Age | Commit message (Expand) | Author |
2013-11-15 | inherit the rdomain sc to pkthdr | Henning Brauer |
2013-10-17 | The header file netinet/in_var.h included netinet6/in6_var.h. This | Alexander Bluhm |
2013-08-07 | states learnt via pfsync from a peer with the same ruleset checksum were | David Gwynne |
2013-06-20 | Revert previous and unbreak asr, the new include should be protected. | Martin Pieuchot |
2013-06-20 | Allocate the various hook head descriptors as part of the ifnet | Martin Pieuchot |
2013-05-10 | Since pf_state_key_attach can decide to free the provided state | Mike Belopuhov |
2013-03-28 | no need for a lot of code to include proc.h | Ted Unangst |
2013-03-26 | Remove various read-only *maxlen variables and use IFQ_MAXLEN directly. | Martin Pieuchot |
2012-10-30 | Use time_uptime for expiration values as time_second can be skewed at | Florian Obser |
2012-10-09 | simplify hook_disestablish() handling by always resetting the hook when | Markus Friedl |
2012-10-08 | make sure we don't call hook_disestablish() twice e.g. ifconfig -syncdev | Markus Friedl |
2012-09-20 | pfsync_cancel_full_update needs to restore carp demotions since | Mike Belopuhov |
2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former | Bret Lambert |
2012-09-19 | update the tdb replay counter endian conversion to 64 bits; | Mike Belopuhov |
2012-07-26 | rename all_state_flags to state_flags to finish the transition | Mike Belopuhov |
2012-06-30 | Fix a number of problems introduced by the link state handling commit: | Mike Belopuhov |
2012-06-30 | backout rev1.185 as it's not what i have intended to commit | Mike Belopuhov |
2012-06-29 | add ESN-related bits missed in the previous commit | Mike Belopuhov |
2012-06-28 | Fix a number of problems introduced by the link state handling commit: | Mike Belopuhov |
2012-04-11 | fix all the suser calls which pass an incorrect p_acflag argument; | Mike Belopuhov |
2012-04-07 | remove superfluous return, ok mikeb | Camiel Dobbelaar |
2012-04-03 | Fix kernel compilation with pf but without pfsync pseudo-device by | Mike Belopuhov |
2012-02-03 | The kernel did not compile without INET6. Put some #ifdefs into | Alexander Bluhm |
2012-01-16 | do carp demotion adjustments on syncdev link state change. | Mike Belopuhov |
2011-12-01 | Make sure we only enter pf_route() when undefering in the PF_ROUTETO case. | Ryan Thomas McBride |
2011-11-29 | use a u_int64_t for the state id in pfsync_state. this makes it consistent | David Gwynne |
2011-11-27 | Protect more operations in the pfsync_clone_destroy to prevent | Mike Belopuhov |
2011-11-26 | Apply route-to to deferred packet; without this the first packet of a | Ryan Thomas McBride |
2011-11-25 | use time_uptime to set state creation values as time_second can be | David Gwynne |
2011-11-16 | Improve flag setting ioctl so that bulk updates are requested | Mike Belopuhov |
2011-11-09 | State expire time is a baseline time ("last active") for expiry | Camiel Dobbelaar |
2011-11-04 | Select a correct protocol for a stack side state key when importing | Mike Belopuhov |
2011-10-31 | Don't forget to cancel bulk update failure timeout when destroying an | Mike Belopuhov |
2011-10-30 | Allow setting big MTU values on the pfsync interface but not larger | Mike Belopuhov |
2011-10-20 | remove a bogus chunk accidentally introduced by mcbride in rev1.141; | Mike Belopuhov |
2011-10-13 | Since the IPv6 madness is not enough introduce NAT64 -- which is actually | Claudio Jeker |
2011-08-03 | someone (*cough*henning*cough*) made pf_state.state_flags a u_int16_t | David Gwynne |
2011-08-02 | Replace one byte of padding with sa_family_t af in pfsync_state_key; | Ryan Thomas McBride |
2011-07-06 | cosnistently use IFQ_SET_MAXLEN, surfaced in a discussion with + ok bluhm | Henning Brauer |
2011-07-04 | use mtod. | David Hill |
2011-05-10 | when undeferring a packet, try to timeout_del first to check if you | David Gwynne |
2011-04-02 | dont let pfsync defer packets for states with NOSYNC set. | David Gwynne |
2011-03-02 | when sending deferred packets use ip6_output for v6 frames instead of | David Gwynne |
2011-01-11 | delay deferred packets for a maximum of 20ms instead of 100 ticks (which | David Gwynne |
2010-11-29 | use m_pulldown to get a contig view of the pfsync_header instead of | David Gwynne |
2010-11-29 | get rid of struct pfsync_pkt. it was used to store data on the stack to | David Gwynne |
2010-11-28 | there's no need to take splsoftnet in the input packet action handlers | David Gwynne |
2010-09-27 | must have either PR_WAITOK or PR_NOWAIT set. | David Gwynne |
2010-09-08 | creating a pfsync interface is always done from process context, so | Bret Lambert |
2010-07-28 | pfsync_bulk_fail was mucking around with pfsync_softc and sending packets | David Gwynne |