| Age | Commit message (Expand) | Author |
|---|
| 2021-07-07 | pfsync_undefer() must be called outside of PF_LOCK | Alexandr Nedvedicky |
| 2021-06-23 | augment the global pf state list with its own locks. | David Gwynne |
| 2021-06-23 | pf_purge_expired_states can check the time once instead of for every state. | David Gwynne |
| 2021-06-23 | rework pf_state_expires to avoid confusion around state->timeout. | David Gwynne |
| 2021-06-01 | a couple of minor whitespace tweaks. no functional change. | David Gwynne |
| 2021-05-17 | fix state key reference underflow, when sk == skrev | Alexandr Nedvedicky |
| 2021-04-27 | pf_state_key_link_reverse() is prone to race on parallel forwarding | Alexandr Nedvedicky |
| 2021-04-23 | only skip pf once for packets that are injected by a divert-packet socket. | David Gwynne |
| 2021-03-10 | spelling | Jonathan Gray |
| 2021-03-01 | Refactor ip_fragment() and ip6_fragment(). Use a mbuf list to | Alexander Bluhm |
| 2021-02-23 | Use NULL instead of 0 in `m_nextpkt' assignment. | mvs |
| 2021-02-16 | use rtalloc_mpath in pf_route and pf_route6. | David Gwynne |
| 2021-02-12 | pf_remove_divert_state() is an entry point into pf, modifying the pf state | Patrick Wildt |
| 2021-02-12 | Fix null pointer dereference in pf_route6(). Embedding scope into | Alexander Bluhm |
| 2021-02-04 | make if_pfsync.c a better friend with PF_LOCK | Alexandr Nedvedicky |
| 2021-02-03 | change pf_route so pf only runs when packets enter and leave the stack. | David Gwynne |
| 2021-02-01 | change route-to so it sends packets to IPs instead of interfaces. | David Gwynne |
| 2021-01-28 | handle "once" rules before letting pfsync defer tx of a packet. | David Gwynne |
| 2021-01-27 | if the route resolved in pf_route is invalid, generate an icmp error. | David Gwynne |
| 2021-01-27 | have pf_route{,6} clear the pf_pdesc mbuf ref early for route-to/reply-to. | David Gwynne |
| 2021-01-27 | don't run copies of packets made by dup-to through pf_test. | David Gwynne |
| 2021-01-19 | pflog(4) tried to log the translated packet with rdr-to, nat-to, | Alexander Bluhm |
| 2021-01-16 | The sysctl variable net.inet.ip.forwarding is checked before | Alexander Bluhm |
| 2021-01-15 | Remove a check that bypasses pf state tests. It dates back to 2003 | Alexander Bluhm |
| 2021-01-14 | Fix build without carp: ifp0 is only used within #if NCARP > 0. | Theo Buehler |
| 2021-01-04 | Minor refactoring in pf(4). Note that struct pfsync_state is no | Alexander Bluhm |
| 2020-12-10 | when setting a flowid, set the M_FLOWID csum_flags bit too. | David Gwynne |
| 2020-12-07 | synproxy should be processing incoming SYN packets only. | Alexandr Nedvedicky |
| 2020-07-24 | Use interface index instead of pointer to `ifnet' in carp(4). | mvs |
| 2020-06-24 | kernel: use gettime(9)/getuptime(9) in lieu of time_second(9)/time_uptime(9) | cheloha |
| 2020-06-17 | make ph_flowid in mbufs 16bits by storing whether it's set in csum_flags. | David Gwynne |
| 2019-11-17 | "set delay" never worked as committed: the delay field was not copied | Otto Moerbeek |
| 2019-10-17 | Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX. | Todd C. Miller |
| 2019-08-29 | pf_state_insert() must grab state lock exclusively | Alexandr Nedvedicky |
| 2019-08-26 | pf.conf "set timeout interval 1" causes kernel crash | Alexandr Nedvedicky |
| 2019-07-18 | follow up to 'once rule' expiration | Alexandr Nedvedicky |
| 2019-07-18 | This commit fixes two bugs involving PF once rules: | Lawrence Teo |
| 2019-07-11 | fix NULL pointer dereference, reported and fix tested by sthen | Alexandr Nedvedicky |
| 2019-07-09 | Fix previous commit which made src-node have a reference for the kif. | YASUOKA Masahiko |
| 2019-07-02 | When source address tracking record is used for "route-to", the next | YASUOKA Masahiko |
| 2019-07-01 | Link the state and the source track to keep the source track while | YASUOKA Masahiko |
| 2019-03-20 | States in pf(4) let ICMP and ICMP6 packets pass if they have a | Alexander Bluhm |
| 2018-12-17 | Use timeout_add_sec() instead of timeout_add() with a multiplication with hz | Claudio Jeker |
| 2018-12-10 | Remove useless macros | kn |
| 2018-11-15 | in the "pf: key search" debug message, add the direction. interface *and* | Henning Brauer |
| 2018-10-16 | - pf: honor quick on anchor rules | Alexandr Nedvedicky |
| 2018-10-04 | Honor quick on anchor rules | kn |
| 2018-09-13 | Add reference counting for inet pcb, this will be needed when we | Alexander Bluhm |
| 2018-09-11 | - moving state look up outside of PF_LOCK() | Alexandr Nedvedicky |
| 2018-07-22 | Fix arguments of pf_purge_expired_{src_nodes,rules}() | Stefan Fritsch |
