summaryrefslogtreecommitdiff
path: root/sys/net/pf_norm.c
AgeCommit message (Expand)Author
2018-09-04Forgot to rename pf_frent_holes() prototype in previous commit.Alexander Bluhm
2018-09-04Avoid traversing the list of fragment entris to check whether theAlexander Bluhm
2018-06-18Refactor the six ways to find TCP options into one new function. As a result:Richard Procter
2018-02-06some finger muscle workout:Henning Brauer
2017-06-26Fragments for a single connection (a combination of proto,src,dst,af)Alexander Bluhm
2017-06-24To avoid packet loss due to reuse of the 16 bit IPv4 fragment id,Alexander Bluhm
2017-06-19When dealing with mbuf pointers passed down as function parameters,Alexander Bluhm
2017-06-05- let's add PF_LOCK()Alexandr Nedvedicky
2017-05-15Enable the NET_LOCK(), take 3.Martin Pieuchot
2017-04-23Some of the LOG_NOTICE messages from PF were seen in normal operationsStuart Henderson
2017-03-17Revert the NET_LOCK() and bring back pf's contention lock for release.Martin Pieuchot
2017-01-30removes the pf_consistency_lock and protects the users withSebastian Benoit
2016-12-29In pf_refragment6() use the valid route from pf_route6() insteadAlexander Bluhm
2016-12-29Use __func__ instead of explicit function name in panic messages.Alexander Bluhm
2016-12-28Fix white spaces. No binary change.Alexander Bluhm
2016-11-22Fold union pf_headers buffer into struct pf_pdesc (enabled by pfvar_priv.h).Richard Procter
2016-11-21Follow RFC 5722 more strictly when handling overlapping fragmentsAlexander Bluhm
2016-10-26Put union pf_headers and struct pf_pdesc into separate header fileAlexander Bluhm
2016-09-27roll back turning RB into RBT until i get better at this process.David Gwynne
2016-09-27move pf from the RB macros to the RBT functions.David Gwynne
2016-09-15all pools have their ipl set via pool_setipl, so fold it into pool_init.David Gwynne
2016-09-02pool_setipl for pf bitsDavid Gwynne
2016-08-24Kill ip6_forward_rt reducing differences between v4 and v6.Martin Pieuchot
2016-08-17Reintroduce 5.3-style checksum modification to preserve end-to-end checksumsprocter
2016-06-15Kill nd6_output(), it doesn't do anything since the resolution logicMartin Pieuchot
2016-06-15There's no need to convert values returned by arc4random to the networkMike Belopuhov
2016-05-31Do not call nd6_output() without route entry argument.Martin Pieuchot
2016-05-28Backout pf.c r1.972, pf_norm.c r1.184, ok claudioStuart Henderson
2016-05-24Do not call nd6_output() without route entry argument.Martin Pieuchot
2015-11-24No need for <net/if_types.h>Martin Pieuchot
2015-09-10Kill two simple in6_ifstat_inc().Martin Pieuchot
2015-08-19PF must keep IPv6 fragment size as chosen by sender also for packets,Alexandr Nedvedicky
2015-07-19unused arguments at pf_normalize_tcp_init() and pf_refragment6()sashan
2015-07-18INET/INET6 address family check should be unified in PFsashan
2015-05-05Eliminate rabid semicolonChris Cappuccio
2015-04-29In most cases, IP fragments do not have an Ethernet padding. SoAlexander Bluhm
2015-04-17On Ethernet packets have a minimal length, so very short packetsAlexander Bluhm
2015-03-14Remove some includes include-what-you-use claims don'tJonathan Gray
2015-02-08pf normalization code was in dire need of style normalization.Henning Brauer
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-05Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>.Martin Pieuchot
2014-11-18move arc4random prototype to systm.h. more appropriate for most codeTed Unangst
2014-10-10s/lenght/length/ in commentsStuart Henderson
2014-09-08remove uneeded route.h includesJonathan Gray
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-13When reassembled IPv6 fragments are NATed or RDRed by pf, theAlexander Bluhm
2014-03-27When enforcing TOS (Traffic Class), preserve the ECN bits, just as we doJeremie Courreges-Anglas
2014-01-22one more absolutely obvious bcopy -> memcpyHenning Brauer
2013-11-16Remove dead assignments and now unused variables.Charles Longeau