summaryrefslogtreecommitdiffstats
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Reorder struct ip_fw_chain:melifaro2014-01-243-10/+12
* Remove NULL pointer dereference.glebius2014-01-221-1/+0
* Fix resource leak and simplify code for DIOCCHANGEADDR.glebius2014-01-221-24/+18
* Revert r260548. We really should not use IPFW_WLOCK() heremelifaro2014-01-111-3/+3
* We don't need chain write lock since we're not modifying its contents.melifaro2014-01-111-3/+3
* When pf_get_translation() fails, it should leave *sn pointer pristine,glebius2014-01-061-0/+1
* Use rnh_matchaddr instead of rnh_lookup for longest-prefix match.melifaro2014-01-031-3/+3
* Fix incorrect header guard define in sys/netpfil/pf/pf.h, which snuck indim2013-12-221-1/+1
* Fix fallout from r258479: in pf_free_src_node() the node must alreadyglebius2013-12-221-1/+0
* Add net.inet.ip.fw.dyn_keep_states sysctl whichmelifaro2013-12-181-1/+24
* Simplify O_NAT opcode handling.melifaro2013-11-281-19/+16
* Check ipfw table numbers in both user and kernel space before rule addition.melifaro2013-11-281-1/+1
* In sys/netpfil/ipfw/ip_fw_nat.c:vnet_ipfw_nat_uninit() we call "IPFW_WLOCK(ch...rodrigc2013-11-251-1/+1
* The DIOCKILLSRCNODES operation was implemented with O(m*n) complexity,glebius2013-11-221-38/+56
* To support upcoming changes change internal API for source node handling:glebius2013-11-221-16/+54
* Fix off by ones when scanning source nodes hash.glebius2013-11-221-3/+3
* Style: don't compare unsigned <= 0.glebius2013-11-221-3/+3
* add a counter on the struct mq (a queue of mbufs),luigi2013-11-223-0/+32
* disable some ipfw match options when compiling in userspaceluigi2013-11-221-2/+10
* make this code compile in userspace on OSXluigi2013-11-221-0/+7
* more support for userspace compiling of this code:luigi2013-11-221-0/+10
* make ipfw_check_packet() and ipfw_check_frame() public,luigi2013-11-221-4/+4
* Some fixups to pf_get_sport after r257223:glebius2013-11-141-7/+4
* Fix fallout from r257223. Since pf_test_state_icmp() can callglebius2013-11-051-0/+4
* Remove net.link.ether.inet.useloopback sysctl tunable. It was always on byglebius2013-11-051-1/+1
* Code logic of handling PFTM_PURGE into pf_find_state().glebius2013-11-041-5/+5
* Remove unused PFTM_UNTIL_PACKET const.glebius2013-11-043-6/+2
* - Fix VIMAGE build.glebius2013-10-281-1/+3
* Include necessary headers that now are available due to pollutionglebius2013-10-281-0/+1
* Import pf.c 1.638 from OpenBSDbapt2013-10-271-3/+3
* Improt pf.c 1.636 from OpenBSDbapt2013-10-271-1/+2
* Import pf.c 1.635 and pf_lb.c 1.4 from OpenBSDbapt2013-10-272-84/+350
* Move new pf includes to the pf directory. The pfvar.h remainglebius2013-10-277-4/+315
* Provide includes that are needed in these files, and before were readglebius2013-10-264-0/+4
* The r48589 promised to remove implicit inclusion of if_var.h soon. Prepareglebius2013-10-2611-1/+27
* Use the correct EtherType for logging IPv6 packets.philip2013-09-281-2/+9
* Merge 1.12 of pf_lb.c from OpenBSD, with some changes. Original commit:glebius2013-09-021-26/+29
* Make dummynet use new direct callout(9) execution mechanism. Since the onlymav2013-08-241-4/+6
* Make ipfw nat init/unint work correctly for VIMAGE:trociny2013-08-243-24/+58
* Add m_clrprotoflags() to clear protocol specific mbuf flags at up andandre2013-08-191-2/+2
* Fix a possible NULL-pointer dereference on the pfsync(4) reconfiguration.ae2013-07-291-1/+4
* Improve locking strategy between keys hash and ID hash.glebius2013-06-131-21/+64
* Return meaningful error code from pf_state_key_attach() andglebius2013-05-111-4/+5
* Better debug message.glebius2013-05-111-1/+1
* Fix DIOCADDSTATE operation.glebius2013-05-111-1/+1
* Invalid creatorid is always EINVAL, not only when we are in verbose mode.glebius2013-05-111-3/+4
* Improve KASSERT() message.glebius2013-05-061-2/+2
* Simplify printf().glebius2013-05-061-2/+1
* Use unified method for accessing / updating cached rule pointers.melifaro2013-05-041-40/+35
* Correct a few sizeof()seadler2013-05-011-1/+1
OpenPOWER on IntegriCloud