summaryrefslogtreecommitdiff
path: root/sys/net/pf.c
AgeCommit message (Expand)Author
2014-09-27Kill rtalloc() and update rtalloc1() and rtalloc_mpath() to no longerMartin Pieuchot
2014-08-12Finally implement what's stated in the man page regarding parentMike Belopuhov
2014-08-12Make sure that pf_step_into_anchor always saves a pointer to the ruleMike Belopuhov
2014-08-12Apart from some minor code reshuffling the big change is that weMike Belopuhov
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-13Put back a m_copyback() that got lost in rev 1.837 of pf.c. ThisAlexander Bluhm
2014-07-10Simplify the way divert(4) sends packets to userspace: Instead ofLawrence Teo
2014-07-02u_int32_t's can't go negativeMike Belopuhov
2014-06-25pf_translate doesn't use the mbuf argument anymore.Mike Belopuhov
2014-05-20Assign the queue ID to the correct packet header when sending ICMP messages.Martin Pieuchot
2014-04-24ewps... repair qid assignmentHenning Brauer
2014-04-22Remove some altq tentacles.Martin Pieuchot
2014-04-21ip_output() using varargs always struck me as bizarre, esp since it's onlyHenning Brauer
2014-04-21we'll do fine without casting NULL to struct foo * / void *Henning Brauer
2014-04-19shrink pf by 445 lines.Henning Brauer
2014-04-18pf_send_tcp: ask the stack to do the cksum instead of doing it manuallyHenning Brauer
2014-04-14"struct pkthdr" holds a routing table ID, not a routing domain one.Martin Pieuchot
2014-03-10When translating packets from one address family to another, pass theJeremie Courreges-Anglas
2014-03-10When setting up the packet description, also retrieve the Traffic ClassJeremie Courreges-Anglas
2014-01-25Simplify and shorten the way ICMP checksums are verified inLawrence Teo
2014-01-24in pf_check_proto_cksum, updtae the swcksum counters if we cksummed inHenning Brauer
2014-01-23since the cksum rewrite the counters for hardware checksummed packetsHenning Brauer
2014-01-227x bcopy -> memcpy, impossibility of overlaps verified. ok benno dlgHenning Brauer
2014-01-20support negated matches on the rcvif, ok dlg bennoHenning Brauer
2014-01-03Switch frequently allocated structs from malloc(M_DEVBUF) to separate pools.pelikan
2013-11-18The prio value of a pf match rule was overridden by a later passAlexander Bluhm
2013-11-16Remove dead assignments and now unused variables.Charles Longeau
2013-11-15Revert 1.858, as it causes panics of inp:Christiano F. Haesbaert
2013-11-15After discussion with deraadt@ and Fernando Gont, it seems that theAlexander Bluhm
2013-11-15Forget socket linking on pf_pkt_addr_changed(), this fixes among otherChristiano F. Haesbaert
2013-10-30Allow to compile a kernel without INET6.Martin Pieuchot
2013-10-30translate icmpv6 echo id's the same way we do for icmpv4; ok henningMike Belopuhov
2013-10-28previous udp port number rewrite fix turned out to be a work aroundMike Belopuhov
2013-10-24Move obvious kernel prototypes (and structure's with kernel pointers,Theo de Raadt
2013-10-23translate port numbers for inner udp packets when they're returnedMike Belopuhov
2013-10-23Remove the number of in_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-23overwrite icmp packet type-specific nextptr field only when we'reMike Belopuhov
2013-10-22In pf_test_state_icmp(), actually copy pd->hdr.any back into the mbuf asLawrence Teo
2013-10-21pf_translate: missing conditonal pf_check_proto_cksum calls beforeHenning Brauer
2013-10-20in pf_cksum, set the icmp/icmp6 cksums to 0, for comsistency with tcp/udpHenning Brauer
2013-10-20rt_mpath_next() was always called with 0 in the last argument. So drop it.Claudio Jeker
2013-10-20Put a large chunk of the IPv6 rdomain support in-tree.Peter Hessler
2013-10-19pf_cksum doesn't need to compute the pseudo hdr cksum any more.Henning Brauer
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-10-12new bandwidth shaping subsystem, kernel sideHenning Brauer
2013-10-11Prevent non-data packets from being dropped.Gerhard Roth
2013-10-09Don't leak ruleitems from match rules when hitting a per-rule max state limit.Camiel Dobbelaar
2013-09-27IPv6 atomic fragments must not go the reassembly queue, but beAlexander Bluhm
2013-08-19in pf_test_rule, when dealing with a match rule, obey the match rule's quickHenning Brauer
2013-07-05Collect and display 'match' counters for pf tables.Bret Lambert