summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2024-11-08pf(4) when doing af-to translation for ICMP protocol sends packetsAlexandr Nedvedicky
2024-09-04Fix some spelling.Marcus Glocker
2024-08-06Unlock sysctl net.inet.ip.directed-broadcast.Alexander Bluhm
2024-07-14Unlock IPv6 sysctl net.inet6.ip6.forwarding from net lock.Alexander Bluhm
2024-07-12Run sysctl net.inet.ip.forwarding without net lock.Alexander Bluhm
2024-07-04Implement IPv6 forwarding IPsec only.Alexander Bluhm
2024-07-02Read IPsec forwarding information once.Alexander Bluhm
2024-06-21My earlier commit [1.1169 of pf.c (2023/01/05)] makes pf(4) to report wrongAlexandr Nedvedicky
2024-06-20Read IPv6 forwarding value only once while processing a packet.Alexander Bluhm
2024-06-07Read IP forwarding variables only once.Alexander Bluhm
2024-05-14remove prototypes with no matching functionJonathan Gray
2024-05-10make pf_match_rule() prototype match the functionJonathan Gray
2024-04-12Split single TCP inpcb table into IPv4 and IPv6 parts.Alexander Bluhm
2024-01-10Split UDP PCB table into IPv4 and IPv6.Alexander Bluhm
2024-01-01Protect link between pf and inp with mutex.Alexander Bluhm
2024-01-01Fix white space in pf.c.Alexander Bluhm
2023-12-28use RB_FOREACH_SAFE for pf_purge_expired_src_nodesaisha
2023-12-01Prevent race between pf_test() and pf_purge_expired_states().Alexandr Nedvedicky
2023-10-10pf(4) must not pass packet if state cannot be created.Alexander Bluhm
2023-10-10Remove dead code in pf_pull_hdr().Alexander Bluhm
2023-09-08revert previousChristian Weisgerber
2023-09-07pf(4) ignores 'keep state' and 'nat-to' actions for unsolicitedAlexandr Nedvedicky
2023-07-31don't let pfsync send an insert message for a state pfsync just insertedDavid Gwynne
2023-07-07Fix path MTU discovery for TCP LRO/TSO when forwarding.Alexander Bluhm
2023-07-06big update to pfsync to try and clean up locking in particular.David Gwynne
2023-06-05pf_remove_state() should not attempt to remove state whichAlexandr Nedvedicky
2023-05-15Implement the TCP/IP layer for hardware TCP segmentation offload.Alexander Bluhm
2023-05-13Instead of implementing IPv4 header checksum creation everywhere,Alexander Bluhm
2023-05-10Implement TCP send offloading, for now in software only. This isAlexander Bluhm
2023-05-08The call to in_proto_cksum_out() is only needed before the packetAlexander Bluhm
2023-05-07I preparation for TSO in software, cleanup the fragment code. UseAlexander Bluhm
2023-05-03Remove net lock from DIOCGETRULESET and DIOCGETRULESETSKlemens Nanni
2023-04-28Relax the "pass all" rule so all forms of neighbor advertisements are allowedPeter Hessler
2023-03-23fix off-by-one in pf_state_expires() bounds testJonathan Gray
2023-03-04pf(4) should be enforcing TTL=1 to packets sent to 224.0.0.1 only.Alexandr Nedvedicky
2023-01-22Fix pf_anchor_stackframe commit to revert pf rule matching to theYASUOKA Masahiko
2023-01-12Binding the accept socket in TCP input relies on the fact that theAlexander Bluhm
2023-01-06PF_ANCHOR_STACK_MAX is insufficient protection against stack overflow.Alexandr Nedvedicky
2023-01-05more consistently name pf_state * variables "st".David Gwynne
2023-01-04move the pf_state_tree_id type from pfvar.h to pfvar_priv.h.David Gwynne
2023-01-04move the pf_state_tree rb tree type from pfvar.h to pfvar_priv.hDavid Gwynne
2023-01-02use the pf generated toeplitz hash when setting the mbuf flow id.David Gwynne
2022-12-27Fix array bounds mismatch with clang 15Patrick Wildt
2022-12-24fix and enable toeplitz hashing of pf_state_keys again.David Gwynne
2022-12-23disable the use of the has in the pf state key lookup (for now).David Gwynne
2022-12-22use stoeplitz to generate a hash/flowid for state keys.David Gwynne
2022-12-21tiny whitespace tweak.David Gwynne
2022-12-21consistently use the PF_REF wrappers around refcnts.David Gwynne
2022-12-21prefix pf_state_key and pf_state_item struct bits to make them more unique.David Gwynne
2022-12-16always keep pf_state_keys attached to pf_states.David Gwynne