Age | Commit message (Expand) | Author |
2015-08-25 | #if INET && INET6 -> #ifdef INET6, the kernel no longer defines INET | Jonathan Gray |
2015-07-15 | m_freem() can handle NULL, do not check for this condition beforehands. | Theo de Raadt |
2015-02-13 | Include sys/stdint.h for SIZE_MAX instead of relying on the misplaced | Todd C. Miller |
2015-02-12 | change log(matches) semantics slightly to make it more useful. since it | Henning Brauer |
2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
2014-12-05 | Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>. | Martin Pieuchot |
2014-12-02 | replace some malloc multiplies with mallocarry. ok deraadt henning | Ted Unangst |
2014-09-08 | When logging a packet to a listener on the pflog0 interface, the | Alexander Bluhm |
2014-09-08 | remove uneeded route.h includes | Jonathan Gray |
2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
2014-07-12 | add a size argument to free. will be used soon, but for now default to 0. | Ted Unangst |
2014-07-09 | tedu bpf_mtap_pflog(). | Henning Brauer |
2014-06-25 | pf_translate doesn't use the mbuf argument anymore. | Mike Belopuhov |
2013-11-16 | Remove dead assignments and now unused variables. | Charles Longeau |
2013-10-24 | Remove the number of in6_var.h inclusions by moving some functions and | Martin Pieuchot |
2013-10-23 | Remove the number of in_var.h inclusions by moving some functions and | Martin Pieuchot |
2013-10-17 | The header file netinet/in_var.h included netinet6/in6_var.h. This | Alexander Bluhm |
2013-06-26 | put the cksum diff back, of course with the bug fixed where we could | Henning Brauer |
2013-03-26 | Remove various read-only *maxlen variables and use IFQ_MAXLEN directly. | Martin Pieuchot |
2012-11-06 | backout csum diff for the moment, requested by theo | Henning Brauer |
2012-11-01 | redo most of the protocol (tcp/udp/...) checksum handling | Henning Brauer |
2012-07-08 | there was a limit on the number of pflog interfaces - 16. remove that. | Henning Brauer |
2012-02-03 | The kernel did not compile without INET6. Put some #ifdefs into | Alexander Bluhm |
2012-01-27 | If some length checks in pflog_bpfcopy() failed, the function | Alexander Bluhm |
2012-01-15 | Calling pf_normalize_ip() from pf_setup_pdesc() was bad as the | Alexander Bluhm |
2011-12-21 | don't attempt to run pf_translate on fragments: it will fail miserably. | Mike Belopuhov |
2011-10-21 | strengthen some checks to prevent m_copy* routines from operating | Mike Belopuhov |
2011-10-13 | Since the IPv6 madness is not enough introduce NAT64 -- which is actually | Claudio Jeker |
2011-09-28 | As requested by henning, move the mbuf pointer into struct pf_pdesc. | Alexander Bluhm |
2011-09-20 | Put kif and dir into pdesc an use this instead of passing the values | Alexander Bluhm |
2011-09-19 | Consolidate pf function parameters. Move off and hdrlen into pdesc | Alexander Bluhm |
2011-09-18 | Move the pdesc initialization code into pf_setup_pdesc(). Unify | Alexander Bluhm |
2011-09-18 | Move the call to pf_test_rule() for fragments that have not been | Alexander Bluhm |
2011-07-07 | Fold pf_test_fragment() into pf_test_rule(), reduce code and fixes | Ryan Thomas McBride |
2011-07-06 | cosnistently use IFQ_SET_MAXLEN, surfaced in a discussion with + ok bluhm | Henning Brauer |
2011-07-05 | Explicitly reserve space for special ICMP6 headers in pf_hdrs, like | Alexander Bluhm |
2011-06-20 | More cleanup in pf_test/pf_test6 this time mostly the fragment | Claudio Jeker |
2011-05-22 | Do not pass AF specific information to pf_test_rule() and PFLOG_PACKET() | Claudio Jeker |
2010-12-07 | remove a bunch of unused arguments | Jonathan Gray |
2010-09-21 | Don't dereference null pointers for protocols without port numbers. | Stuart Henderson |
2010-09-21 | assert copyrights / bump years | Henning Brauer |
2010-09-21 | stuff the original (before rewriting) addresses into the already existant | Henning Brauer |
2010-09-21 | pflog overhaul | Henning Brauer |
2010-01-12 | Remove bpfdetach() call right in front of the if_detach() call since | Claudio Jeker |
2007-12-20 | return with ENOTTY instead of EINVAL for unknown ioctl requests. | Brad Smith |
2007-10-18 | There is no point for IP addresses on pflog(4) | Marco Pfatschbacher |
2007-09-16 | another M_ZERO diff. | Pierre-Yves Ritschard |
2007-05-26 | one extern seems to be better than 20 for ifqmaxlen; ok krw | Jason Wright |
2007-03-19 | no longer create a pflog0 by default. | Henning Brauer |
2006-12-15 | make pflog(4) count; ok hennig@ deraadt@ | Otto Moerbeek |