summaryrefslogtreecommitdiff
path: root/sys/net/if_pfsync.c
AgeCommit message (Expand)Author
2016-08-23pool_setiplDavid Gwynne
2016-04-29Make if_output() return EAFNOSUPPORT instead of just dropping packetsKenneth R Westerback
2016-03-29- packet must keep reference to statekeyAlexandr Nedvedicky
2016-01-31- m_pkthdr.pf.statekey changes are not ready for 5.9, I must back them outAlexandr Nedvedicky
2016-01-27white space tweaks. no functional change.David Gwynne
2016-01-26- state keys imported by if_pfsync trip refcnt != ~0 AssertAlexandr Nedvedicky
2015-12-05remove old lint annotationsTed Unangst
2015-12-03Rename pf_unlink_state() to pf_remove_state() so the name does notAlexander Bluhm
2015-11-10flush the send queue in start routines with IFQ_PURGE.David Gwynne
2015-10-30Clean up handling of 'clear states' pfsync packets.Mike Belopuhov
2015-09-11Kill yet another argument to functions in IPv6. This time ip6_output'sClaudio Jeker
2015-06-16Store a unique ID, an interface index, rather than a pointer to theMartin Pieuchot
2015-03-14Remove some includes include-what-you-use claims don'tJonathan Gray
2015-02-10include the "set prio" values.Henning Brauer
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-17Remove the "multicast_" prefix from the fields a multicast-only struct.Martin Pieuchot
2014-12-17Use an interface index instead of a pointer for multicast options.Martin Pieuchot
2014-11-23length argument for some free() calls; ok dougTheo de Raadt
2014-11-06Remove unneeded netinet6/ip6_divert.h include.Lawrence Teo
2014-10-17reset all the pfsync packet state before calling ip_output inDavid Gwynne
2014-09-08remove uneeded route.h includesJonathan Gray
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
2014-04-21ip_output() using varargs always struck me as bizarre, esp since it's onlyHenning Brauer
2014-04-14"struct pkthdr" holds a routing table ID, not a routing domain one.Martin Pieuchot
2013-11-18Fix potential null dereference.Charles Longeau
2013-11-15inherit the rdomain sc to pkthdrHenning Brauer
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-08-07states learnt via pfsync from a peer with the same ruleset checksum wereDavid Gwynne
2013-06-20Revert previous and unbreak asr, the new include should be protected.Martin Pieuchot
2013-06-20Allocate the various hook head descriptors as part of the ifnetMartin Pieuchot
2013-05-10Since pf_state_key_attach can decide to free the provided stateMike Belopuhov
2013-03-28no need for a lot of code to include proc.hTed Unangst
2013-03-26Remove various read-only *maxlen variables and use IFQ_MAXLEN directly.Martin Pieuchot
2012-10-30Use time_uptime for expiration values as time_second can be skewed atFlorian Obser
2012-10-09simplify hook_disestablish() handling by always resetting the hook whenMarkus Friedl
2012-10-08make sure we don't call hook_disestablish() twice e.g. ifconfig -syncdevMarkus Friedl
2012-09-20pfsync_cancel_full_update needs to restore carp demotions sinceMike Belopuhov
2012-09-20spltdb() was really just #define'd to be splsoftnet(); replace the formerBret Lambert
2012-09-19update the tdb replay counter endian conversion to 64 bits;Mike Belopuhov
2012-07-26rename all_state_flags to state_flags to finish the transitionMike Belopuhov
2012-06-30Fix a number of problems introduced by the link state handling commit:Mike Belopuhov
2012-06-30backout rev1.185 as it's not what i have intended to commitMike Belopuhov
2012-06-29add ESN-related bits missed in the previous commitMike Belopuhov
2012-06-28Fix a number of problems introduced by the link state handling commit:Mike Belopuhov
2012-04-11fix all the suser calls which pass an incorrect p_acflag argument;Mike Belopuhov
2012-04-07remove superfluous return, ok mikebCamiel Dobbelaar
2012-04-03Fix kernel compilation with pf but without pfsync pseudo-device byMike Belopuhov
2012-02-03The kernel did not compile without INET6. Put some #ifdefs intoAlexander Bluhm