src - OpenBSD base system

Age	Commit message (Expand)	Author
2012-01-16	do carp demotion adjustments on syncdev link state change.	Mike Belopuhov
2011-12-01	Make sure we only enter pf_route() when undefering in the PF_ROUTETO case.	Ryan Thomas McBride
2011-11-29	use a u_int64_t for the state id in pfsync_state. this makes it consistent	David Gwynne
2011-11-27	Protect more operations in the pfsync_clone_destroy to prevent	Mike Belopuhov
2011-11-26	Apply route-to to deferred packet; without this the first packet of a	Ryan Thomas McBride
2011-11-25	use time_uptime to set state creation values as time_second can be	David Gwynne
2011-11-16	Improve flag setting ioctl so that bulk updates are requested	Mike Belopuhov
2011-11-09	State expire time is a baseline time ("last active") for expiry	Camiel Dobbelaar
2011-11-04	Select a correct protocol for a stack side state key when importing	Mike Belopuhov
2011-10-31	Don't forget to cancel bulk update failure timeout when destroying an	Mike Belopuhov
2011-10-30	Allow setting big MTU values on the pfsync interface but not larger	Mike Belopuhov
2011-10-20	remove a bogus chunk accidentally introduced by mcbride in rev1.141;	Mike Belopuhov
2011-10-13	Since the IPv6 madness is not enough introduce NAT64 -- which is actually	Claudio Jeker
2011-08-03	someone (coughhenningcough) made pf_state.state_flags a u_int16_t	David Gwynne
2011-08-02	Replace one byte of padding with sa_family_t af in pfsync_state_key;	Ryan Thomas McBride
2011-07-06	cosnistently use IFQ_SET_MAXLEN, surfaced in a discussion with + ok bluhm	Henning Brauer
2011-07-04	use mtod.	David Hill
2011-05-10	when undeferring a packet, try to timeout_del first to check if you	David Gwynne
2011-04-02	dont let pfsync defer packets for states with NOSYNC set.	David Gwynne
2011-03-02	when sending deferred packets use ip6_output for v6 frames instead of	David Gwynne
2011-01-11	delay deferred packets for a maximum of 20ms instead of 100 ticks (which	David Gwynne
2010-11-29	use m_pulldown to get a contig view of the pfsync_header instead of	David Gwynne
2010-11-29	get rid of struct pfsync_pkt. it was used to store data on the stack to	David Gwynne
2010-11-28	there's no need to take splsoftnet in the input packet action handlers	David Gwynne
2010-09-27	must have either PR_WAITOK or PR_NOWAIT set.	David Gwynne
2010-09-08	creating a pfsync interface is always done from process context, so	Bret Lambert
2010-07-28	pfsync_bulk_fail was mucking around with pfsync_softc and sending packets	David Gwynne
2010-07-25	Add missing braces so a loop will function as intended.	Jonathan Gray
2010-07-09	Add support for using IPsec in multiple rdomains.	Reyk Floeter
2010-07-09	instead of saying we're using the all the states in the table when	David Gwynne
2010-07-09	-#if 1 \|\| defined(PFSYNC_DEBUG)	David Gwynne
2010-07-09	the current code doesnt detect when its filled a bulk packet so it	David Gwynne
2010-07-09	sending of bulk updates has been very broken since r1.124.	David Gwynne
2010-05-24	remove bpfdetach() here, because it is called correctly in if_detach()	David Gwynne
2010-05-12	bzero() the full compressed update struct before setting the values.	Claudio Jeker
2010-04-25	Properly adjust group demotion counters when groups are added or	Marco Pfatschbacher
2010-03-23	Fix a crash in pfsync when running IPSEC.	Pierre-Yves Ritschard
2010-03-01	shuffle slightly and add more splassert.	David Gwynne
2010-02-17	dont defer broadcast or multicast packets.	David Gwynne
2010-01-18	Convert pf debug logging to using log()/addlog(), a single standardised	Ryan Thomas McBride
2010-01-12	factor m_pulldown out of the message handlers up into pfsync_input now	David Gwynne
2010-01-12	check the new pfsync_subheader len field on input.	David Gwynne
2010-01-12	Remove bpfdetach() call right in front of the if_detach() call since	Claudio Jeker
2010-01-11	remove some debug code that snuck in somehow.	David Gwynne
2010-01-10	replace a pad in the pfsync subheader with a length field. it stores the	David Gwynne
2009-12-14	fix sticky-address - by pretty much re-implementing it. still following	Henning Brauer
2009-12-03	fix order dependency of pfsync interface setup, with claudio;	Otto Moerbeek
2009-11-23	remove the nat_rule pointer on pf_state and pf_pdesc, obsolete after	Henning Brauer
2009-11-22	cleanup after the NAT changes. we used to have multiple rulesets (scrub,	Henning Brauer
2009-11-12	be paranoid in case the action array changes size (again, grr)	Theo de Raadt