Age | Commit message (Expand) | Author |
2007-06-26 | Fix a race condition during ruleset reload; make sure we don't walk off | Ryan Thomas McBride |
2007-06-25 | crank ifq_maxlen from 50 to 256, so it is not smaller than most interfaces | Henning Brauer |
2007-06-25 | pretty mechanical change: now that the state tables use seperate state | Henning Brauer |
2007-06-24 | Save some bytes and make code more readable by removing junk union and | Ryan Thomas McBride |
2007-06-22 | export the flow/filter information attached to the SA, too; ok hshoexer@ | Markus Friedl |
2007-06-21 | force logif to zero if no logging is asked for | Henning Brauer |
2007-06-21 | reimplement interface bound states in a non-retarded way. | Henning Brauer |
2007-06-20 | Allow "log" for nat rules without "pass". | Marco Pfatschbacher |
2007-06-17 | add back missing bcopy & break, got lost when removing arcnet. | Henning Brauer |
2007-06-15 | in pf_test_rule, before handling IPPROTO_ICMP / IPPROTO_ICMPV6, check that | Henning Brauer |
2007-06-14 | Add a new "rtlabel" option to ifconfig. It allows to specify a route label | Reyk Floeter |
2007-06-14 | sprinkle some #ifdef IPSEC so that pfsync compiles w/o ipsec | Henning Brauer |
2007-06-11 | move definitions for the flags in the mbuf header used by pf to mbuf.h | Henning Brauer |
2007-06-09 | fix wrong argument passing to m_copyback for the log case | Henning Brauer |
2007-06-09 | sizeof(ptr) is no good if you want sizeof(*ptr). icmp/icmpv6. | Henning Brauer |
2007-06-08 | kill arcnet leftovers, some pt out by Mike Belopuhov <mkb@crypt.org.ru>, | Henning Brauer |
2007-06-07 | PR 5502 From: Marc Huber <Marc.Huber@web.de> | Henning Brauer |
2007-06-06 | vlan interfaces do not allow the parent interface and the vlan number to be | Henning Brauer |
2007-06-06 | remove remaining IPX hooks. all inside #ifdef IPX, so no actual change | Henning Brauer |
2007-06-02 | pf_set_rt_ifp accesses state key data, so must be called later | Henning Brauer |
2007-06-01 | factor out duplicated code to allocate state key and cross-reference it | Henning Brauer |
2007-06-01 | fold pf_test_tcp(), pf_test_udp(), pf_test_icmp(), pf_test_other() into | Henning Brauer |
2007-06-01 | apply the "skip ipsec if there are no flows" speedup diff to IPv6 too. | Henning Brauer |
2007-05-31 | Make sure that pf_state_key and pf_state_key_cmp are in sync. | Ryan Thomas McBride |
2007-05-31 | unlink the right state, ryan ok | Henning Brauer |
2007-05-31 | Move the state id and creatorid (used mainly by pfsync) into struct pf_state. | Ryan Thomas McBride |
2007-05-31 | Unbreak pf.c compilation on gcc 2.95 architectures. Found by todd@ | Ryan Thomas McBride |
2007-05-31 | First step of rearranging pf's state table internals... | Ryan Thomas McBride |
2007-05-29 | remove token ring leftovers, ok mcbride pval | Henning Brauer |
2007-05-29 | It helps to commit removals from the tree that has the files cvs removed | Claudio Jeker |
2007-05-29 | now i get my hands dirty in here... from if_ethersubr.c: | Henning Brauer |
2007-05-29 | there was code inside | Henning Brauer |
2007-05-29 | Move tokenring support to the attic where it can join the cards that where | Claudio Jeker |
2007-05-29 | Define IF_ENQUEUE() and friends as proper C statements using do ... while | Uwe Stuehler |
2007-05-29 | Use atomic operations to operate on netisr, instead of clearing it at splhigh. | Miod Vallat |
2007-05-29 | IMP is dead and nothing uses NETISR_IMP so remove it from the netisr list. | Claudio Jeker |
2007-05-29 | Spaces, no binary changes. | Claudio Jeker |
2007-05-29 | gain us another 10+% of performance. | Henning Brauer |
2007-05-29 | Add a name argument to the RWLOCK_INITIALIZER macro. | Thordur I. Bjornsson |
2007-05-28 | double pf performance. | Henning Brauer |
2007-05-28 | Only call add_net_randomness() once per interrupt instead of once per packet.... | Ryan Thomas McBride |
2007-05-28 | Users of arc4random() should include dev/rndvar.h directly. | Ryan Thomas McBride |
2007-05-27 | get rid of static. | David Gwynne |
2007-05-27 | clarify things by passing kif->pfik_ifp around in pf_test{,6} instead | Pierre-Yves Ritschard |
2007-05-26 | add comments indicating why we do m = *m0; again after pf_normalize, ryan ok | Henning Brauer |
2007-05-26 | one extern seems to be better than 20 for ifqmaxlen; ok krw | Jason Wright |
2007-05-26 | More comment typos from Diego Casati. Including winners like funtion, allmost, | Kenneth R Westerback |
2007-05-23 | use the intr pool when allocating from interrupt context; | Markus Friedl |
2007-05-21 | make bridge(4) mark packets with M_PROTO1 if gif(4) needs to use | Markus Friedl |
2007-05-20 | Handle IP address stuff in tls/tlf state messages | Can Erkin Acar |