summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2017-10-31- add one more softnet taskqAlexandr Nedvedicky
2017-08-14move pf_get_wscale + pf_get_mss prototypes to pfvar.h (diff shrinkage)Henning Brauer
2017-08-14add half-open tcp states accounting, road paved by sashanHenning Brauer
2017-08-13to change a state's state (that term is overloaded in pf, protocol stateHenning Brauer
2017-08-11Remove NET_LOCK()'s argument.Martin Pieuchot
2017-08-06Reduce contention on the NET_LOCK() by moving the logic of the pfpurgeMartin Pieuchot
2017-07-04Revert previous, it exposed two edge cases still requiring theMartin Pieuchot
2017-07-03Drop the KERNEL_LOCK() in pf_purge_thread().Martin Pieuchot
2017-06-21Fix kernel diagnostic assertion "(sk->inp == NULL) || (sk->inp->inp_pf_skAlexander Bluhm
2017-06-05- let's add PF_LOCK()Alexandr Nedvedicky
2017-05-31Block IPv6 packets in pf(4) that have hop-by-hop options header orAlexander Bluhm
2017-05-30teach pf_build_tcp() about SACK, ok & with sashanHenning Brauer
2017-05-29export_pflow() is no longer grabbing the NET_LOCK(), so no need toMartin Pieuchot
2017-05-28Limit the nested header chain for IPv6 extensions headers and forAlexander Bluhm
2017-05-28Fix bad white spaces, wrap long lines, kill some empty lines.Alexander Bluhm
2017-05-28Pf was handling IPv4 and IPv6 differently regarding AH extensionAlexander Bluhm
2017-05-23Move the common length check in pf_pull_hdr() after the addressAlexander Bluhm
2017-05-20- fixes regression found by pf_forward testAlexandr Nedvedicky
2017-05-19Change PF behavior to allow MLD Listener Report packets to be sentRafael Zalamena
2017-05-16- percpu anchor stacksAlexandr Nedvedicky
2017-05-16Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED().Martin Pieuchot
2017-05-15Enable the NET_LOCK(), take 3.Martin Pieuchot
2017-05-05Put back the call to pf_remove_src_node lost in the netlock backoutMike Belopuhov
2017-05-04Introduce sstosa() for converting sockaddr_storage with a type safeAlexander Bluhm
2017-03-17Revert the NET_LOCK() and bring back pf's contention lock for release.Martin Pieuchot
2017-03-09Prevent integer overflow in PF when calculating the adaptive timeout.Claudio Jeker
2017-03-07Don't overwrite the flow ID once it's setMike Belopuhov
2017-03-07Enforce that tcbtable and udbtable must be accessed with the NET_LOCK().Martin Pieuchot
2017-02-09percpu counters for TCP statsJeremie Courreges-Anglas
2017-02-05Use percpu counters for ip6statJeremie Courreges-Anglas
2017-01-30whitespace, from bluhm@Sebastian Benoit
2017-01-30removes the pf_consistency_lock and protects the users withSebastian Benoit
2017-01-25Enable the NET_LOCK(), take 2.Martin Pieuchot
2017-01-09pf_purge_thread() needs the NET_LOCK().Martin Pieuchot
2016-12-29In pf_refragment6() use the valid route from pf_route6() insteadAlexander Bluhm
2016-12-28In pf_find_state() pkt_sk was set to NULL if pkt_sk->reverse wasAlexander Bluhm
2016-12-28Better check for a valid route than for an existing route in pfAlexander Bluhm
2016-12-23Replace function names with __func__ in debug prints to make grepAlexander Bluhm
2016-12-23Fix white spaces. No binary change.Alexander Bluhm
2016-12-06Use the sizeof udphdr not the sizeof a pointer to it in the af-toJonathan Gray
2016-11-28Path MTU discovery and traceroute did not always work with pf af-to.Alexander Bluhm
2016-11-23Explicitly forbid to combine af-to with route-to in pfctl. TheAlexander Bluhm
2016-11-22Fold union pf_headers buffer into struct pf_pdesc (enabled by pfvar_priv.h).Richard Procter
2016-11-21In pf_route() and pf_route6() the !r->rt case was only used byAlexander Bluhm
2016-11-17The pf fragment reassembly code accepted IPv6 hop-by-hop headersAlexander Bluhm
2016-11-14Instead of passing an extra mbuf pointer to pf_route(), it shouldAlexander Bluhm
2016-11-14turn ipstat into a set of percpu counters.David Gwynne
2016-10-28- once rule should not attempt to remove its parent rule.Alexandr Nedvedicky
2016-10-27Pass a struct pf_pdesc to pf_route() like it is done in the otherAlexander Bluhm
2016-10-26Put union pf_headers and struct pf_pdesc into separate header fileAlexander Bluhm