Age | Commit message (Expand) | Author |
2012-05-12 | Ignore/preserve ECN bits on ToS matching and scrubbing. | Marco Pfatschbacher |
2012-05-12 | Fix tcpdump for etherip packets. | Marco Pfatschbacher |
2012-05-09 | backout 1.134 since it introduced a use-after-free for routing entries; | Markus Friedl |
2012-05-05 | pipex_ip6_input() called IF_DROP() with incorrect queue. | YASUOKA Masahiko |
2012-04-22 | Remove redundant returns from functions returning void. Wrap return | YASUOKA Masahiko |
2012-04-14 | Use DLT_LOOP for all tunneling interfaces. | YASUOKA Masahiko |
2012-04-11 | fix all the suser calls which pass an incorrect p_acflag argument; | Mike Belopuhov |
2012-04-11 | SLIST_REMOVE_NEXT -> SLIST_REMOVE_AFTER for better consistency and | Christian Weisgerber |
2012-04-07 | remove superfluous return, ok mikeb | Camiel Dobbelaar |
2012-04-04 | pipex hook in udp_usrreq() mistakenly assumed that `inp' is connected. | YASUOKA Masahiko |
2012-04-03 | Fix kernel compilation with pf but without pfsync pseudo-device by | Mike Belopuhov |
2012-03-28 | pfkey needs some p_p->ps_pid too. OK deraadt@ guenther@ | Claudio Jeker |
2012-03-28 | Another pid that needs to be the process pid and not the thread one. | Claudio Jeker |
2012-03-28 | More p_pid to p_p->ps_pid updates. OK deraadt@, guenther@ | Claudio Jeker |
2012-03-28 | Use p_p->ps_pid as pid in the route header instead of the thread pid. Give | Claudio Jeker |
2012-03-26 | Add DLT_PPP_SERIAL and DLT_C_HDLC to bpf.h even though the system will not | Claudio Jeker |
2012-03-17 | remove IP_JUMBO, SO_JUMBO, and RTF_JUMBO. | David Gwynne |
2012-02-05 | Improve the ICMPv6 direction check | Mike Belopuhov |
2012-02-03 | The kernel did not compile without INET6. Put some #ifdefs into | Alexander Bluhm |
2012-02-02 | add netflow v9/ipfix support to pflow(4). | Sebastian Benoit |
2012-01-31 | add missing calls to pf_pkt_addr_changed(); ok henning@ | Markus Friedl |
2012-01-29 | Remove fastq from struct sppp. Missed when I committed if_spppsubr.c r1.96, | Stuart Henderson |
2012-01-28 | improve icmp virtual id generation for ND and MLD packets so that | Mike Belopuhov |
2012-01-28 | try to lookup the icmp state based on a correct packet descriptor; | Mike Belopuhov |
2012-01-28 | Remove a horrible sppp(4)-specific "fast queue" used for tcp ports 21 23 513. | Stuart Henderson |
2012-01-27 | If some length checks in pflog_bpfcopy() failed, the function | Alexander Bluhm |
2012-01-26 | Clean up the pf normalization code: | Alexander Bluhm |
2012-01-26 | Minor fixes for pf_walk_header6(): | Alexander Bluhm |
2012-01-26 | when table content changes we need to reset index | Mike Belopuhov |
2012-01-23 | Do not keep state when dropping overlapping IPv6 fragments in pf | Alexander Bluhm |
2012-01-23 | The ingress filter of pipex and npppd become configurable and disabled | YASUOKA Masahiko |
2012-01-20 | Ansify ppp... function definitions. | Alexander Bluhm |
2012-01-19 | Teach pppoe(4) about RFC 4638. This allows negotiating increased MTU with | Stuart Henderson |
2012-01-18 | Remove dead assignments and newly created unused variables. | Charles Longeau |
2012-01-18 | Fix a problem that causes LCP keepalive timeout. In case the ack number of | YASUOKA Masahiko |
2012-01-17 | Fix trailing whitespace. | Alexander Bluhm |
2012-01-16 | Pass struct pf_pdesc to pf_walk_option6() and pf_walk_header6() to | Alexander Bluhm |
2012-01-16 | do carp demotion adjustments on syncdev link state change. | Mike Belopuhov |
2012-01-16 | bpf devices behave similar to raw sockets and never block on write, | Philip Guenthe |
2012-01-15 | Calling pf_normalize_ip() from pf_setup_pdesc() was bad as the | Alexander Bluhm |
2012-01-13 | Drop IPv6 packets built from overlapping fragments in pf reassembly. | Alexander Bluhm |
2012-01-11 | Ansify raw_... function definitions. No binary change. | Alexander Bluhm |
2012-01-11 | ansify and de'register some prototypes | David Hill |
2012-01-03 | To access the ifaddr of an in_ifaddr or in6_ifaddr struct, it is | Alexander Bluhm |
2012-01-03 | Instead of having two functions pf_free_fragment() and pf_remove_fragment() | Alexander Bluhm |
2011-12-21 | Just use pd->sidx and pd->didx to reverse the state key arguments | Marco Pfatschbacher |
2011-12-21 | don't attempt to run pf_translate on fragments: it will fail miserably. | Mike Belopuhov |
2011-12-19 | improve the icmp direction check to deal correctly with af-to states | Mike Belopuhov |
2011-12-12 | fixup af-to regression with match rules | Mike Belopuhov |
2011-12-06 | Remove needless temporary variable for greater clarity. | Bret Lambert |