summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2016-08-20Push 'field changed' guards into 'change field' functions;Richard Procter
2016-08-20Retire pf_translate_ap()Richard Procter
2016-08-17Reintroduce 5.3-style checksum modification to preserve end-to-end checksumsprocter
2016-07-18Hide pf internals by moving code from in_ouraddr() to pf_ouraddr().Alexander Bluhm
2016-06-21To assist debugging TCP connection reuse with NAT, expand theAlexander Bluhm
2016-06-15Kill nd6_output(), it doesn't do anything since the resolution logicMartin Pieuchot
2016-06-15There's no need to convert values returned by arc4random to the networkMike Belopuhov
2016-06-07per trending style, add continue to empty loops.Ted Unangst
2016-05-31Do not call nd6_output() without route entry argument.Martin Pieuchot
2016-05-28Backout pf.c r1.972, pf_norm.c r1.184, ok claudioStuart Henderson
2016-05-24Do not call nd6_output() without route entry argument.Martin Pieuchot
2016-05-23Pass a route entry to if_output() instead of relying on arpresolve() magic.Martin Pieuchot
2016-05-03Put back a panic() if an incoming packet already has a statekey.Martin Pieuchot
2016-04-15replace m_copym2 with m_dup_pkt for the dup-to handling.David Gwynne
2016-04-07Instead of panicking if an mbuf(9) already has a statekey dump itsMartin Pieuchot
2016-03-29- packet must keep reference to statekeyAlexandr Nedvedicky
2016-03-04- putting back KASSERT(), which I've backed out on Jan 31Alexandr Nedvedicky
2016-01-31- m_pkthdr.pf.statekey changes are not ready for 5.9, I must back them outAlexandr Nedvedicky
2016-01-25- plugging massive pf_state_key leakAlexandr Nedvedicky
2016-01-07- retrying to commit earlier change, which got backed outAlexandr Nedvedicky
2015-12-23revert previous:Jasper Lievisse Adriaanse
2015-12-22- yet another tiny step towards MP PF. This time we need to make sureAlexandr Nedvedicky
2015-12-06g/c pf_change_a6(). it's exactly the same thing as pf_change_ap() with p =Henning Brauer
2015-12-05g/c unneeded af (address family) params to pf_change_ap and _icmpHenning Brauer
2015-12-05pass a pointer to pf_test()'s reason to pf_test_rule instead of using aHenning Brauer
2015-12-03ip_send()/ip6_send() allow PF to send response packet in ipsoftnet task.Alexandr Nedvedicky
2015-12-03To avoid that the stack manipules the pf statekeys directly, introduceAlexander Bluhm
2015-12-03Rename pf_unlink_state() to pf_remove_state() so the name does notAlexander Bluhm
2015-12-02- hide PF internals to pf_unlink_divert_state() from in_pcb.cAlexandr Nedvedicky
2015-12-02Kill the RT_REPORT flag to rtalloc() and stop sending RTM_MISS messagesClaudio Jeker
2015-11-21Add a comment after every #endifMartin Pieuchot
2015-11-20Make use if_get() and get rid of rt_ifp.Martin Pieuchot
2015-11-12Prefix flowid with ph_ and print it in m_print().Martin Pieuchot
2015-11-06Rename rt_mpath_next() into rtable_mpath_next() and provide anMartin Pieuchot
2015-10-27Use rt_ifidx rather than rt_ifp.Martin Pieuchot
2015-10-13- pf_insert_src_node(): global argument (arg6) is useless, functionAlexandr Nedvedicky
2015-10-08use the state id to set a flowid on an mbuf.David Gwynne
2015-09-23Always increment rt_use inside rtalloc(9) instead of doing it in someMartin Pieuchot
2015-09-13There's no point in abstracting ifp->if_output() as long as pf_test()Martin Pieuchot
2015-09-12Stop overwriting the rt_ifp pointer of RTF_LOCAL routes with lo0ifp.Martin Pieuchot
2015-09-12If M_PREPEND() fails, it frees the mbuf. In this case pf_translate_af()Alexander Bluhm
2015-09-11rtfree(9) accepts NULL now.Martin Pieuchot
2015-09-11Kill yet another argument to functions in IPv6. This time ip6_output'sClaudio Jeker
2015-09-10Kill two simple in6_ifstat_inc().Martin Pieuchot
2015-09-09add if_put after the if_get.David Gwynne
2015-09-01- route-to, dup-to, reply-to should not override the block actionAlexandr Nedvedicky
2015-08-19PF must keep IPv6 fragment size as chosen by sender also for packets,Alexandr Nedvedicky
2015-07-21- added /* FALLTHROUGH */ comments, typecasts (u_int32_t)-1, ...Alexandr Nedvedicky
2015-07-20Add some panics to default paths where code later assumes a non defaultJonathan Gray
2015-07-20INET6 is here to stay, so stop hauling around never-compiled codeRyan Thomas McBride