instead of playing games with casts simply add 3 more members to the | glebius | 2014-03-05 | 1 | -10/+3 |
* | Revert r262196 | mm | 2014-02-19 | 1 | -30/+19 |
* | De-virtualize pf_mtag_z [1] | mm | 2014-02-18 | 1 | -19/+30 |
* | Summary: Two quick edits to the implementation notes as they're no | gnn | 2014-02-15 | 1 | -2/+2 |
* | Under sys/netpfil/ipfw, surround two IPv6-specific static functions with | dim | 2014-02-15 | 2 | -0/+4 |
* | Once pf became not covered by a single mutex, many counters in it became | glebius | 2014-02-14 | 3 | -46/+72 |
* | Reorder struct ip_fw_chain: | melifaro | 2014-01-24 | 3 | -10/+12 |
* | Remove NULL pointer dereference. | glebius | 2014-01-22 | 1 | -1/+0 |
* | Fix resource leak and simplify code for DIOCCHANGEADDR. | glebius | 2014-01-22 | 1 | -24/+18 |
* | Revert r260548. We really should not use IPFW_WLOCK() here | melifaro | 2014-01-11 | 1 | -3/+3 |
* | We don't need chain write lock since we're not modifying its contents. | melifaro | 2014-01-11 | 1 | -3/+3 |
* | When pf_get_translation() fails, it should leave *sn pointer pristine, | glebius | 2014-01-06 | 1 | -0/+1 |
* | Use rnh_matchaddr instead of rnh_lookup for longest-prefix match. | melifaro | 2014-01-03 | 1 | -3/+3 |
* | Fix incorrect header guard define in sys/netpfil/pf/pf.h, which snuck in | dim | 2013-12-22 | 1 | -1/+1 |
* | Fix fallout from r258479: in pf_free_src_node() the node must already | glebius | 2013-12-22 | 1 | -1/+0 |
* | Add net.inet.ip.fw.dyn_keep_states sysctl which | melifaro | 2013-12-18 | 1 | -1/+24 |
* | Simplify O_NAT opcode handling. | melifaro | 2013-11-28 | 1 | -19/+16 |
* | Check ipfw table numbers in both user and kernel space before rule addition. | melifaro | 2013-11-28 | 1 | -1/+1 |
* | In sys/netpfil/ipfw/ip_fw_nat.c:vnet_ipfw_nat_uninit() we call "IPFW_WLOCK(ch... | rodrigc | 2013-11-25 | 1 | -1/+1 |
* | The DIOCKILLSRCNODES operation was implemented with O(m*n) complexity, | glebius | 2013-11-22 | 1 | -38/+56 |
* | To support upcoming changes change internal API for source node handling: | glebius | 2013-11-22 | 1 | -16/+54 |
* | Fix off by ones when scanning source nodes hash. | glebius | 2013-11-22 | 1 | -3/+3 |
* | Style: don't compare unsigned <= 0. | glebius | 2013-11-22 | 1 | -3/+3 |
* | add a counter on the struct mq (a queue of mbufs), | luigi | 2013-11-22 | 3 | -0/+32 |
* | disable some ipfw match options when compiling in userspace | luigi | 2013-11-22 | 1 | -2/+10 |
* | make this code compile in userspace on OSX | luigi | 2013-11-22 | 1 | -0/+7 |
* | more support for userspace compiling of this code: | luigi | 2013-11-22 | 1 | -0/+10 |
* | make ipfw_check_packet() and ipfw_check_frame() public, | luigi | 2013-11-22 | 1 | -4/+4 |
* | Some fixups to pf_get_sport after r257223: | glebius | 2013-11-14 | 1 | -7/+4 |
* | Fix fallout from r257223. Since pf_test_state_icmp() can call | glebius | 2013-11-05 | 1 | -0/+4 |
* | Remove net.link.ether.inet.useloopback sysctl tunable. It was always on by | glebius | 2013-11-05 | 1 | -1/+1 |
* | Code logic of handling PFTM_PURGE into pf_find_state(). | glebius | 2013-11-04 | 1 | -5/+5 |
* | Remove unused PFTM_UNTIL_PACKET const. | glebius | 2013-11-04 | 3 | -6/+2 |
* | - Fix VIMAGE build. | glebius | 2013-10-28 | 1 | -1/+3 |
* | Include necessary headers that now are available due to pollution | glebius | 2013-10-28 | 1 | -0/+1 |
* | Import pf.c 1.638 from OpenBSD | bapt | 2013-10-27 | 1 | -3/+3 |
* | Improt pf.c 1.636 from OpenBSD | bapt | 2013-10-27 | 1 | -1/+2 |