Age | Commit message (Expand) | Author |
2005-05-28 | Add SA replay counter synchronization to pfsync(4). Required for IPsec | Hakan Olsson |
2005-05-21 | clean up and rework the interface absraction code big time, rip out multiple | Henning Brauer |
2005-02-20 | Avoid use after free when purging states. | Ryan Thomas McBride |
2005-02-15 | Fix scoping error which could cause some states with an empty ifname to be | Aaron Campbell |
2005-01-20 | sc->sc_sync_ifp = NULL if we fail to attach the multicast group. | Ryan Thomas McBride |
2005-01-20 | Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreq | Ryan Thomas McBride |
2004-12-16 | Clean up handling of sync_flags. | Ryan Thomas McBride |
2004-12-13 | Set creation timestamps correctly on states learnt by pfsync that are | Christopher Pascoe |
2004-12-06 | At PFSYNC_ACT_CLR: | Marco Pfatschbacher |
2004-11-16 | Fix for PR3983 | Ryan Thomas McBride |
2004-09-17 | Clean up reference counting wrt state creation and destruction. Fixes | Ryan Thomas McBride |
2004-08-30 | Increment the states reference counter in the rule attached to the state | Ryan Thomas McBride |
2004-08-03 | Allow a unicast ip address to be specified for pfsync to send it's state | Ryan Thomas McBride |
2004-06-21 | First step towards more sane time handling in the kernel -- this changes | Thorsten Lockert |
2004-06-04 | Remove the multicast address when we unconfigure the syncif. | Ryan Thomas McBride |
2004-05-17 | fix uninitialized var; found by millert@ | Michael Shalayeff |
2004-04-30 | Unbreak building pfsync without carp. Found by marc@ | Ryan Thomas McBride |
2004-04-28 | Make carp(4) aware of its physical interface: | Ryan Thomas McBride |
2004-04-28 | point out that pfsync_send_bus and pfsync_sendout must be called in splnet() | Philipp Buehler |
2004-04-25 | get rid of a complete state tree walk at state expire while in splnet() | Philipp Buehler |
2004-04-25 | dont splx across functions | Philipp Buehler |
2004-04-05 | Prevent stale states (states older than the local version) from overwriting | Ryan Thomas McBride |
2004-03-28 | Check variables in incoming packets which can cause problems if they're set | Ryan Thomas McBride |
2004-03-23 | Hold off for 1 second before beginning bulk transfer. Avoids looping | Ryan Thomas McBride |
2004-03-22 | Support for best effort bulk transfers of states when pfsync syncif is | Ryan Thomas McBride |
2004-02-20 | Make pfsync deal with clearing states bound to a group or interface (eg | Ryan Thomas McBride |
2004-02-10 | Make pfsync work correctly with IP options on 64-bit alignment | Ryan Thomas McBride |
2004-02-08 | Fix kernel panic which occurs under very high load: | Ryan Thomas McBride |
2004-02-07 | Use the offset provided to us by m_pulldown(), rather than using size of | Ryan Thomas McBride |
2004-01-22 | - Include the value of pf_state.timeout in pfsync messages | Ryan Thomas McBride |
2004-01-20 | the pfsync interface does not have a baudrate, so don't claim 100 MBit/s | Henning Brauer |
2004-01-20 | Ignore pfsync packets if pf is not running. | Ryan Thomas McBride |
2004-01-19 | Update comment; handling PFSYNC_ACT_UPD in pfsync_input() is no longer | Ryan Thomas McBride |
2004-01-19 | Clean up creation and expiry timestamp calculations. | Ryan Thomas McBride |
2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
2003-12-28 | Add a new PFSYNC_ACT_UREQ message type. | Ryan Thomas McBride |
2003-12-18 | resolve compiler warnings, from Pyun YongHyeon, ok cedric@, mcbride@ | Daniel Hartmeier |
2003-12-16 | Don't do all the heavy pfsync processing if there are no bpf listeners | Ryan Thomas McBride |
2003-12-15 | sc_sp is a #define on some architectures, use a different name | Theo de Raadt |
2003-12-15 | Fix whitespace screwups before henning wakes up. | Ryan Thomas McBride |
2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
2003-11-08 | Return proper anchor rule number in correct byte order. | Daniel Hartmeier |
2003-06-21 | count packets and bidirectionally on state entries, allowing for fine-grained | Damien Miller |
2003-05-03 | string fixes; tedu ok | Theo de Raadt |
2002-12-23 | no need to htons the port, it's already in net order, since we swapped it bac... | Michael Shalayeff |
2002-12-20 | replace struct assignment w/ bcopy w/ help and testing of millert@; henning@ ... | Michael Shalayeff |
2002-12-03 | no need to mh_align (while it's wrong), cleaner mtu setting; dhartmei@ ok | Michael Shalayeff |
2002-11-29 | expose state table changes | Michael Shalayeff |