summaryrefslogtreecommitdiff
path: root/sys/net/pfvar.h
AgeCommit message (Expand)Author
2015-02-15Rather than using 0xff as a placeholder for "don't check prio", use 0xff toStuart Henderson
2015-02-12change log(matches) semantics slightly to make it more useful. since itHenning Brauer
2015-02-10include the "set prio" values.Henning Brauer
2015-02-10since we inherit prio (as in, the queuing priority) from outside sources,Henning Brauer
2015-02-07make RB_PROTOTYPE usage ISO C compliant by removing useless semicolonsMartin Pelikan
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2015-01-15Stop including <sys/param.h> and other stuff. Assume this will be includedTheo de Raadt
2014-12-23unifdef some more INET. v4 4life.Ted Unangst
2014-12-19Support source-hash and random with tables and dynifs; not just pools.Reyk Floeter
2014-12-19add messages to #error so we know what's what (and so unifdef doesn't poop)Ted Unangst
2014-09-08When logging a packet to a listener on the pflog0 interface, theAlexander Bluhm
2014-08-12Finally implement what's stated in the man page regarding parentMike Belopuhov
2014-07-02better indentationMike Belopuhov
2014-06-25pf_translate doesn't use the mbuf argument anymore.Mike Belopuhov
2014-04-22Remove some altq tentacles.Martin Pieuchot
2014-04-19shrink pf by 445 lines.Henning Brauer
2014-01-21introduce a way to match "any" interface, excluding loopback ones.Henning Brauer
2014-01-20support negated matches on the rcvif, ok dlg bennoHenning Brauer
2014-01-03Switch frequently allocated structs from malloc(M_DEVBUF) to separate pools.pelikan
2014-01-03Make queues disappear correctly on interfaces being destroyed.pelikan
2013-12-22change pf_osfp_entry strings to unsigned, to help userlandTheo de Raadt
2013-11-19provide forward declarations for structures ifnet and ifg_group;Mike Belopuhov
2013-10-12new bandwidth shaping subsystem, kernel sideHenning Brauer
2013-10-12give tagname2tag and its siblings an extra "create" parameter. if 1, itHenning Brauer
2013-07-23Do not reset the fragment timeout each time a fragment arrives.Alexander Bluhm
2013-07-05Collect and display 'match' counters for pf tables.Bret Lambert
2013-07-04Re-commit: use time_t for storing time_t values. This is an ABIPhilip Guenther
2013-07-02Revert previous: sizeof(time_t) != sizeof(long) on LP64, so there wasPhilip Guenther
2013-07-02Use time_t for storing time_t values. No change to the underlyingPhilip Guenther
2013-06-26put the cksum diff back, of course with the bug fixed where we couldHenning Brauer
2013-06-04add a pointer to the protocol checksum header field to pf_pdesc and setHenning Brauer
2013-06-03put back the match member to the anchor stack struct - userland (pfctl)Henning Brauer
2013-06-03fix anchor quick with nested anchors. we lost the quick flag as soon asHenning Brauer
2013-06-01pf_step_{into,out_of}_anchor() are only ever called from pf_test_rule()Henning Brauer
2013-05-10Since pf_state_key_attach can decide to free the provided stateMike Belopuhov
2013-05-03Export ingress/egress interface index in pflow(4).Florian Obser
2013-03-11Add a separate "translation" counter and use this rather than "memory"Stuart Henderson
2013-01-17first or second coming, commie or not commie, one m in coming is sufficientHenning Brauer
2012-12-29pass pf_pool directly to pfr_pool_get(); simplifies the API;Markus Friedl
2012-11-06backout csum diff for the moment, requested by theoHenning Brauer
2012-11-01redo most of the protocol (tcp/udp/...) checksum handlingHenning Brauer
2012-10-30Use time_uptime for expiration values as time_second can be skewed atFlorian Obser
2012-10-08Forward declare struct m_tag in netinet/ip_ipsp.h so we don't need toCamiel Dobbelaar
2012-10-05include sys/mbuf.hCamiel Dobbelaar
2012-09-20Lower pf frags limit to not risk running out of mbuf clustersCamiel Dobbelaar
2012-09-18prio 0 is valid, therefore, I chose an "impossible" value for prio meaningHenning Brauer
2012-07-26rename all_state_flags to state_flags to finish the transitionMike Belopuhov
2012-07-13remove confuzzling commentHenning Brauer
2012-07-10define a PFSTATE_SCRUBMASK. relying on numeric order of flags is stupidHenning Brauer
2012-07-07rename prio in struct pf_rule and related structs to set_prio so it isHenning Brauer