summaryrefslogtreecommitdiff
path: root/sys/net/if_pfsync.c
AgeCommit message (Expand)Author
2015-02-10include the "set prio" values.Henning Brauer
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-17Remove the "multicast_" prefix from the fields a multicast-only struct.Martin Pieuchot
2014-12-17Use an interface index instead of a pointer for multicast options.Martin Pieuchot
2014-11-23length argument for some free() calls; ok dougTheo de Raadt
2014-11-06Remove unneeded netinet6/ip6_divert.h include.Lawrence Teo
2014-10-17reset all the pfsync packet state before calling ip_output inDavid Gwynne
2014-09-08remove uneeded route.h includesJonathan Gray
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
2014-04-21ip_output() using varargs always struck me as bizarre, esp since it's onlyHenning Brauer
2014-04-14"struct pkthdr" holds a routing table ID, not a routing domain one.Martin Pieuchot
2013-11-18Fix potential null dereference.Charles Longeau
2013-11-15inherit the rdomain sc to pkthdrHenning Brauer
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-08-07states learnt via pfsync from a peer with the same ruleset checksum wereDavid Gwynne
2013-06-20Revert previous and unbreak asr, the new include should be protected.Martin Pieuchot
2013-06-20Allocate the various hook head descriptors as part of the ifnetMartin Pieuchot
2013-05-10Since pf_state_key_attach can decide to free the provided stateMike Belopuhov
2013-03-28no need for a lot of code to include proc.hTed Unangst
2013-03-26Remove various read-only *maxlen variables and use IFQ_MAXLEN directly.Martin Pieuchot
2012-10-30Use time_uptime for expiration values as time_second can be skewed atFlorian Obser
2012-10-09simplify hook_disestablish() handling by always resetting the hook whenMarkus Friedl
2012-10-08make sure we don't call hook_disestablish() twice e.g. ifconfig -syncdevMarkus Friedl
2012-09-20pfsync_cancel_full_update needs to restore carp demotions sinceMike Belopuhov
2012-09-20spltdb() was really just #define'd to be splsoftnet(); replace the formerBret Lambert
2012-09-19update the tdb replay counter endian conversion to 64 bits;Mike Belopuhov
2012-07-26rename all_state_flags to state_flags to finish the transitionMike Belopuhov
2012-06-30Fix a number of problems introduced by the link state handling commit:Mike Belopuhov
2012-06-30backout rev1.185 as it's not what i have intended to commitMike Belopuhov
2012-06-29add ESN-related bits missed in the previous commitMike Belopuhov
2012-06-28Fix a number of problems introduced by the link state handling commit:Mike Belopuhov
2012-04-11fix all the suser calls which pass an incorrect p_acflag argument;Mike Belopuhov
2012-04-07remove superfluous return, ok mikebCamiel Dobbelaar
2012-04-03Fix kernel compilation with pf but without pfsync pseudo-device byMike Belopuhov
2012-02-03The kernel did not compile without INET6. Put some #ifdefs intoAlexander Bluhm
2012-01-16do carp demotion adjustments on syncdev link state change.Mike Belopuhov
2011-12-01Make sure we only enter pf_route() when undefering in the PF_ROUTETO case.Ryan Thomas McBride
2011-11-29use a u_int64_t for the state id in pfsync_state. this makes it consistentDavid Gwynne
2011-11-27Protect more operations in the pfsync_clone_destroy to preventMike Belopuhov
2011-11-26Apply route-to to deferred packet; without this the first packet of aRyan Thomas McBride
2011-11-25use time_uptime to set state creation values as time_second can beDavid Gwynne
2011-11-16Improve flag setting ioctl so that bulk updates are requestedMike Belopuhov
2011-11-09State expire time is a baseline time ("last active") for expiryCamiel Dobbelaar
2011-11-04Select a correct protocol for a stack side state key when importingMike Belopuhov
2011-10-31Don't forget to cancel bulk update failure timeout when destroying anMike Belopuhov
2011-10-30Allow setting big MTU values on the pfsync interface but not largerMike Belopuhov
2011-10-20remove a bogus chunk accidentally introduced by mcbride in rev1.141;Mike Belopuhov
2011-10-13Since the IPv6 madness is not enough introduce NAT64 -- which is actuallyClaudio Jeker