summaryrefslogtreecommitdiff
path: root/sys/net/pf_norm.c
AgeCommit message (Expand)Author
2011-07-18unbreak set-tos for ipv6; reported by babut at yandex dot ru,Mike Belopuhov
2011-07-07There were two loops in pf_setup_pdesc() and pf_normalize_ip6()Alexander Bluhm
2011-07-05Instead of passing the ip header and mbuf to pf_reassemble(), lookupAlexander Bluhm
2011-07-05add missing ifdefs for INET6; diff from form, ok henning, bluhm, claudioMike Belopuhov
2011-07-03Refactor the fragment handling in pf_setup_pdesc() so that AF_INETClaudio Jeker
2011-06-21There is no need to handle fragmented TCP reset packets in a specialAlexander Bluhm
2011-06-20More cleanup in pf_test/pf_test6 this time mostly the fragmentClaudio Jeker
2011-05-24Merge pf_scrub_ip() and pf_scrub_ip6() into a single function. CallClaudio Jeker
2011-04-23pf_scrub_ip() does not modify the given mbuf pointer. So don'tAlexander Bluhm
2011-04-04stop fiddling with the ip checksum here too, it is always recalculatedHenning Brauer
2011-03-24Reassemble IPv6 fragments in pf. In the forward case, pf refragmentsAlexander Bluhm
2011-03-23Extract the address family independent functions from pf fragmentAlexander Bluhm
2011-02-01The check for invalid IPv6 fragment size in pf_normalize_ip6() wasAlexander Bluhm
2011-01-20The reason accounting in pf_reassemble() was not correct. ChangeAlexander Bluhm
2011-01-19Give pf_normalize_ip() the same 3 way semantics as pf_test().Alexander Bluhm
2011-01-06Put htons() around ip_randomid() for pf scrub random-id to make itAlexander Bluhm
2010-12-31Remove dead code from pf_norm.c. The fragment cache is some leftoverAlexander Bluhm
2010-07-08Use correct alignment for scrub max-mss. Based on a diff from deraadt.Stuart Henderson
2010-07-02m_copyback can fail to allocate memory, but is a void fucntion so gymnasticsBret Lambert
2010-01-18Convert pf debug logging to using log()/addlog(), a single standardisedRyan Thomas McBride
2009-09-01Clear the IP_DF bit if no-df is enabled, not if it is not enabled.Joel Sing
2009-07-21pf_scrub_ip/ip6 prototypes are already in pfvar.hHenning Brauer
2009-06-25scrub_flags is a u_int8_t, but PFSTATE_SCRUB_TCP is 0x0100, so theStuart Henderson
2009-04-07after i took everything in this fiule apart and reassembled with a lot ofHenning Brauer
2009-04-061) scrub rules are completely gone.Henning Brauer
2009-01-31unbreak ! INET6 case by sprinking #ifdef INET6Henning Brauer
2009-01-29move some code around in preparation for future work:Henning Brauer
2008-05-07scrub packets based on tags; ok henningMarkus Friedl
2008-05-07allow setting TOS with scrub; ok mcbride, claudioMarkus Friedl
2007-12-30In pf_normalize_tcpopt() call pf_pull_hdr() address family safe.Marcus Glocker
2007-12-30Make "scrub max-mss" rule work correctly;Marcus Glocker
2007-05-28double pf performance.Henning Brauer
2007-05-26More comment typos from Diego Casati. Including winners like funtion, allmost,Kenneth R Westerback
2006-04-16After fragment reassembly/trimming, pf must revalidate the mbuf tag of theChristopher Pascoe
2006-03-25fixup IP checksum when modifying IP header fields, based on a patch inDaniel Hartmeier
2006-03-14implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4)Damien Miller
2006-01-18fix a bug in the fragment cache (used for 'scrub fragment crop/drop-ovl',Daniel Hartmeier
2005-10-17make pf use one mbuf tag instead of 6 distinct ones. use a little structHenning Brauer
2005-08-06correct some spellosChristopher Pascoe
2005-06-13make the packet and byte counters on rules and src nodes per direction,Henning Brauer
2005-05-27log two pairs of uid/pid through pflog: the uid/pid of the process thatDaniel Hartmeier
2005-05-22honour the 'no' in 'no scrub' rules for IP normalizations. found byDaniel Hartmeier
2005-05-21clean up and rework the interface absraction code big time, rip out multipleHenning Brauer
2004-09-21Implement "no scrub" to allow exclusion of specific traffic from scrub rules.Aaron Campbell
2004-07-17Repair breakage from the hackathon's time conversion. Using the timestampMike Frantzen
2004-07-11backout IPv6 reass-on-scrub patch (more work needs to be done).Jun-ichiro itojun Hagino
2004-07-05KNFHenning Brauer
2004-07-03quick workaround until proper PF_FORWARD reass gets implemented.Jun-ichiro itojun Hagino
2004-06-25correct "scrub in" behavior for IPv6.Jun-ichiro itojun Hagino
2004-06-25IPv6 reassembly on "scrub" directive.Jun-ichiro itojun Hagino