| Age | Commit message (Expand) | Author |
|---|
| 2021-06-02 | With parallel execution of pf_test() two packets may try to update the same | Alexandr Nedvedicky |
| 2021-06-02 | whitespace tweaks, no functional change. | David Gwynne |
| 2021-06-02 | only read the if_bpf pointer once. | David Gwynne |
| 2021-06-02 | tpmr_input is called in an smr crit section, so it doesnt need its own. | David Gwynne |
| 2021-06-02 | read the tpmr if_flags once in tpmr_input so link flags apply consistently. | David Gwynne |
| 2021-06-02 | use ipv4_check and ipv6_check to well, check ip headers before running pf. | David Gwynne |
| 2021-06-02 | use ipv4_check and ipv6_check provided by the network stacks. | David Gwynne |
| 2021-06-01 | Check `so_state' in rtm_senddesync() and return if SS_ISCONNECTED or | mvs |
| 2021-06-01 | a couple of minor whitespace tweaks. no functional change. | David Gwynne |
| 2021-05-30 | Declare all struct protosw as constant. | Alexander Bluhm |
| 2021-05-27 | ajacoutot says i missed copying some bits from bridge for divert-to. | David Gwynne |
| 2021-05-27 | ajacouto says i missed copying some bits from bridge for divert-to. | David Gwynne |
| 2021-05-26 | Use `so_lock' to protect key management (PF_KEY) sockets. This can be | mvs |
| 2021-05-26 | add support for pf divert-to on tpmr, like what was done for veb(4). | David Gwynne |
| 2021-05-26 | support divert-to when pf applies it to a packet. | David Gwynne |
| 2021-05-25 | As network features are not added dynamically, the domain structures | Alexander Bluhm |
| 2021-05-25 | The arrays sadb_exts_allowed_out and sadb_exts_required_out are | Alexander Bluhm |
| 2021-05-17 | fix state key reference underflow, when sk == skrev | Alexandr Nedvedicky |
| 2021-05-17 | Revert. Last change should not have been committed. | Claudio Jeker |
| 2021-05-17 | Increase the default buffer space using on PF_UNIX sockets to 8k. | Claudio Jeker |
| 2021-05-16 | panic does not require a \n at the end. When one is provided, it looks wrong. | Theo de Raadt |
| 2021-05-16 | In route detach we delete `rop_timeout' while `rop' is still linked to | mvs |
| 2021-05-15 | Fix IPsec NAT-T to work with pipex(4). Introduce a new packet tag | YASUOKA Masahiko |
| 2021-05-06 | Kill pfkeyv2_parsemessage() declaration which is absolutely useless | mvs |
| 2021-05-04 | Initialize `ipsec_policy_pool' within pfkey_init() instead of doing that | mvs |
| 2021-05-04 | Remove unused `spd_tables' declaration. | mvs |
| 2021-05-02 | Do soreserve() before `kp' allocation. This simplifies error path. The | mvs |
| 2021-05-01 | Implement per-socket `so_lock' rwlock(9) and use it to protect routing | mvs |
| 2021-04-27 | pf_state_key_link_reverse() is prone to race on parallel forwarding | Alexandr Nedvedicky |
| 2021-04-26 | Revert per-socket `so_lock' rwlock(9) and use it to protect routing | Claudio Jeker |
| 2021-04-25 | Implement per-socket `so_lock' rwlock(9) and use it to protect routing | mvs |
| 2021-04-23 | call klist_invalidate from bpfsdetach to tell kq listeners what happened. | David Gwynne |
| 2021-04-23 | only skip pf once for packets that are injected by a divert-packet socket. | David Gwynne |
| 2021-03-26 | Push kernel lock within rtable_add(9) and rework it to return 0 in the | mvs |
| 2021-03-26 | Push kernel lock down to rt_setsource() to make `ifa' dereference safe. | mvs |
| 2021-03-26 | Only install route with label, fix route leak on destroy | kn |
| 2021-03-21 | wg(4): fix race between tx/rx handshakes, from Matt Dunwoodie, ok mpi@ | Stuart Henderson |
| 2021-03-20 | RFC 8981 allows the configuration of only temporary IPv6 addresses. | Florian Obser |
| 2021-03-18 | When changing the link local address send a RTM_IFINFO message out. | Claudio Jeker |
| 2021-03-18 | Do not call rtm_ifchg() if IFF_UP changed. The code in if_up() and if_down() | Claudio Jeker |
| 2021-03-18 | Like in the sysctl case include the ifp_sadl as RTA_IFP address in RTM_IFINFO | Claudio Jeker |
| 2021-03-18 | Fix SIOCDELLABEL/"ifconfig mpe0 -mplslabel" to unset label completely | kn |
| 2021-03-17 | Make "ifconfig mpw0 -mplslabel" work | kn |
| 2021-03-17 | Use correct rdomain when adding/deleting routes | kn |
| 2021-03-17 | Hide kernel internals from userland by wrapping more bits in _KERNEL blocks. | Claudio Jeker |
| 2021-03-11 | When RFC 8981 obsoleted RFC 4941 the terminology changed from | Florian Obser |
| 2021-03-11 | There is no need to try to attach IPv6 to an interface when the | Florian Obser |
| 2021-03-11 | If the AUTOCONF4 or AUTOCONF6 flags get enabled, force the interface up. | Theo de Raadt |
| 2021-03-10 | spelling | Jonathan Gray |
| 2021-03-09 | Issuing FIOSETOWN and TIOCSPGRP ioctl commands on a tun(4) device leaks | anton |
