Age | Commit message (Expand) | Author |
2013-01-20 | Make pf TCP sequence number tracking less strict by one octet for | Alexander Bluhm |
2013-01-18 | Relax the restriction on sending frames to trunk(4) members to allow BPF writes. | Stuart Henderson |
2013-01-17 | hardwire SLIP_HIWAT to 100 (as the comment above suggests) since we are | Theo de Raadt |
2013-01-17 | first or second coming, commie or not commie, one m in coming is sufficient | Henning Brauer |
2013-01-16 | switch from using softclock ticks to getnanotime when putting time on the | David Gwynne |
2013-01-16 | Unbreak the negation toggle code when re-loading pf tables. Otherwise | Markus Friedl |
2012-12-29 | make sure the entry from tree_src_tracking is still in the pool; | Markus Friedl |
2012-12-29 | reset the counter in case its current value has been removed | Markus Friedl |
2012-12-29 | pass pf_pool directly to pfr_pool_get(); simplifies the API; | Markus Friedl |
2012-12-28 | change the malloc(9) flags from M_DONTWAIT to M_NOWAIT; OK millert@ | Gleydson Soares |
2012-12-22 | Return EEXIST to 'add' when a port is already a bridge member. This makes | Camiel Dobbelaar |
2012-12-21 | Rather than calling mircotime in bpf_catchpacket each time it's called | Mike Belopuhov |
2012-12-21 | bpf allocates packet buffers in the ioctl path and can sleep | Mike Belopuhov |
2012-12-14 | oops, debug printf sneaked in. i must be out of practice. | David Gwynne |
2012-12-13 | pipex_init can be called multiple times (by whatever subsystems want to use | David Gwynne |
2012-12-12 | Rearrange the code a bit to prevent splx() from being called with an | Mike Belopuhov |
2012-12-07 | Remove stray semicolon. Fixes mbuf leak with devices sending BPDUs to | Paul de Weerd |
2012-12-05 | Remove excessive sys/cdefs.h inclusion | Theo de Raadt |
2012-11-29 | Delete needless check for NULL. From Michael W. Bombardieri. | YASUOKA Masahiko |
2012-11-27 | remove incorrect splnet usage in pfkey interface | Mike Belopuhov |
2012-11-26 | do not steal mbuf types (leads to a panic if M_ZEROIZE gets set on | Markus Friedl |
2012-11-23 | Add SIOCGIFHARDMTU to allow retrieving the driver's maximum supported MTU | Stuart Henderson |
2012-11-23 | make sure to always pass an array of struct pf_src_node pointers to | Mike Belopuhov |
2012-11-15 | this code is shared into userland, and there it should not pull | Theo de Raadt |
2012-11-11 | align ifaliasreq.ifra_addr similar to the way that ifreq is fixed -- | Theo de Raadt |
2012-11-08 | wrap bpfilter portion with #if NBPFILTER > 0. | Gleydson Soares |
2012-11-06 | backout csum diff for the moment, requested by theo | Henning Brauer |
2012-11-01 | redo most of the protocol (tcp/udp/...) checksum handling | Henning Brauer |
2012-10-30 | Use time_uptime for expiration values as time_second can be skewed at | Florian Obser |
2012-10-23 | Only clear the revarp_ifp if the ifp pointing to it is detached. | Claudio Jeker |
2012-10-21 | Add the IP_DIVERTFL socket option on divert(4) sockets to control | Sebastian Benoit |
2012-10-18 | Move revarp code into #ifdef NFSCLIENT; saving space on some media. | Theo de Raadt |
2012-10-10 | make bridge_rtflush and bridge_flushrule void functions, as they never | Henning Brauer |
2012-10-09 | simplify hook_disestablish() handling by always resetting the hook when | Markus Friedl |
2012-10-08 | Make carp_ourether() shorter and more generic. Only a mac address | Camiel Dobbelaar |
2012-10-08 | make sure we don't call hook_disestablish() twice e.g. ifconfig -syncdev | Markus Friedl |
2012-10-08 | Forward declare struct m_tag in netinet/ip_ipsp.h so we don't need to | Camiel Dobbelaar |
2012-10-07 | spacing | Mike Belopuhov |
2012-10-06 | Remove bridge_rttrim(). It's only triggered in the unlikely event that the | Camiel Dobbelaar |
2012-10-05 | Point an interface directly to its bridgeport configuration, instead | Camiel Dobbelaar |
2012-10-05 | include sys/mbuf.h | Camiel Dobbelaar |
2012-09-30 | There is no need to set IFF_OACTIVE in vlan, since there is no DMA ring | Claudio Jeker |
2012-09-28 | fix adress family for ipv6 bpf packet capture; ok yasuoka | Markus Friedl |
2012-09-26 | add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys) | Markus Friedl |
2012-09-20 | Fix a pair of typos in comments. | Bret Lambert |
2012-09-20 | pfsync_cancel_full_update needs to restore carp demotions since | Mike Belopuhov |
2012-09-20 | Don't filter spanning tree BPDUs. Either process, or forward them. | Marco Pfatschbacher |
2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former | Bret Lambert |
2012-09-20 | Lower pf frags limit to not risk running out of mbuf clusters | Camiel Dobbelaar |
2012-09-19 | ioctl requests are u_long not int, spotted via clang | Jonathan Gray |