summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2003-01-25Fix the behaviour of rdr rules which redirect to a range of ports;Ryan Thomas McBride
2003-01-24Sigh, pf_pull_hdr (aka pf_pull_hair) doesn't do an m_pullup, it merelyDaniel Hartmeier
2003-01-24Move the mbuf pullup for TCP options to the beginning of TCP handling,Daniel Hartmeier
2003-01-24Fix wscale support, the first version didn't really work right.Daniel Hartmeier
2003-01-23Fix a bug where the kernel crashes when translating IPv6 ICMP packets.Daniel Hartmeier
2003-01-21Support for TCP window scaling (RFC 1323). ok frantzen@Daniel Hartmeier
2003-01-19format string fixesHenning Brauer
2003-01-18Argh! KNF.Ryan Thomas McBride
2003-01-18Make nat behave the way it used to by copying back the random source portRyan Thomas McBride
2003-01-09(whitespace) KNF, re-fold -w 80Daniel Hartmeier
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
2003-01-06knfTheo de Raadt
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
2003-01-04move noroute from flag in pf_rule_addr into type in pf_addr_wrap.Daniel Hartmeier
2003-01-04Honour noroute in skip step calculation, found by cedric@Daniel Hartmeier
2003-01-03KNFTheo de Raadt
2003-01-02When route-to/reply-to is used in combination with address translation,Daniel Hartmeier
2003-01-01use a #define for the default state table sizeHenning Brauer
2003-01-01Remove skip step for action (scrub vs. non-scrub), as scrub rules areDaniel Hartmeier
2003-01-01Fix breakage from PF_RULESET_MAX increase, regress tests match again.Daniel Hartmeier
2002-12-31Split scrub rules out from the filter rules in the kernel.Ryan Thomas McBride
2002-12-31Use a default state table limit of 10000 entries. This is safe for allDaniel Hartmeier
2002-12-29Add support for radix tables for source and destination of PF rules.Cedric Berger
2002-12-27Fixups for pf_route and pf_route6.Ryan Thomas McBride
2002-12-27Handle binat-anchor rules in pf_match_translation(), they don't have aDaniel Hartmeier
2002-12-27Initialize rt_ifp in newly allocated pf_state objects to NULL.Daniel Hartmeier
2002-12-26Prettier debug printing in pf_map_addr.Ryan Thomas McBride
2002-12-26Additional sanity checks for pf_route(). Please report when any of theseDaniel Hartmeier
2002-12-23Change from array to single pf_pabuf (no longer need multiple buffers asRyan Thomas McBride
2002-12-22Handle rdr rules with unspecified proxy ports correctly. Also don'tRyan Thomas McBride
2002-12-19Replace skip step calculation so it scales O(n) instead of O(n*n).Daniel Hartmeier
2002-12-19fix 'no nat/rdr/binat' evaluation. from mcbride@, slightly modified :)Daniel Hartmeier
2002-12-19Initialize pf_state.nat_rule to NULL if there's no translation used.Daniel Hartmeier
2002-12-18Store translation rule pointer in state entries, so pfctl -vsn can printDaniel Hartmeier
2002-12-18When logging packets matched by rules within anchors, use the anchor ruleDaniel Hartmeier
2002-12-18big KNF roundHenning Brauer
2002-12-18Pass skip step values through ioctl interface, pfctl -vvsr shows them,Daniel Hartmeier
2002-12-18KNFHenning Brauer
2002-12-18Match the rule protocol against the actual protocol of the packet, not justRyan Thomas McBride
2002-12-17Merge pf_nat/pf_binat/pf_rdr structs into pf_rule. Simplifies code, allowsRyan Thomas McBride
2002-12-13add pqueue and pqid to pf_rule.Henning Brauer
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
2002-12-03no need to mh_align (while it's wrong), cleaner mtu setting; dhartmei@ okMichael Shalayeff
2002-12-01- Clean up pf_ioctl mainly by adding new functions to handle cleaning andRyan Thomas McBride
2002-12-01pfsync currently causes kernel faults, so we don't want to call these functionsRyan Thomas McBride
2002-11-29expose state table changesMichael Shalayeff
2002-11-28- MD5 too slow, replace with pf_hash (based on hash from if_bridge.c)Ryan Thomas McBride
2002-11-24move } outside #ifdef INET6Ryan Thomas McBride
2002-11-23KNFTheo de Raadt