summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2017-05-29export_pflow() is no longer grabbing the NET_LOCK(), so no need toMartin Pieuchot
2017-05-28Limit the nested header chain for IPv6 extensions headers and forAlexander Bluhm
2017-05-28Fix bad white spaces, wrap long lines, kill some empty lines.Alexander Bluhm
2017-05-28Pf was handling IPv4 and IPv6 differently regarding AH extensionAlexander Bluhm
2017-05-23Move the common length check in pf_pull_hdr() after the addressAlexander Bluhm
2017-05-20- fixes regression found by pf_forward testAlexandr Nedvedicky
2017-05-19Change PF behavior to allow MLD Listener Report packets to be sentRafael Zalamena
2017-05-16- percpu anchor stacksAlexandr Nedvedicky
2017-05-16Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED().Martin Pieuchot
2017-05-15Enable the NET_LOCK(), take 3.Martin Pieuchot
2017-05-05Put back the call to pf_remove_src_node lost in the netlock backoutMike Belopuhov
2017-05-04Introduce sstosa() for converting sockaddr_storage with a type safeAlexander Bluhm
2017-03-17Revert the NET_LOCK() and bring back pf's contention lock for release.Martin Pieuchot
2017-03-09Prevent integer overflow in PF when calculating the adaptive timeout.Claudio Jeker
2017-03-07Don't overwrite the flow ID once it's setMike Belopuhov
2017-03-07Enforce that tcbtable and udbtable must be accessed with the NET_LOCK().Martin Pieuchot
2017-02-09percpu counters for TCP statsJeremie Courreges-Anglas
2017-02-05Use percpu counters for ip6statJeremie Courreges-Anglas
2017-01-30whitespace, from bluhm@Sebastian Benoit
2017-01-30removes the pf_consistency_lock and protects the users withSebastian Benoit
2017-01-25Enable the NET_LOCK(), take 2.Martin Pieuchot
2017-01-09pf_purge_thread() needs the NET_LOCK().Martin Pieuchot
2016-12-29In pf_refragment6() use the valid route from pf_route6() insteadAlexander Bluhm
2016-12-28In pf_find_state() pkt_sk was set to NULL if pkt_sk->reverse wasAlexander Bluhm
2016-12-28Better check for a valid route than for an existing route in pfAlexander Bluhm
2016-12-23Replace function names with __func__ in debug prints to make grepAlexander Bluhm
2016-12-23Fix white spaces. No binary change.Alexander Bluhm
2016-12-06Use the sizeof udphdr not the sizeof a pointer to it in the af-toJonathan Gray
2016-11-28Path MTU discovery and traceroute did not always work with pf af-to.Alexander Bluhm
2016-11-23Explicitly forbid to combine af-to with route-to in pfctl. TheAlexander Bluhm
2016-11-22Fold union pf_headers buffer into struct pf_pdesc (enabled by pfvar_priv.h).Richard Procter
2016-11-21In pf_route() and pf_route6() the !r->rt case was only used byAlexander Bluhm
2016-11-17The pf fragment reassembly code accepted IPv6 hop-by-hop headersAlexander Bluhm
2016-11-14Instead of passing an extra mbuf pointer to pf_route(), it shouldAlexander Bluhm
2016-11-14turn ipstat into a set of percpu counters.David Gwynne
2016-10-28- once rule should not attempt to remove its parent rule.Alexandr Nedvedicky
2016-10-27Pass a struct pf_pdesc to pf_route() like it is done in the otherAlexander Bluhm
2016-10-26Put union pf_headers and struct pf_pdesc into separate header fileAlexander Bluhm
2016-10-20- PF should send a challenge ACK as response to SYN, which matches existingAlexandr Nedvedicky
2016-10-18split pf_send_tcp() into the part that builds the mbuf and the actualHenning Brauer
2016-10-18The variable dlen is always positive and d may be negative. SoAlexander Bluhm
2016-10-18The checksum of a ICMP "need to frag" packet for TCP was wrong whenAlexander Bluhm
2016-10-09formatting nit (a tab got lost somewhen)Henning Brauer
2016-10-06Remove redundant comments that say a function must be called atAlexander Bluhm
2016-09-27roll back turning RB into RBT until i get better at this process.David Gwynne
2016-09-27move pf from the RB macros to the RBT functions.David Gwynne
2016-09-22Fix indentation. No binary change.Jonathan Gray
2016-09-07Rename rtable_mpath_next() into rtable_iterate() and make it do a properMartin Pieuchot
2016-09-03Let purge thread to remove once rules, not packets.Alexandr Nedvedicky
2016-08-20Push 'field changed' guards into 'change field' functions;Richard Procter
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-20 01:10:36 +0000