summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2014-05-20Assign the queue ID to the correct packet header when sending ICMP messages.Martin Pieuchot
2014-04-24ewps... repair qid assignmentHenning Brauer
2014-04-22Remove some altq tentacles.Martin Pieuchot
2014-04-21ip_output() using varargs always struck me as bizarre, esp since it's onlyHenning Brauer
2014-04-21we'll do fine without casting NULL to struct foo * / void *Henning Brauer
2014-04-19shrink pf by 445 lines.Henning Brauer
2014-04-18pf_send_tcp: ask the stack to do the cksum instead of doing it manuallyHenning Brauer
2014-04-14"struct pkthdr" holds a routing table ID, not a routing domain one.Martin Pieuchot
2014-03-10When translating packets from one address family to another, pass theJeremie Courreges-Anglas
2014-03-10When setting up the packet description, also retrieve the Traffic ClassJeremie Courreges-Anglas
2014-01-25Simplify and shorten the way ICMP checksums are verified inLawrence Teo
2014-01-24in pf_check_proto_cksum, updtae the swcksum counters if we cksummed inHenning Brauer
2014-01-23since the cksum rewrite the counters for hardware checksummed packetsHenning Brauer
2014-01-227x bcopy -> memcpy, impossibility of overlaps verified. ok benno dlgHenning Brauer
2014-01-20support negated matches on the rcvif, ok dlg bennoHenning Brauer
2014-01-03Switch frequently allocated structs from malloc(M_DEVBUF) to separate pools.pelikan
2013-11-18The prio value of a pf match rule was overridden by a later passAlexander Bluhm
2013-11-16Remove dead assignments and now unused variables.Charles Longeau
2013-11-15Revert 1.858, as it causes panics of inp:Christiano F. Haesbaert
2013-11-15After discussion with deraadt@ and Fernando Gont, it seems that theAlexander Bluhm
2013-11-15Forget socket linking on pf_pkt_addr_changed(), this fixes among otherChristiano F. Haesbaert
2013-10-30Allow to compile a kernel without INET6.Martin Pieuchot
2013-10-30translate icmpv6 echo id's the same way we do for icmpv4; ok henningMike Belopuhov
2013-10-28previous udp port number rewrite fix turned out to be a work aroundMike Belopuhov
2013-10-24Move obvious kernel prototypes (and structure's with kernel pointers,Theo de Raadt
2013-10-23translate port numbers for inner udp packets when they're returnedMike Belopuhov
2013-10-23Remove the number of in_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-23overwrite icmp packet type-specific nextptr field only when we'reMike Belopuhov
2013-10-22In pf_test_state_icmp(), actually copy pd->hdr.any back into the mbuf asLawrence Teo
2013-10-21pf_translate: missing conditonal pf_check_proto_cksum calls beforeHenning Brauer
2013-10-20in pf_cksum, set the icmp/icmp6 cksums to 0, for comsistency with tcp/udpHenning Brauer
2013-10-20rt_mpath_next() was always called with 0 in the last argument. So drop it.Claudio Jeker
2013-10-20Put a large chunk of the IPv6 rdomain support in-tree.Peter Hessler
2013-10-19pf_cksum doesn't need to compute the pseudo hdr cksum any more.Henning Brauer
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-10-12new bandwidth shaping subsystem, kernel sideHenning Brauer
2013-10-11Prevent non-data packets from being dropped.Gerhard Roth
2013-10-09Don't leak ruleitems from match rules when hitting a per-rule max state limit.Camiel Dobbelaar
2013-09-27IPv6 atomic fragments must not go the reassembly queue, but beAlexander Bluhm
2013-08-19in pf_test_rule, when dealing with a match rule, obey the match rule's quickHenning Brauer
2013-07-05Collect and display 'match' counters for pf tables.Bret Lambert
2013-06-26put the cksum diff back, of course with the bug fixed where we couldHenning Brauer
2013-06-26Rudimentary counter fix for tables used in match rules.Bret Lambert
2013-06-17Before pulling the TCP options from the mbuf onto the stack, do anAlexander Bluhm
2013-06-05after the pf_test_state folding, in pf_test in the proto switch, theHenning Brauer
2013-06-04fold pf_test_state_{tcp,udp,other} into one pf_test_state.Henning Brauer
2013-06-04add a pointer to the protocol checksum header field to pf_pdesc and setHenning Brauer
2013-06-04make pf_change_ap() usable without a port. if the port pointer is NULL,Henning Brauer
2013-06-03Link pf states and socket inpcbs together more tightly. The linkingAlexander Bluhm
2013-06-03Update o[sd]port whenever n[sd]port is changed. This fixes aAlexander Bluhm