Age | Commit message (Expand) | Author |
2016-08-20 | Push 'field changed' guards into 'change field' functions; | Richard Procter |
2016-08-20 | Retire pf_translate_ap() | Richard Procter |
2016-08-17 | Reintroduce 5.3-style checksum modification to preserve end-to-end checksums | procter |
2016-07-18 | Hide pf internals by moving code from in_ouraddr() to pf_ouraddr(). | Alexander Bluhm |
2016-06-21 | To assist debugging TCP connection reuse with NAT, expand the | Alexander Bluhm |
2016-06-15 | Kill nd6_output(), it doesn't do anything since the resolution logic | Martin Pieuchot |
2016-06-15 | There's no need to convert values returned by arc4random to the network | Mike Belopuhov |
2016-06-07 | per trending style, add continue to empty loops. | Ted Unangst |
2016-05-31 | Do not call nd6_output() without route entry argument. | Martin Pieuchot |
2016-05-28 | Backout pf.c r1.972, pf_norm.c r1.184, ok claudio | Stuart Henderson |
2016-05-24 | Do not call nd6_output() without route entry argument. | Martin Pieuchot |
2016-05-23 | Pass a route entry to if_output() instead of relying on arpresolve() magic. | Martin Pieuchot |
2016-05-03 | Put back a panic() if an incoming packet already has a statekey. | Martin Pieuchot |
2016-04-15 | replace m_copym2 with m_dup_pkt for the dup-to handling. | David Gwynne |
2016-04-07 | Instead of panicking if an mbuf(9) already has a statekey dump its | Martin Pieuchot |
2016-03-29 | - packet must keep reference to statekey | Alexandr Nedvedicky |
2016-03-04 | - putting back KASSERT(), which I've backed out on Jan 31 | Alexandr Nedvedicky |
2016-01-31 | - m_pkthdr.pf.statekey changes are not ready for 5.9, I must back them out | Alexandr Nedvedicky |
2016-01-25 | - plugging massive pf_state_key leak | Alexandr Nedvedicky |
2016-01-07 | - retrying to commit earlier change, which got backed out | Alexandr Nedvedicky |
2015-12-23 | revert previous: | Jasper Lievisse Adriaanse |
2015-12-22 | - yet another tiny step towards MP PF. This time we need to make sure | Alexandr Nedvedicky |
2015-12-06 | g/c pf_change_a6(). it's exactly the same thing as pf_change_ap() with p = | Henning Brauer |
2015-12-05 | g/c unneeded af (address family) params to pf_change_ap and _icmp | Henning Brauer |
2015-12-05 | pass a pointer to pf_test()'s reason to pf_test_rule instead of using a | Henning Brauer |
2015-12-03 | ip_send()/ip6_send() allow PF to send response packet in ipsoftnet task. | Alexandr Nedvedicky |
2015-12-03 | To avoid that the stack manipules the pf statekeys directly, introduce | Alexander Bluhm |
2015-12-03 | Rename pf_unlink_state() to pf_remove_state() so the name does not | Alexander Bluhm |
2015-12-02 | - hide PF internals to pf_unlink_divert_state() from in_pcb.c | Alexandr Nedvedicky |
2015-12-02 | Kill the RT_REPORT flag to rtalloc() and stop sending RTM_MISS messages | Claudio Jeker |
2015-11-21 | Add a comment after every #endif | Martin Pieuchot |
2015-11-20 | Make use if_get() and get rid of rt_ifp. | Martin Pieuchot |
2015-11-12 | Prefix flowid with ph_ and print it in m_print(). | Martin Pieuchot |
2015-11-06 | Rename rt_mpath_next() into rtable_mpath_next() and provide an | Martin Pieuchot |
2015-10-27 | Use rt_ifidx rather than rt_ifp. | Martin Pieuchot |
2015-10-13 | - pf_insert_src_node(): global argument (arg6) is useless, function | Alexandr Nedvedicky |
2015-10-08 | use the state id to set a flowid on an mbuf. | David Gwynne |
2015-09-23 | Always increment rt_use inside rtalloc(9) instead of doing it in some | Martin Pieuchot |
2015-09-13 | There's no point in abstracting ifp->if_output() as long as pf_test() | Martin Pieuchot |
2015-09-12 | Stop overwriting the rt_ifp pointer of RTF_LOCAL routes with lo0ifp. | Martin Pieuchot |
2015-09-12 | If M_PREPEND() fails, it frees the mbuf. In this case pf_translate_af() | Alexander Bluhm |
2015-09-11 | rtfree(9) accepts NULL now. | Martin Pieuchot |
2015-09-11 | Kill yet another argument to functions in IPv6. This time ip6_output's | Claudio Jeker |
2015-09-10 | Kill two simple in6_ifstat_inc(). | Martin Pieuchot |
2015-09-09 | add if_put after the if_get. | David Gwynne |
2015-09-01 | - route-to, dup-to, reply-to should not override the block action | Alexandr Nedvedicky |
2015-08-19 | PF must keep IPv6 fragment size as chosen by sender also for packets, | Alexandr Nedvedicky |
2015-07-21 | - added /* FALLTHROUGH */ comments, typecasts (u_int32_t)-1, ... | Alexandr Nedvedicky |
2015-07-20 | Add some panics to default paths where code later assumes a non default | Jonathan Gray |
2015-07-20 | INET6 is here to stay, so stop hauling around never-compiled code | Ryan Thomas McBride |