summaryrefslogtreecommitdiff
path: root/sys/net/pf_norm.c
AgeCommit message (Expand)Author
2016-12-29In pf_refragment6() use the valid route from pf_route6() insteadAlexander Bluhm
2016-12-29Use __func__ instead of explicit function name in panic messages.Alexander Bluhm
2016-12-28Fix white spaces. No binary change.Alexander Bluhm
2016-11-22Fold union pf_headers buffer into struct pf_pdesc (enabled by pfvar_priv.h).Richard Procter
2016-11-21Follow RFC 5722 more strictly when handling overlapping fragmentsAlexander Bluhm
2016-10-26Put union pf_headers and struct pf_pdesc into separate header fileAlexander Bluhm
2016-09-27roll back turning RB into RBT until i get better at this process.David Gwynne
2016-09-27move pf from the RB macros to the RBT functions.David Gwynne
2016-09-15all pools have their ipl set via pool_setipl, so fold it into pool_init.David Gwynne
2016-09-02pool_setipl for pf bitsDavid Gwynne
2016-08-24Kill ip6_forward_rt reducing differences between v4 and v6.Martin Pieuchot
2016-08-17Reintroduce 5.3-style checksum modification to preserve end-to-end checksumsprocter
2016-06-15Kill nd6_output(), it doesn't do anything since the resolution logicMartin Pieuchot
2016-06-15There's no need to convert values returned by arc4random to the networkMike Belopuhov
2016-05-31Do not call nd6_output() without route entry argument.Martin Pieuchot
2016-05-28Backout pf.c r1.972, pf_norm.c r1.184, ok claudioStuart Henderson
2016-05-24Do not call nd6_output() without route entry argument.Martin Pieuchot
2015-11-24No need for <net/if_types.h>Martin Pieuchot
2015-09-10Kill two simple in6_ifstat_inc().Martin Pieuchot
2015-08-19PF must keep IPv6 fragment size as chosen by sender also for packets,Alexandr Nedvedicky
2015-07-19unused arguments at pf_normalize_tcp_init() and pf_refragment6()sashan
2015-07-18INET/INET6 address family check should be unified in PFsashan
2015-05-05Eliminate rabid semicolonChris Cappuccio
2015-04-29In most cases, IP fragments do not have an Ethernet padding. SoAlexander Bluhm
2015-04-17On Ethernet packets have a minimal length, so very short packetsAlexander Bluhm
2015-03-14Remove some includes include-what-you-use claims don'tJonathan Gray
2015-02-08pf normalization code was in dire need of style normalization.Henning Brauer
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-05Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>.Martin Pieuchot
2014-11-18move arc4random prototype to systm.h. more appropriate for most codeTed Unangst
2014-10-10s/lenght/length/ in commentsStuart Henderson
2014-09-08remove uneeded route.h includesJonathan Gray
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-13When reassembled IPv6 fragments are NATed or RDRed by pf, theAlexander Bluhm
2014-03-27When enforcing TOS (Traffic Class), preserve the ECN bits, just as we doJeremie Courreges-Anglas
2014-01-22one more absolutely obvious bcopy -> memcpyHenning Brauer
2013-11-16Remove dead assignments and now unused variables.Charles Longeau
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-10-01Format string fixes: Cast time_t to long longStefan Fritsch
2013-07-23Do not reset the fragment timeout each time a fragment arrives.Alexander Bluhm
2013-06-26put the cksum diff back, of course with the bug fixed where we couldHenning Brauer
2013-06-17Before pulling the TCP options from the mbuf onto the stack, do anAlexander Bluhm
2012-11-06backout csum diff for the moment, requested by theoHenning Brauer
2012-11-01redo most of the protocol (tcp/udp/...) checksum handlingHenning Brauer
2012-10-30Use time_uptime for expiration values as time_second can be skewed atFlorian Obser
2012-05-12Ignore/preserve ECN bits on ToS matching and scrubbing.Marco Pfatschbacher
2012-02-03The kernel did not compile without INET6. Put some #ifdefs intoAlexander Bluhm
2012-01-26Clean up the pf normalization code:Alexander Bluhm
2012-01-23Do not keep state when dropping overlapping IPv6 fragments in pfAlexander Bluhm