summaryrefslogtreecommitdiff
path: root/sys/net/pf_ioctl.c
AgeCommit message (Expand)Author
2003-12-15ryan left a few for me ;-)Henning Brauer
2003-12-15Fix whitespace screwups before henning wakes up.Ryan Thomas McBride
2003-12-15Add initial support for pf state synchronization over the network.Ryan Thomas McBride
2003-12-15Add support to track stateful connections by source ip. This allows usRyan Thomas McBride
2003-12-12Move PF interface code to new net/pf_if.cCedric Berger
2003-11-02Don't zero the debug level when we enable pf.Ryan Thomas McBride
2003-10-25Build state search indexes directly on pf_state instead of pf_tree_node.Ryan Thomas McBride
2003-10-19Add missing "#ifdef ALTQ"'s in the ioctl transacions code.Ryan Thomas McBride
2003-10-08obviously i'm on drugs, revertHenning Brauer
2003-10-08missing DIOCX* in the securelevel > 1 caseHenning Brauer
2003-09-26Rearchitecture of the userland/kernel IOCTL interface for transactions.Cedric Berger
2003-08-22pf spelling policeDavid Krause
2003-08-21Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF.Mike Frantzen
2003-08-11Fix DIOCCHANGEADDR, use the supplied ticket instead of 0.Daniel Hartmeier
2003-08-09This patch remove the restriction that tables cannot be used in routing orCedric Berger
2003-07-31Make table tickets per-ruleset instead of global.Cedric Berger
2003-07-19Simplify struct pf_pooladdr to include struct pf_addr_wrap directlyCedric Berger
2003-06-30change that queue ID allocator so it always has the queues sorted by ID.Henning Brauer
2003-06-30reset interface statistics when loginterface is changed, closes pr3332,Daniel Hartmeier
2003-06-30move prototype for pf_tag_purge() to pfvar.hHenning Brauer
2003-06-27do pf_tagname2tag() in DIOCCHANGERULE as well.Henning Brauer
2003-06-27move down pf_tag_unref() calls in pf_rm_rule() to after the check wetehr thereHenning Brauer
2003-06-23Don't remove anchor too early in table code, it makes PF use freed memory.Cedric Berger
2003-06-21count packets and bidirectionally on state entries, allowing for fine-grainedDamien Miller
2003-06-08A table in an anchor creates a real anchor: pfctl -sA works.Cedric Berger
2003-06-03move some prototypes to pfvar.h. needed soon.Henning Brauer
2003-06-03provide pf_tag2tagname which is the reverse of pf_tagname2tag. needed soon.Henning Brauer
2003-05-14fix use after free race when purging the new PF tagsMike Frantzen
2003-05-13add support for tagging packets with arbitary tags and filtering based onHenning Brauer
2003-05-12Correctness nit. Initialise state search trees properly.Ryan Thomas McBride
2003-05-12Adaptive timeout value scaling. Allows to reduce timeout values as theDaniel Hartmeier
2003-05-12missing includeHenning Brauer
2003-04-30Allow tables to be loaded into anchors.Cedric Berger
2003-04-27Update the pfioc_table IOCTL structure.Cedric Berger
2003-04-11set/update the queue IDs on filter rules (qid and pqid) onHenning Brauer
2003-04-09Change pf_state structure to point to both a rule and the anchor,Cedric Berger
2003-04-07Catch and refuse rules with invalid ICMP types (> 40), ok cedric@Daniel Hartmeier
2003-04-05Stick pf_default_rule everytime a packet pass because of theCedric Berger
2003-04-05Replace the timeout variables by the content of the timeoutCedric Berger
2003-04-03Back out my last change, which was incorrect or incomplete.Cedric Berger
2003-04-03Remove (state->rule.ptr != NULL) tests: this is always true now.Cedric Berger
2003-03-31Only delete rule structure when no state refer to it.Cedric Berger
2003-03-11Missing break, unintentional fall-through. Found by Kimmo Mösö.Daniel Hartmeier
2003-01-20It's difficult to create a table by changing its flags.Cedric Berger
2003-01-09minor KNFHenning Brauer
2003-01-09(whitespace) KNF, re-fold -w 80Daniel Hartmeier
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
2003-01-06Move initialisation of radix table globals in pfr_initialize()Cedric Berger
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier