Age | Commit message (Expand) | Author |
2009-07-21 | pf_scrub_ip/ip6 prototypes are already in pfvar.h | Henning Brauer |
2009-07-19 | clalloc() can't fail, so there's no need to handle failure cases. | Bret Lambert |
2009-07-16 | Backout rev1.79 of if_vlan.c and rev1.66 of if_trunk.c; | Thordur I. Bjornsson |
2009-07-13 | Do the same rdomain checking in sppp as we do in the Ethernet case. | Claudio Jeker |
2009-07-13 | dont initialise ifp->if_snd.ifq_maxlen, and then follow it by | David Gwynne |
2009-07-13 | make the send queue one slot long. this forces packets off the virtual | David Gwynne |
2009-07-09 | unsigned -> unsigned int | Bret Lambert |
2009-07-08 | Add the same routing domain assignments and checks into the not so used | Claudio Jeker |
2009-07-07 | When adding or changing a MPLS route, add RTF_MPLS flag to | Michele Marchetto |
2009-06-26 | invert direction for inner icmp state lookups (e.g. traceroute with icmp) | Markus Friedl |
2009-06-26 | the pr_usrreq implementation for routing sockets shares exactly one line | Bret Lambert |
2009-06-25 | scrub_flags is a u_int8_t, but PFSTATE_SCRUB_TCP is 0x0100, so the | Stuart Henderson |
2009-06-24 | move the "pf_map_addr: selected address" printf up to -xnoisy. | Stuart Henderson |
2009-06-22 | Remove unneeded sotorawpcb() call, as the PCB is unmolested between | Bret Lambert |
2009-06-22 | Check that the address family is appropriate before processing ICMPv4 and | Joel Sing |
2009-06-22 | Always drop ICMPv6 in IPv4 datagrams, not only when compiled with INET6. | Joel Sing |
2009-06-22 | Fix scrub max-mss for IPv6 traffic. | Joel Sing |
2009-06-20 | Decrement routing socket count in MPLS detach case | Bret Lambert |
2009-06-17 | fix flow data values: first and last time, found by f-kons at yandex ru | Joerg Goltermann |
2009-06-17 | do better detection of when we have a better version of the tcp sequence | David Gwynne |
2009-06-14 | enable support for deferring the packet that creates a state so that your | David Gwynne |
2009-06-12 | rewrite the way states from pfsync are merged into the local state tree | David Gwynne |
2009-06-10 | jj reported a panic in bulk updates to me. this is my attempt to fix the | David Gwynne |
2009-06-08 | in pf_print_state_parts, do not use skw->proto to print the protocol | Henning Brauer |
2009-06-08 | bring back the fixed PF_AEQ/ANEQ/AZERO macros, the offending use has been | Henning Brauer |
2009-06-08 | "do not call PF_ANEQ with af=0, dragons". fixes a problem with skip | Stuart Henderson |
2009-06-08 | gah. something is not quite right, sthen sees strange behaviour fixed | Henning Brauer |
2009-06-08 | unfuck PF_AEQ PF_ANEQ PF_AZERO macos that got fucked when v6 support | Henning Brauer |
2009-06-06 | when xflags got changed, tell the userland by routing sockets | Rainer Giedat |
2009-06-05 | Add missing #ifdef INET6 ... #endif | Alexander Hall |
2009-06-05 | Initial support for routing domains. This allows to bind interfaces to | Claudio Jeker |
2009-06-04 | allow IPvShit to be turned off completely per-interface. | Henning Brauer |
2009-06-04 | Emulate a link state in tun(4). The link state goes up when the device is | Claudio Jeker |
2009-06-03 | make wireless interfaces priority 4 by default. other interfaces remain | Bob Beck |
2009-06-02 | do the pf_pkt_addr_changed(m) magic just like gif etc | Henning Brauer |
2009-06-01 | There is no need to use a variable just for sizeof(). Garbage collect ifa. | Claudio Jeker |
2009-05-31 | Consolidate common code for interface attachment into single function | Bret Lambert |
2009-05-31 | make set loginterface, set hostid, set reassemble and set debug | Henning Brauer |
2009-05-31 | Hide RTP_DOWN in the kernel and don't expose it to userland. Userland is | Claudio Jeker |
2009-05-31 | Reenable interface state tracking now that I found and fixed the cause of | Claudio Jeker |
2009-05-31 | Fix for the rtfree 2 panic seen by some people before the release. A missing | Claudio Jeker |
2009-05-26 | inherit the route label on cloned routes | Reyk Floeter |
2009-05-18 | The routing table index rtableid has type unsigned int in the routing | Alexander Bluhm |
2009-05-13 | dont go splx(s) in the ioctl handler if we havent done splnet(). this adds | David Gwynne |
2009-05-13 | only keep track of the number of updates on tcp connections. state sync on | David Gwynne |
2009-04-30 | treat log as what it is, a flag variable. effectively a noop now but stops | Henning Brauer |
2009-04-23 | print the type of the icmp message we're bitching about when debugging is | David Gwynne |
2009-04-18 | Make "route(8) change" aware of MPLS. | Michele Marchetto |
2009-04-17 | move the lastr = r assignment behind the anchor rule check so we don't | Henning Brauer |
2009-04-16 | Really turn fragment reassembly on by default. pfctl must handle this | David Krause |