Age | Commit message (Expand) | Author |
2005-11-04 | crank pf_state and pf_src_node byte and packet counters to u_in64_t, since | Ryan Thomas McBride |
2005-11-01 | Always sure that we have memory for the 'dst' scrub information, which may | Christopher Pascoe |
2005-10-28 | s/rmatch/chksum_flag/ to clarify what's going on. Pointed out by dhartmei@ | Ryan Thomas McBride |
2005-10-27 | Basic support for attaching states from pfsync to the correct rules. | Ryan Thomas McBride |
2005-09-28 | Improve the safety of pf IOCTLs, taking into account that some paths can sleep. | Christopher Pascoe |
2005-08-18 | Rearrange pf_state and pfi_kif so that the parts of the structure needed | Christopher Pascoe |
2005-08-16 | Synchronise timestamp modulation and scrubbing min ttl information. | Christopher Pascoe |
2005-08-11 | Remove bogus debug printf(). | Ryan Thomas McBride |
2005-08-03 | Eliminate another case where pool routines are called without process context. | Christopher Pascoe |
2005-08-01 | Minor whitespace cleanup. | Christopher Pascoe |
2005-07-12 | default mtu to no more than ETHERMTU to avoid fragmentation; henning@ ok | Michael Shalayeff |
2005-05-28 | Add SA replay counter synchronization to pfsync(4). Required for IPsec | Hakan Olsson |
2005-05-21 | clean up and rework the interface absraction code big time, rip out multiple | Henning Brauer |
2005-02-20 | Avoid use after free when purging states. | Ryan Thomas McBride |
2005-02-15 | Fix scoping error which could cause some states with an empty ifname to be | Aaron Campbell |
2005-01-20 | sc->sc_sync_ifp = NULL if we fail to attach the multicast group. | Ryan Thomas McBride |
2005-01-20 | Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreq | Ryan Thomas McBride |
2004-12-16 | Clean up handling of sync_flags. | Ryan Thomas McBride |
2004-12-13 | Set creation timestamps correctly on states learnt by pfsync that are | Christopher Pascoe |
2004-12-06 | At PFSYNC_ACT_CLR: | Marco Pfatschbacher |
2004-11-16 | Fix for PR3983 | Ryan Thomas McBride |
2004-09-17 | Clean up reference counting wrt state creation and destruction. Fixes | Ryan Thomas McBride |
2004-08-30 | Increment the states reference counter in the rule attached to the state | Ryan Thomas McBride |
2004-08-03 | Allow a unicast ip address to be specified for pfsync to send it's state | Ryan Thomas McBride |
2004-06-21 | First step towards more sane time handling in the kernel -- this changes | Thorsten Lockert |
2004-06-04 | Remove the multicast address when we unconfigure the syncif. | Ryan Thomas McBride |
2004-05-17 | fix uninitialized var; found by millert@ | Michael Shalayeff |
2004-04-30 | Unbreak building pfsync without carp. Found by marc@ | Ryan Thomas McBride |
2004-04-28 | Make carp(4) aware of its physical interface: | Ryan Thomas McBride |
2004-04-28 | point out that pfsync_send_bus and pfsync_sendout must be called in splnet() | Philipp Buehler |
2004-04-25 | get rid of a complete state tree walk at state expire while in splnet() | Philipp Buehler |
2004-04-25 | dont splx across functions | Philipp Buehler |
2004-04-05 | Prevent stale states (states older than the local version) from overwriting | Ryan Thomas McBride |
2004-03-28 | Check variables in incoming packets which can cause problems if they're set | Ryan Thomas McBride |
2004-03-23 | Hold off for 1 second before beginning bulk transfer. Avoids looping | Ryan Thomas McBride |
2004-03-22 | Support for best effort bulk transfers of states when pfsync syncif is | Ryan Thomas McBride |
2004-02-20 | Make pfsync deal with clearing states bound to a group or interface (eg | Ryan Thomas McBride |
2004-02-10 | Make pfsync work correctly with IP options on 64-bit alignment | Ryan Thomas McBride |
2004-02-08 | Fix kernel panic which occurs under very high load: | Ryan Thomas McBride |
2004-02-07 | Use the offset provided to us by m_pulldown(), rather than using size of | Ryan Thomas McBride |
2004-01-22 | - Include the value of pf_state.timeout in pfsync messages | Ryan Thomas McBride |
2004-01-20 | the pfsync interface does not have a baudrate, so don't claim 100 MBit/s | Henning Brauer |
2004-01-20 | Ignore pfsync packets if pf is not running. | Ryan Thomas McBride |
2004-01-19 | Update comment; handling PFSYNC_ACT_UPD in pfsync_input() is no longer | Ryan Thomas McBride |
2004-01-19 | Clean up creation and expiry timestamp calculations. | Ryan Thomas McBride |
2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
2003-12-28 | Add a new PFSYNC_ACT_UREQ message type. | Ryan Thomas McBride |
2003-12-18 | resolve compiler warnings, from Pyun YongHyeon, ok cedric@, mcbride@ | Daniel Hartmeier |
2003-12-16 | Don't do all the heavy pfsync processing if there are no bpf listeners | Ryan Thomas McBride |
2003-12-15 | sc_sp is a #define on some architectures, use a different name | Theo de Raadt |