| Age | Commit message (Expand) | Author |
|---|
| 2024-07-14 | Unlock IPv6 sysctl net.inet6.ip6.forwarding from net lock. | Alexander Bluhm |
| 2024-07-04 | Implement IPv6 forwarding IPsec only. | Alexander Bluhm |
| 2024-06-20 | Read IPv6 forwarding value only once while processing a packet. | Alexander Bluhm |
| 2024-04-22 | Show pf fragment reassembly counters. | Alexander Bluhm |
| 2023-10-10 | Remove dead code in pf_pull_hdr(). | Alexander Bluhm |
| 2023-07-06 | big update to pfsync to try and clean up locking in particular. | David Gwynne |
| 2023-05-07 | I preparation for TSO in software, cleanup the fragment code. Use | Alexander Bluhm |
| 2022-11-06 | move pfsync_state_import in if_pfsync.c to pf_state_import in pf.c | David Gwynne |
| 2022-10-10 | Recalculate checksum of normalised packet | Bjorn Ketelaars |
| 2022-08-22 | Protect pf_reassemble() with pf fragment lock. When the pool limit | Alexander Bluhm |
| 2021-03-10 | spelling | Jonathan Gray |
| 2021-03-01 | Refactor ip_fragment() and ip6_fragment(). Use a mbuf list to | Alexander Bluhm |
| 2021-02-22 | When cutting of the head of an overlapping fragment during pf | Alexander Bluhm |
| 2021-02-09 | Activate use of PF_LOCK() by removing the WITH_PF_LOCK ifdefs. | Patrick Wildt |
| 2020-06-24 | kernel: use gettime(9)/getuptime(9) in lieu of time_second(9)/time_uptime(9) | cheloha |
| 2019-02-28 | IPv6 fragments with malformed extension headers could be erroneously | Alexander Bluhm |
| 2018-10-23 | Make pf compile without DIAGNOSTIC again | Reyk Floeter |
| 2018-09-10 | Instead of calculating the mbuf packet header length here and there, | Alexander Bluhm |
| 2018-09-10 | During fragment reassembly, mbuf chains with packet headers were | Alexander Bluhm |
| 2018-09-10 | Limit the fragment entry queue length to 64 per bucket. So we have | Alexander Bluhm |
| 2018-09-08 | Split the pf(4) fragment reassembly queue into smaller parts. | Alexander Bluhm |
| 2018-09-04 | Forgot to rename pf_frent_holes() prototype in previous commit. | Alexander Bluhm |
| 2018-09-04 | Avoid traversing the list of fragment entris to check whether the | Alexander Bluhm |
| 2018-06-18 | Refactor the six ways to find TCP options into one new function. As a result: | Richard Procter |
| 2018-02-06 | some finger muscle workout: | Henning Brauer |
| 2017-06-26 | Fragments for a single connection (a combination of proto,src,dst,af) | Alexander Bluhm |
| 2017-06-24 | To avoid packet loss due to reuse of the 16 bit IPv4 fragment id, | Alexander Bluhm |
| 2017-06-19 | When dealing with mbuf pointers passed down as function parameters, | Alexander Bluhm |
| 2017-06-05 | - let's add PF_LOCK() | Alexandr Nedvedicky |
| 2017-05-15 | Enable the NET_LOCK(), take 3. | Martin Pieuchot |
| 2017-04-23 | Some of the LOG_NOTICE messages from PF were seen in normal operations | Stuart Henderson |
| 2017-03-17 | Revert the NET_LOCK() and bring back pf's contention lock for release. | Martin Pieuchot |
| 2017-01-30 | removes the pf_consistency_lock and protects the users with | Sebastian Benoit |
| 2016-12-29 | In pf_refragment6() use the valid route from pf_route6() instead | Alexander Bluhm |
| 2016-12-29 | Use __func__ instead of explicit function name in panic messages. | Alexander Bluhm |
| 2016-12-28 | Fix white spaces. No binary change. | Alexander Bluhm |
| 2016-11-22 | Fold union pf_headers buffer into struct pf_pdesc (enabled by pfvar_priv.h). | Richard Procter |
| 2016-11-21 | Follow RFC 5722 more strictly when handling overlapping fragments | Alexander Bluhm |
| 2016-10-26 | Put union pf_headers and struct pf_pdesc into separate header file | Alexander Bluhm |
| 2016-09-27 | roll back turning RB into RBT until i get better at this process. | David Gwynne |
| 2016-09-27 | move pf from the RB macros to the RBT functions. | David Gwynne |
| 2016-09-15 | all pools have their ipl set via pool_setipl, so fold it into pool_init. | David Gwynne |
| 2016-09-02 | pool_setipl for pf bits | David Gwynne |
| 2016-08-24 | Kill ip6_forward_rt reducing differences between v4 and v6. | Martin Pieuchot |
| 2016-08-17 | Reintroduce 5.3-style checksum modification to preserve end-to-end checksums | procter |
| 2016-06-15 | Kill nd6_output(), it doesn't do anything since the resolution logic | Martin Pieuchot |
| 2016-06-15 | There's no need to convert values returned by arc4random to the network | Mike Belopuhov |
| 2016-05-31 | Do not call nd6_output() without route entry argument. | Martin Pieuchot |
| 2016-05-28 | Backout pf.c r1.972, pf_norm.c r1.184, ok claudio | Stuart Henderson |
| 2016-05-24 | Do not call nd6_output() without route entry argument. | Martin Pieuchot |
