Age | Commit message (Expand) | Author |
2017-12-04 | RFC 4861 requires that all neighbor discovery packets have 255 in | Alexander Bluhm |
2017-12-01 | Simplify the reverse PCB lookup logic. The PF_TAG_TRANSLATE_LOCALHOST | Alexander Bluhm |
2017-11-28 | The divert structure was using the port number to indicate that | Alexander Bluhm |
2017-11-22 | It does not make sense to call pcb lookup from pf during packet | Alexander Bluhm |
2017-11-20 | Sprinkle some NET_ASSERT_LOCKED(), const and co to prepare running | Martin Pieuchot |
2017-11-13 | add a generic packet rate matching filter. allows things like | Henning Brauer |
2017-11-13 | remove the ability for pf_ouraddr to say that a packet is forwarded. | David Gwynne |
2017-10-31 | - add one more softnet taskq | Alexandr Nedvedicky |
2017-08-14 | move pf_get_wscale + pf_get_mss prototypes to pfvar.h (diff shrinkage) | Henning Brauer |
2017-08-14 | add half-open tcp states accounting, road paved by sashan | Henning Brauer |
2017-08-13 | to change a state's state (that term is overloaded in pf, protocol state | Henning Brauer |
2017-08-11 | Remove NET_LOCK()'s argument. | Martin Pieuchot |
2017-08-06 | Reduce contention on the NET_LOCK() by moving the logic of the pfpurge | Martin Pieuchot |
2017-07-04 | Revert previous, it exposed two edge cases still requiring the | Martin Pieuchot |
2017-07-03 | Drop the KERNEL_LOCK() in pf_purge_thread(). | Martin Pieuchot |
2017-06-21 | Fix kernel diagnostic assertion "(sk->inp == NULL) || (sk->inp->inp_pf_sk | Alexander Bluhm |
2017-06-05 | - let's add PF_LOCK() | Alexandr Nedvedicky |
2017-05-31 | Block IPv6 packets in pf(4) that have hop-by-hop options header or | Alexander Bluhm |
2017-05-30 | teach pf_build_tcp() about SACK, ok & with sashan | Henning Brauer |
2017-05-29 | export_pflow() is no longer grabbing the NET_LOCK(), so no need to | Martin Pieuchot |
2017-05-28 | Limit the nested header chain for IPv6 extensions headers and for | Alexander Bluhm |
2017-05-28 | Fix bad white spaces, wrap long lines, kill some empty lines. | Alexander Bluhm |
2017-05-28 | Pf was handling IPv4 and IPv6 differently regarding AH extension | Alexander Bluhm |
2017-05-23 | Move the common length check in pf_pull_hdr() after the address | Alexander Bluhm |
2017-05-20 | - fixes regression found by pf_forward test | Alexandr Nedvedicky |
2017-05-19 | Change PF behavior to allow MLD Listener Report packets to be sent | Rafael Zalamena |
2017-05-16 | - percpu anchor stacks | Alexandr Nedvedicky |
2017-05-16 | Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED(). | Martin Pieuchot |
2017-05-15 | Enable the NET_LOCK(), take 3. | Martin Pieuchot |
2017-05-05 | Put back the call to pf_remove_src_node lost in the netlock backout | Mike Belopuhov |
2017-05-04 | Introduce sstosa() for converting sockaddr_storage with a type safe | Alexander Bluhm |
2017-03-17 | Revert the NET_LOCK() and bring back pf's contention lock for release. | Martin Pieuchot |
2017-03-09 | Prevent integer overflow in PF when calculating the adaptive timeout. | Claudio Jeker |
2017-03-07 | Don't overwrite the flow ID once it's set | Mike Belopuhov |
2017-03-07 | Enforce that tcbtable and udbtable must be accessed with the NET_LOCK(). | Martin Pieuchot |
2017-02-09 | percpu counters for TCP stats | Jeremie Courreges-Anglas |
2017-02-05 | Use percpu counters for ip6stat | Jeremie Courreges-Anglas |
2017-01-30 | whitespace, from bluhm@ | Sebastian Benoit |
2017-01-30 | removes the pf_consistency_lock and protects the users with | Sebastian Benoit |
2017-01-25 | Enable the NET_LOCK(), take 2. | Martin Pieuchot |
2017-01-09 | pf_purge_thread() needs the NET_LOCK(). | Martin Pieuchot |
2016-12-29 | In pf_refragment6() use the valid route from pf_route6() instead | Alexander Bluhm |
2016-12-28 | In pf_find_state() pkt_sk was set to NULL if pkt_sk->reverse was | Alexander Bluhm |
2016-12-28 | Better check for a valid route than for an existing route in pf | Alexander Bluhm |
2016-12-23 | Replace function names with __func__ in debug prints to make grep | Alexander Bluhm |
2016-12-23 | Fix white spaces. No binary change. | Alexander Bluhm |
2016-12-06 | Use the sizeof udphdr not the sizeof a pointer to it in the af-to | Jonathan Gray |
2016-11-28 | Path MTU discovery and traceroute did not always work with pf af-to. | Alexander Bluhm |
2016-11-23 | Explicitly forbid to combine af-to with route-to in pfctl. The | Alexander Bluhm |
2016-11-22 | Fold union pf_headers buffer into struct pf_pdesc (enabled by pfvar_priv.h). | Richard Procter |