summaryrefslogtreecommitdiff
path: root/sys/net/pfvar.h
AgeCommit message (Expand)Author
2003-02-08Add scrub option 'random-id', which replaces IP IDs with random valuesDaniel Hartmeier
2003-01-21Support for TCP window scaling (RFC 1323). ok frantzen@Daniel Hartmeier
2003-01-15Fix a buglet when one "creates" a table which is already in theCedric Berger
2003-01-10Fix adding and deleting addresses in a table when there is a conflict withCedric Berger
2003-01-09(whitespace) KNF, re-fold -w 80Daniel Hartmeier
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
2003-01-06Move initialisation of radix table globals in pfr_initialize()Cedric Berger
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
2003-01-04move noroute from flag in pf_rule_addr into type in pf_addr_wrap.Daniel Hartmeier
2003-01-031) pfr_insert_kentries() cannot return ENOMEM anymore -> make it void.Cedric Berger
2003-01-02Remove explicit numbering of enums.Ryan Thomas McBride
2003-01-01use a #define for the default state table sizeHenning Brauer
2003-01-01Behaves correctly when duplicate addresses are given in the same ioctl.Cedric Berger
2003-01-01Remove skip step for action (scrub vs. non-scrub), as scrub rules areDaniel Hartmeier
2002-12-31Split scrub rules out from the filter rules in the kernel.Ryan Thomas McBride
2002-12-29Add support for radix tables for source and destination of PF rules.Cedric Berger
2002-12-23Change from array to single pf_pabuf (no longer need multiple buffers asRyan Thomas McBride
2002-12-22pfioc_changealtq is not needed anymore; queues will eventually beRyan Thomas McBride
2002-12-22mv PF_RULESET_MAX into the enum, slightly less confusing.Ryan Thomas McBride
2002-12-18Store translation rule pointer in state entries, so pfctl -vsn can printDaniel Hartmeier
2002-12-18little styleHenning Brauer
2002-12-18Pass skip step values through ioctl interface, pfctl -vvsr shows them,Daniel Hartmeier
2002-12-17Merge pf_nat/pf_binat/pf_rdr structs into pf_rule. Simplifies code, allowsRyan Thomas McBride
2002-12-16add options for 2 more queueing disciplines, PRIQ and HFSC.Kenjiro Cho
2002-12-13add pqueue and pqid to pf_rule.Henning Brauer
2002-12-12minor KNFHenning Brauer
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
2002-12-01- Clean up pf_ioctl mainly by adding new functions to handle cleaning andRyan Thomas McBride
2002-11-29expose state table changesMichael Shalayeff
2002-11-28- MD5 too slow, replace with pf_hash (based on hash from if_bridge.c)Ryan Thomas McBride
2002-11-26pass struct pfioc_changeaddr to DIOCCHANGEADDRRyan Thomas McBride
2002-11-23KNFTheo de Raadt
2002-11-23kernel code to allow multiple redirection addresses to be specified for natRyan Thomas McBride
2002-11-02Make PF_ANEQ(), PF_ANEQ() and PF_AZERO() check the whole address if afRyan Thomas McBride
2002-10-22Convert "int af" and "u_int8_t af" declarations and function argumentsRyan Thomas McBride
2002-10-20Move pf_compare_(rules|nats|binats|rdrs) to pf_ioctl.c. Simplifies andRyan Thomas McBride
2002-10-14Allow one to specify a netblock in a binat rule:Henning Brauer
2002-10-10padd pf_state; dhartmei@ okMichael Shalayeff
2002-10-08the first step of pf/altq merge.Kenjiro Cho
2002-10-07set block-policy [drop|return]Henning Brauer
2002-10-07support a generic returnHenning Brauer
2002-10-07make return-icmp work for rules covering both v4 and v6Henning Brauer
2002-10-07use a new rule_flag PFRULE_RETURNICMP to decide wether to return-icmp or notHenning Brauer
2002-10-07Add 'reply-to' to filter rules, similar to route-to, but applying toDaniel Hartmeier
2002-10-05Allow filtering based on IP header's tos field.Daniel Hartmeier
2002-08-12Use state tree instead of separate (flat) list to find NAT proxy ports,Daniel Hartmeier
2002-07-15add u_int8_t ifnot to struct pf_rule to support matching packets on anyHenning Brauer
2002-06-11split the grammar of scrub(fragcache) into scrub ... 'fragment reassemble',Mike Frantzen
2002-06-11enumerate UDP and OTHER state levels (similar to tcp_fsm.h)Mike Frantzen