summaryrefslogtreecommitdiff
path: root/sys/net/pf_lb.c
AgeCommit message (Expand)Author
2023-05-10nat-to may fail to insert state due to conflict on chosen sourceAlexandr Nedvedicky
2023-01-04move the pf_state_tree_id type from pfvar.h to pfvar_priv.h.David Gwynne
2022-08-31make kernel build without INET6 againSebastian Benoit
2022-08-03Bug was reported by Chriss Cappucio. It has turned out my earlier changeAlexandr Nedvedicky
2022-02-16nat-to round-robin without a pool should fallback to POOL_NONEAlexandr Nedvedicky
2021-12-16fix zero division found by syzkaller. The sanity checks in pf(4) ioctlsAlexandr Nedvedicky
2020-12-12Correct wrong type of variable and remove useless casts.jan
2020-07-29Fix previous commit which referred wrong address and returned wrongYASUOKA Masahiko
2020-07-28Use the table on root always if current table is not active.YASUOKA Masahiko
2020-07-24Increase state counter for least-states when the address is selectedYASUOKA Masahiko
2019-07-02When source address tracking record is used for "route-to", the nextYASUOKA Masahiko
2018-12-10Remove useless macroskn
2018-02-06some finger muscle workout:Henning Brauer
2017-07-12Use a 32 bit variable to detect integer overflow when searching forAlexander Bluhm
2017-04-23Some of the LOG_NOTICE messages from PF were seen in normal operationsStuart Henderson
2017-02-08Remove an uneeded NULL test which was after a deref.Jonathan Gray
2016-10-26Put union pf_headers and struct pf_pdesc into separate header fileAlexander Bluhm
2016-09-27roll back turning RB into RBT until i get better at this process.David Gwynne
2016-09-27move pf from the RB macros to the RBT functions.David Gwynne
2016-07-19remove wrong and misleading comment, ok phesslerHenning Brauer
2016-06-24The function pf_get_sport() did work for out rules only. Make itAlexander Bluhm
2016-06-15There's no need to convert values returned by arc4random to the networkMike Belopuhov
2015-11-24No need for <net/if_types.h>Martin Pieuchot
2015-10-15When using a pf rule with both nat-to and rdr-to, it could happenAlexander Bluhm
2015-10-13- pf_insert_src_node(): global argument (arg6) is useless, functionAlexandr Nedvedicky
2015-08-03A recently added sanity check panic in pf_postprocess_addr() wasJonathan Gray
2015-07-20Add some panics to default paths where code later assumes a non defaultJonathan Gray
2015-07-18msg.mpisashan
2015-07-18INET/INET6 address family check should be unified in PFsashan
2015-07-17fix the indentation of a block of code, no binary changeJonathan Gray
2015-07-16Expand ancient NTOHL/NTOHS/HTONS/HTONL macros.Martin Pieuchot
2015-06-03Fix pf_map_addr() not to cause dividing by 0. This fixes problem whenYASUOKA Masahiko
2015-03-14Remove some includes include-what-you-use claims don'tJonathan Gray
2015-01-06init a potentially uninitialised var in pf_postprocess_addrJonathan Gray
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-19Support source-hash and random with tables and dynifs; not just pools.Reyk Floeter
2014-12-19Comment is no longer true, remove it.Ryan Thomas McBride
2014-12-18use siphash for pf_lb. for ipv6, we stretch it out a bit, but good enough.Ted Unangst
2014-11-18move arc4random prototype to systm.h. more appropriate for most codeTed Unangst
2014-11-10Split the logic for the ICMP and ICMP6 case in pf_get_sport(). TheAlexander Bluhm
2014-09-08remove uneeded route.h includesJonathan Gray
2014-08-14fix logging strings (correct function name via __func__ + a typo)Bret Lambert
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-02better indentation; no functional changeMike Belopuhov
2013-10-30translate icmpv6 echo id's the same way we do for icmpv4; ok henningMike Belopuhov
2013-10-30add a comment describing why do we call pf_map_addr again if portMike Belopuhov
2013-10-24Remove the number of in6_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-23Remove the number of in_var.h inclusions by moving some functions andMartin Pieuchot
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-03-28no need for a lot of code to include proc.hTed Unangst