Age | Commit message (Expand) | Author |
2014-09-27 | Kill rtalloc() and update rtalloc1() and rtalloc_mpath() to no longer | Martin Pieuchot |
2014-08-12 | Finally implement what's stated in the man page regarding parent | Mike Belopuhov |
2014-08-12 | Make sure that pf_step_into_anchor always saves a pointer to the rule | Mike Belopuhov |
2014-08-12 | Apart from some minor code reshuffling the big change is that we | Mike Belopuhov |
2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
2014-07-13 | Put back a m_copyback() that got lost in rev 1.837 of pf.c. This | Alexander Bluhm |
2014-07-10 | Simplify the way divert(4) sends packets to userspace: Instead of | Lawrence Teo |
2014-07-02 | u_int32_t's can't go negative | Mike Belopuhov |
2014-06-25 | pf_translate doesn't use the mbuf argument anymore. | Mike Belopuhov |
2014-05-20 | Assign the queue ID to the correct packet header when sending ICMP messages. | Martin Pieuchot |
2014-04-24 | ewps... repair qid assignment | Henning Brauer |
2014-04-22 | Remove some altq tentacles. | Martin Pieuchot |
2014-04-21 | ip_output() using varargs always struck me as bizarre, esp since it's only | Henning Brauer |
2014-04-21 | we'll do fine without casting NULL to struct foo * / void * | Henning Brauer |
2014-04-19 | shrink pf by 445 lines. | Henning Brauer |
2014-04-18 | pf_send_tcp: ask the stack to do the cksum instead of doing it manually | Henning Brauer |
2014-04-14 | "struct pkthdr" holds a routing table ID, not a routing domain one. | Martin Pieuchot |
2014-03-10 | When translating packets from one address family to another, pass the | Jeremie Courreges-Anglas |
2014-03-10 | When setting up the packet description, also retrieve the Traffic Class | Jeremie Courreges-Anglas |
2014-01-25 | Simplify and shorten the way ICMP checksums are verified in | Lawrence Teo |
2014-01-24 | in pf_check_proto_cksum, updtae the swcksum counters if we cksummed in | Henning Brauer |
2014-01-23 | since the cksum rewrite the counters for hardware checksummed packets | Henning Brauer |
2014-01-22 | 7x bcopy -> memcpy, impossibility of overlaps verified. ok benno dlg | Henning Brauer |
2014-01-20 | support negated matches on the rcvif, ok dlg benno | Henning Brauer |
2014-01-03 | Switch frequently allocated structs from malloc(M_DEVBUF) to separate pools. | pelikan |
2013-11-18 | The prio value of a pf match rule was overridden by a later pass | Alexander Bluhm |
2013-11-16 | Remove dead assignments and now unused variables. | Charles Longeau |
2013-11-15 | Revert 1.858, as it causes panics of inp: | Christiano F. Haesbaert |
2013-11-15 | After discussion with deraadt@ and Fernando Gont, it seems that the | Alexander Bluhm |
2013-11-15 | Forget socket linking on pf_pkt_addr_changed(), this fixes among other | Christiano F. Haesbaert |
2013-10-30 | Allow to compile a kernel without INET6. | Martin Pieuchot |
2013-10-30 | translate icmpv6 echo id's the same way we do for icmpv4; ok henning | Mike Belopuhov |
2013-10-28 | previous udp port number rewrite fix turned out to be a work around | Mike Belopuhov |
2013-10-24 | Move obvious kernel prototypes (and structure's with kernel pointers, | Theo de Raadt |
2013-10-23 | translate port numbers for inner udp packets when they're returned | Mike Belopuhov |
2013-10-23 | Remove the number of in_var.h inclusions by moving some functions and | Martin Pieuchot |
2013-10-23 | overwrite icmp packet type-specific nextptr field only when we're | Mike Belopuhov |
2013-10-22 | In pf_test_state_icmp(), actually copy pd->hdr.any back into the mbuf as | Lawrence Teo |
2013-10-21 | pf_translate: missing conditonal pf_check_proto_cksum calls before | Henning Brauer |
2013-10-20 | in pf_cksum, set the icmp/icmp6 cksums to 0, for comsistency with tcp/udp | Henning Brauer |
2013-10-20 | rt_mpath_next() was always called with 0 in the last argument. So drop it. | Claudio Jeker |
2013-10-20 | Put a large chunk of the IPv6 rdomain support in-tree. | Peter Hessler |
2013-10-19 | pf_cksum doesn't need to compute the pseudo hdr cksum any more. | Henning Brauer |
2013-10-17 | The header file netinet/in_var.h included netinet6/in6_var.h. This | Alexander Bluhm |
2013-10-12 | new bandwidth shaping subsystem, kernel side | Henning Brauer |
2013-10-11 | Prevent non-data packets from being dropped. | Gerhard Roth |
2013-10-09 | Don't leak ruleitems from match rules when hitting a per-rule max state limit. | Camiel Dobbelaar |
2013-09-27 | IPv6 atomic fragments must not go the reassembly queue, but be | Alexander Bluhm |
2013-08-19 | in pf_test_rule, when dealing with a match rule, obey the match rule's quick | Henning Brauer |
2013-07-05 | Collect and display 'match' counters for pf tables. | Bret Lambert |