summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2003-05-142 lines of code bring us tags on nat rulesHenning Brauer
2003-05-13add support for tagging packets with arbitary tags and filtering based onHenning Brauer
2003-05-12- TCP window scaling is not applied to the SYNs' window so we must retract theMike Frantzen
2003-05-12Reorder IPv6 address comparisons to check the least significant partsRyan Thomas McBride
2003-05-12Adaptive timeout value scaling. Allows to reduce timeout values as theDaniel Hartmeier
2003-05-11the start of stateful TCP scrubbing. dynamically determine the highest TTL ofMike Frantzen
2003-05-11Use sizeof(struct icmp6_hdr) instead of ICMP_MINLEN for IPv6, both areDaniel Hartmeier
2003-05-10Pass ICMP error messages referring to non-TCP/UDP/ICMP packets statefully,Daniel Hartmeier
2003-05-10Support return-icmp for 'other' protocols (non-TCP/UDP/ICMP), for instanceDaniel Hartmeier
2003-05-10Prepare pf_change_icmp() for parameter ip == NULL use.Daniel Hartmeier
2003-05-06Fix a bug that prevents rdr/binat (but not nat) from working for protocolsDaniel Hartmeier
2003-04-30Allow tables to be loaded into anchors.Cedric Berger
2003-04-25Fix nat proxy port allocation. In case a range was manually specified,Daniel Hartmeier
2003-04-11set/update the queue IDs on filter rules (qid and pqid) onHenning Brauer
2003-04-09KNFHenning Brauer
2003-04-09Change pf_state structure to point to both a rule and the anchor,Cedric Berger
2003-04-05Stick pf_default_rule everytime a packet pass because of theCedric Berger
2003-04-05Replace the timeout variables by the content of the timeoutCedric Berger
2003-04-05Cleanup by replacing a bunch of "(*rm)" by just "r"Cedric Berger
2003-04-03Back out my last change, which was incorrect or incomplete.Cedric Berger
2003-04-03Remove (state->rule.ptr != NULL) tests: this is always true now.Cedric Berger
2003-03-31Only delete rule structure when no state refer to it.Cedric Berger
2003-03-21- Add missing "\n" to some pf_table.c printf()Cedric Berger
2003-03-09tighten the TCP state code in relation to a FIN before any server responsesMike Frantzen
2003-03-04(really) support user/group rules with 'inet6'Philipp Buehler
2003-03-02Use priority queue for TCP ACKs that have no payload. Very useful onDaniel Hartmeier
2003-02-27make packet classification for altq work in the IPv6 caseHenning Brauer
2003-02-27Repair IPv6 support for tables.Cedric Berger
2003-02-25- Handle src and dst comparisons correctly for binat so that it worksRyan Thomas McBride
2003-02-16KNFTheo de Raadt
2003-02-12Remove commons; inspired by netbsd.Jason Wright
2003-02-12Make r.rpool.proxy_port[] a consistent byte order to match cleanup inRyan Thomas McBride
2003-02-12Fix a bunch of pf_route() bugs:Ryan Thomas McBride
2003-02-09Slightly less noisy debug printf from pf_map_addr(), ok mcbride@Daniel Hartmeier
2003-02-05Remove the confusing and more-or-less unnecessary temporaryRyan Thomas McBride
2003-02-01Make it build without INET6 again.Daniel Hartmeier
2003-01-31The fix introduced with 1.294 to solve issues with route-to inDaniel Hartmeier
2003-01-31Check protocol (TCP/UDP/ICMP/ICMP6) checksums of all incoming packets,Daniel Hartmeier
2003-01-31Send a RST when an invalid packet matches a TCP state during theDaniel Hartmeier
2003-01-25Fix the behaviour of rdr rules which redirect to a range of ports;Ryan Thomas McBride
2003-01-24Sigh, pf_pull_hdr (aka pf_pull_hair) doesn't do an m_pullup, it merelyDaniel Hartmeier
2003-01-24Move the mbuf pullup for TCP options to the beginning of TCP handling,Daniel Hartmeier
2003-01-24Fix wscale support, the first version didn't really work right.Daniel Hartmeier
2003-01-23Fix a bug where the kernel crashes when translating IPv6 ICMP packets.Daniel Hartmeier
2003-01-21Support for TCP window scaling (RFC 1323). ok frantzen@Daniel Hartmeier
2003-01-19format string fixesHenning Brauer
2003-01-18Argh! KNF.Ryan Thomas McBride
2003-01-18Make nat behave the way it used to by copying back the random source portRyan Thomas McBride
2003-01-09(whitespace) KNF, re-fold -w 80Daniel Hartmeier
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger