summaryrefslogtreecommitdiff
path: root/sys/net/pfvar.h
AgeCommit message (Expand)Author
2013-11-19provide forward declarations for structures ifnet and ifg_group;Mike Belopuhov
2013-10-12new bandwidth shaping subsystem, kernel sideHenning Brauer
2013-10-12give tagname2tag and its siblings an extra "create" parameter. if 1, itHenning Brauer
2013-07-23Do not reset the fragment timeout each time a fragment arrives.Alexander Bluhm
2013-07-05Collect and display 'match' counters for pf tables.Bret Lambert
2013-07-04Re-commit: use time_t for storing time_t values. This is an ABIPhilip Guenther
2013-07-02Revert previous: sizeof(time_t) != sizeof(long) on LP64, so there wasPhilip Guenther
2013-07-02Use time_t for storing time_t values. No change to the underlyingPhilip Guenther
2013-06-26put the cksum diff back, of course with the bug fixed where we couldHenning Brauer
2013-06-04add a pointer to the protocol checksum header field to pf_pdesc and setHenning Brauer
2013-06-03put back the match member to the anchor stack struct - userland (pfctl)Henning Brauer
2013-06-03fix anchor quick with nested anchors. we lost the quick flag as soon asHenning Brauer
2013-06-01pf_step_{into,out_of}_anchor() are only ever called from pf_test_rule()Henning Brauer
2013-05-10Since pf_state_key_attach can decide to free the provided stateMike Belopuhov
2013-05-03Export ingress/egress interface index in pflow(4).Florian Obser
2013-03-11Add a separate "translation" counter and use this rather than "memory"Stuart Henderson
2013-01-17first or second coming, commie or not commie, one m in coming is sufficientHenning Brauer
2012-12-29pass pf_pool directly to pfr_pool_get(); simplifies the API;Markus Friedl
2012-11-06backout csum diff for the moment, requested by theoHenning Brauer
2012-11-01redo most of the protocol (tcp/udp/...) checksum handlingHenning Brauer
2012-10-30Use time_uptime for expiration values as time_second can be skewed atFlorian Obser
2012-10-08Forward declare struct m_tag in netinet/ip_ipsp.h so we don't need toCamiel Dobbelaar
2012-10-05include sys/mbuf.hCamiel Dobbelaar
2012-09-20Lower pf frags limit to not risk running out of mbuf clustersCamiel Dobbelaar
2012-09-18prio 0 is valid, therefore, I chose an "impossible" value for prio meaningHenning Brauer
2012-07-26rename all_state_flags to state_flags to finish the transitionMike Belopuhov
2012-07-13remove confuzzling commentHenning Brauer
2012-07-10define a PFSTATE_SCRUBMASK. relying on numeric order of flags is stupidHenning Brauer
2012-07-07rename prio in struct pf_rule and related structs to set_prio so it isHenning Brauer
2012-04-03Fix kernel compilation with pf but without pfsync pseudo-device byMike Belopuhov
2012-02-03The kernel did not compile without INET6. Put some #ifdefs intoAlexander Bluhm
2012-01-26Clean up the pf normalization code:Alexander Bluhm
2012-01-16Pass struct pf_pdesc to pf_walk_option6() and pf_walk_header6() toAlexander Bluhm
2012-01-15Calling pf_normalize_ip() from pf_setup_pdesc() was bad as theAlexander Bluhm
2011-12-12fixup af-to regression with match rulesMike Belopuhov
2011-11-29use a u_int64_t for the state id in pfsync_state. this makes it consistentDavid Gwynne
2011-11-28deprecate PFTM_UNTIL_PACKET. nothing in the tree uses it, andDavid Gwynne
2011-11-26Apply route-to to deferred packet; without this the first packet of aRyan Thomas McBride
2011-10-13Since the IPv6 madness is not enough introduce NAT64 -- which is actuallyClaudio Jeker
2011-10-07rename some vars and functionsHenning Brauer
2011-10-07pf_poolqueue is long dead, remove corpses. from eurobsdcon, ryan okHenning Brauer
2011-09-28As requested by henning, move the mbuf pointer into struct pf_pdesc.Alexander Bluhm
2011-09-22As I have touched half of pf lines anyway, fix whitespaces now.Alexander Bluhm
2011-09-20Put kif and dir into pdesc an use this instead of passing the valuesAlexander Bluhm
2011-09-19Consolidate pf function parameters. Move off and hdrlen into pdescAlexander Bluhm
2011-09-18Move the pdesc initialization code into pf_setup_pdesc(). UnifyAlexander Bluhm
2011-09-18Move the call to pf_test_rule() for fragments that have not beenAlexander Bluhm
2011-09-17The pd->ip_sum and pd->proto_sum fields are not needed. ReplaceAlexander Bluhm
2011-08-30Add support for one shot rules that remove themselves from an activeMike Belopuhov
2011-08-03someone (*cough*henning*cough*) made pf_state.state_flags a u_int16_tDavid Gwynne