| Age | Commit message (Expand) | Author |
|---|
| 2017-04-14 | Pass down the address family through the pr_input calls. This | Alexander Bluhm |
| 2017-04-11 | Partially revert previous mallocarray conversions that contain | David Hill |
| 2017-04-09 | Use mallocarray to allocate multicast group memberships. | David Hill |
| 2017-04-05 | When building counter memory in preparation to copy to userland, always | Theo de Raadt |
| 2017-03-11 | Add a detachhook to pfsync(4) which deals with the syncdev going away. | Stefan Sperling |
| 2017-02-20 | pfsync(4) percpu counters | Jeremie Courreges-Anglas |
| 2017-01-29 | Change the IPv4 pr_input function to the way IPv6 is implemented, | Alexander Bluhm |
| 2017-01-25 | Since raw_input() and route_input() are gone from pr_input, we can | Alexander Bluhm |
| 2017-01-23 | Flag pseudo-interfaces as such in order to call add_net_randomness() | Martin Pieuchot |
| 2017-01-20 | pfsync_update_net_tdb() is only called at IPL_SOFTNET, no need for a | Martin Pieuchot |
| 2017-01-20 | No need to handle SIOCAIFADDR in drivers, it's never passed down to | Martin Pieuchot |
| 2016-12-19 | Timer sending packets need to grab the NET_LOCK(). | Martin Pieuchot |
| 2016-11-22 | Fold union pf_headers buffer into struct pf_pdesc (enabled by pfvar_priv.h). | Richard Procter |
| 2016-11-14 | Instead of passing an extra mbuf pointer to pf_route(), it should | Alexander Bluhm |
| 2016-10-27 | Pass a struct pf_pdesc to pf_route() like it is done in the other | Alexander Bluhm |
| 2016-10-04 | Convert timeouts that need a process context to timeout_set_proc(9). | Martin Pieuchot |
| 2016-09-27 | roll back turning RB into RBT until i get better at this process. | David Gwynne |
| 2016-09-27 | move pf from the RB macros to the RBT functions. | David Gwynne |
| 2016-09-21 | Remove recursive splsoftnet() calls, from David Hill. | Martin Pieuchot |
| 2016-09-15 | all pools have their ipl set via pool_setipl, so fold it into pool_init. | David Gwynne |
| 2016-08-23 | pool_setipl | David Gwynne |
| 2016-04-29 | Make if_output() return EAFNOSUPPORT instead of just dropping packets | Kenneth R Westerback |
| 2016-03-29 | - packet must keep reference to statekey | Alexandr Nedvedicky |
| 2016-01-31 | - m_pkthdr.pf.statekey changes are not ready for 5.9, I must back them out | Alexandr Nedvedicky |
| 2016-01-27 | white space tweaks. no functional change. | David Gwynne |
| 2016-01-26 | - state keys imported by if_pfsync trip refcnt != ~0 Assert | Alexandr Nedvedicky |
| 2015-12-05 | remove old lint annotations | Ted Unangst |
| 2015-12-03 | Rename pf_unlink_state() to pf_remove_state() so the name does not | Alexander Bluhm |
| 2015-11-10 | flush the send queue in start routines with IFQ_PURGE. | David Gwynne |
| 2015-10-30 | Clean up handling of 'clear states' pfsync packets. | Mike Belopuhov |
| 2015-09-11 | Kill yet another argument to functions in IPv6. This time ip6_output's | Claudio Jeker |
| 2015-06-16 | Store a unique ID, an interface index, rather than a pointer to the | Martin Pieuchot |
| 2015-03-14 | Remove some includes include-what-you-use claims don't | Jonathan Gray |
| 2015-02-10 | include the "set prio" values. | Henning Brauer |
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
| 2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
| 2014-12-17 | Remove the "multicast_" prefix from the fields a multicast-only struct. | Martin Pieuchot |
| 2014-12-17 | Use an interface index instead of a pointer for multicast options. | Martin Pieuchot |
| 2014-11-23 | length argument for some free() calls; ok doug | Theo de Raadt |
| 2014-11-06 | Remove unneeded netinet6/ip6_divert.h include. | Lawrence Teo |
| 2014-10-17 | reset all the pfsync packet state before calling ip_output in | David Gwynne |
| 2014-09-08 | remove uneeded route.h includes | Jonathan Gray |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
| 2014-07-12 | add a size argument to free. will be used soon, but for now default to 0. | Ted Unangst |
| 2014-04-21 | ip_output() using varargs always struck me as bizarre, esp since it's only | Henning Brauer |
| 2014-04-14 | "struct pkthdr" holds a routing table ID, not a routing domain one. | Martin Pieuchot |
| 2013-11-18 | Fix potential null dereference. | Charles Longeau |
| 2013-11-15 | inherit the rdomain sc to pkthdr | Henning Brauer |
| 2013-10-17 | The header file netinet/in_var.h included netinet6/in6_var.h. This | Alexander Bluhm |
| 2013-08-07 | states learnt via pfsync from a peer with the same ruleset checksum were | David Gwynne |
