summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2016-01-07- retrying to commit earlier change, which got backed outAlexandr Nedvedicky
2015-12-23revert previous:Jasper Lievisse Adriaanse
2015-12-22- yet another tiny step towards MP PF. This time we need to make sureAlexandr Nedvedicky
2015-12-06g/c pf_change_a6(). it's exactly the same thing as pf_change_ap() with p =Henning Brauer
2015-12-05g/c unneeded af (address family) params to pf_change_ap and _icmpHenning Brauer
2015-12-05pass a pointer to pf_test()'s reason to pf_test_rule instead of using aHenning Brauer
2015-12-03ip_send()/ip6_send() allow PF to send response packet in ipsoftnet task.Alexandr Nedvedicky
2015-12-03To avoid that the stack manipules the pf statekeys directly, introduceAlexander Bluhm
2015-12-03Rename pf_unlink_state() to pf_remove_state() so the name does notAlexander Bluhm
2015-12-02- hide PF internals to pf_unlink_divert_state() from in_pcb.cAlexandr Nedvedicky
2015-12-02Kill the RT_REPORT flag to rtalloc() and stop sending RTM_MISS messagesClaudio Jeker
2015-11-21Add a comment after every #endifMartin Pieuchot
2015-11-20Make use if_get() and get rid of rt_ifp.Martin Pieuchot
2015-11-12Prefix flowid with ph_ and print it in m_print().Martin Pieuchot
2015-11-06Rename rt_mpath_next() into rtable_mpath_next() and provide anMartin Pieuchot
2015-10-27Use rt_ifidx rather than rt_ifp.Martin Pieuchot
2015-10-13- pf_insert_src_node(): global argument (arg6) is useless, functionAlexandr Nedvedicky
2015-10-08use the state id to set a flowid on an mbuf.David Gwynne
2015-09-23Always increment rt_use inside rtalloc(9) instead of doing it in someMartin Pieuchot
2015-09-13There's no point in abstracting ifp->if_output() as long as pf_test()Martin Pieuchot
2015-09-12Stop overwriting the rt_ifp pointer of RTF_LOCAL routes with lo0ifp.Martin Pieuchot
2015-09-12If M_PREPEND() fails, it frees the mbuf. In this case pf_translate_af()Alexander Bluhm
2015-09-11rtfree(9) accepts NULL now.Martin Pieuchot
2015-09-11Kill yet another argument to functions in IPv6. This time ip6_output'sClaudio Jeker
2015-09-10Kill two simple in6_ifstat_inc().Martin Pieuchot
2015-09-09add if_put after the if_get.David Gwynne
2015-09-01- route-to, dup-to, reply-to should not override the block actionAlexandr Nedvedicky
2015-08-19PF must keep IPv6 fragment size as chosen by sender also for packets,Alexandr Nedvedicky
2015-07-21- added /* FALLTHROUGH */ comments, typecasts (u_int32_t)-1, ...Alexandr Nedvedicky
2015-07-20Add some panics to default paths where code later assumes a non defaultJonathan Gray
2015-07-20INET6 is here to stay, so stop hauling around never-compiled codeRyan Thomas McBride
2015-07-19rule_item might leak, when pf_create_state() failssashan
2015-07-19unsinged variables should not be compared to be leq than 0 (unsigned a <= 0)sashan
2015-07-19unused arguments at pf_normalize_tcp_init() and pf_refragment6()sashan
2015-07-18pf_send_tcp() should also use unhandled_af()sashan
2015-07-18msg.mpisashan
2015-07-18Even if pf(4) is not compiled with SMALL_KERNEL add a define aroundMartin Pieuchot
2015-07-18INET/INET6 address family check should be unified in PFsashan
2015-07-17remove obsolete INET kernel optionTed Unangst
2015-07-16Kill IP_ROUTETOETHER.Martin Pieuchot
2015-07-16Expand ancient NTOHL/NTOHS/HTONS/HTONL macros.Martin Pieuchot
2015-07-08Linking the local socket to pf states went wrong when IPsec wasAlexander Bluhm
2015-06-30Get rid of the undocumented & temporary* m_copy() macro added forMartin Pieuchot
2015-06-22Increment rule counters only after successful state insertionMike Belopuhov
2015-06-16Store a unique ID, an interface index, rather than a pointer to theMartin Pieuchot
2015-06-07Introduce unhandled_af() for cases where code conditionally doesJonathan Gray
2015-06-05Improve error handling and recovery during state insertionMike Belopuhov
2015-05-26Don't create ICMP states on reply packets unless tracking states sloppyMike Belopuhov
2015-05-22Cut down on if statements around pf_icmp_state_lookupMike Belopuhov
2015-05-22Cleanup leftover PF_ICMP_MULTI_* code that is not needed anymore.Mike Belopuhov