summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-11Do not use "struct route" when it is not necessary.Martin Pieuchot
2014-11-20Rework the handling of interfaces and IPv6 addresses for local delivery.Martin Pieuchot
2014-11-18move arc4random prototype to systm.h. more appropriate for most codeTed Unangst
2014-11-16remove now unnecessary casts from hash update calls.Ted Unangst
2014-11-16convert to use sha512 for pf iss. ok deraadt dlgTed Unangst
2014-11-16mix the rdomain (rtable?) into the hash for tcp iss generation.David Gwynne
2014-11-11Ask networking stack to recalculate the ICMPv6 checksum in pf_route6Mike Belopuhov
2014-11-01Rename rtalloc1() into rtalloc(9) and convert its flags to only enableMartin Pieuchot
2014-10-14Use rtfree() instead of RTFREE(), NULLify some free'd route pointers andMartin Pieuchot
2014-10-08Use rtalloc1() instead of rtalloc_noclone().Martin Pieuchot
2014-09-27Kill rtalloc() and update rtalloc1() and rtalloc_mpath() to no longerMartin Pieuchot
2014-08-12Finally implement what's stated in the man page regarding parentMike Belopuhov
2014-08-12Make sure that pf_step_into_anchor always saves a pointer to the ruleMike Belopuhov
2014-08-12Apart from some minor code reshuffling the big change is that weMike Belopuhov
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-13Put back a m_copyback() that got lost in rev 1.837 of pf.c. ThisAlexander Bluhm
2014-07-10Simplify the way divert(4) sends packets to userspace: Instead ofLawrence Teo
2014-07-02u_int32_t's can't go negativeMike Belopuhov
2014-06-25pf_translate doesn't use the mbuf argument anymore.Mike Belopuhov
2014-05-20Assign the queue ID to the correct packet header when sending ICMP messages.Martin Pieuchot
2014-04-24ewps... repair qid assignmentHenning Brauer
2014-04-22Remove some altq tentacles.Martin Pieuchot
2014-04-21ip_output() using varargs always struck me as bizarre, esp since it's onlyHenning Brauer
2014-04-21we'll do fine without casting NULL to struct foo * / void *Henning Brauer
2014-04-19shrink pf by 445 lines.Henning Brauer
2014-04-18pf_send_tcp: ask the stack to do the cksum instead of doing it manuallyHenning Brauer
2014-04-14"struct pkthdr" holds a routing table ID, not a routing domain one.Martin Pieuchot
2014-03-10When translating packets from one address family to another, pass theJeremie Courreges-Anglas
2014-03-10When setting up the packet description, also retrieve the Traffic ClassJeremie Courreges-Anglas
2014-01-25Simplify and shorten the way ICMP checksums are verified inLawrence Teo
2014-01-24in pf_check_proto_cksum, updtae the swcksum counters if we cksummed inHenning Brauer
2014-01-23since the cksum rewrite the counters for hardware checksummed packetsHenning Brauer
2014-01-227x bcopy -> memcpy, impossibility of overlaps verified. ok benno dlgHenning Brauer
2014-01-20support negated matches on the rcvif, ok dlg bennoHenning Brauer
2014-01-03Switch frequently allocated structs from malloc(M_DEVBUF) to separate pools.pelikan
2013-11-18The prio value of a pf match rule was overridden by a later passAlexander Bluhm
2013-11-16Remove dead assignments and now unused variables.Charles Longeau
2013-11-15Revert 1.858, as it causes panics of inp:Christiano F. Haesbaert
2013-11-15After discussion with deraadt@ and Fernando Gont, it seems that theAlexander Bluhm
2013-11-15Forget socket linking on pf_pkt_addr_changed(), this fixes among otherChristiano F. Haesbaert
2013-10-30Allow to compile a kernel without INET6.Martin Pieuchot
2013-10-30translate icmpv6 echo id's the same way we do for icmpv4; ok henningMike Belopuhov
2013-10-28previous udp port number rewrite fix turned out to be a work aroundMike Belopuhov
2013-10-24Move obvious kernel prototypes (and structure's with kernel pointers,Theo de Raadt
2013-10-23translate port numbers for inner udp packets when they're returnedMike Belopuhov
2013-10-23Remove the number of in_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-23overwrite icmp packet type-specific nextptr field only when we'reMike Belopuhov
2013-10-22In pf_test_state_icmp(), actually copy pd->hdr.any back into the mbuf asLawrence Teo
2013-10-21pf_translate: missing conditonal pf_check_proto_cksum calls beforeHenning Brauer