Age | Commit message (Expand) | Author |
2009-04-23 | print the type of the icmp message we're bitching about when debugging is | David Gwynne |
2009-04-18 | Make "route(8) change" aware of MPLS. | Michele Marchetto |
2009-04-17 | move the lastr = r assignment behind the anchor rule check so we don't | Henning Brauer |
2009-04-16 | Really turn fragment reassembly on by default. pfctl must handle this | David Krause |
2009-04-15 | little dose of scrubbing after the monster changes: | Henning Brauer |
2009-04-15 | move OK ICMP to NOISY level, makes it easier to run at MISC level; ok henning@ | David Krause |
2009-04-15 | move pfsync stale update messages to NOISY level; ok dlg@ henning@ | David Krause |
2009-04-14 | Correctly handle the case when state might be NULL in pf_test like | Alexander Yurchenko |
2009-04-11 | Avoid dereferencing a null pointer when pf attempts to translate a | Joel Sing |
2009-04-07 | after i took everything in this fiule apart and reassembled with a lot of | Henning Brauer |
2009-04-07 | turn fragment reassembly on by default. the is little to no reason to | Henning Brauer |
2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
2009-04-04 | use time_uptime instead of time_second internally. time_uptime isnt | David Gwynne |
2009-03-31 | claudio has spent too much time with the mbuf macros. | David Gwynne |
2009-03-31 | do not include space in the end of the from for a hmac. after discussion | David Gwynne |
2009-03-23 | wait an appropriate amount of time before giving up on a bulk update, | David Gwynne |
2009-03-17 | we do know how to handle iack. in the rx path at least. | David Gwynne |
2009-03-15 | Introduce splsoftassert(), similar to splassert() but for soft interrupt | Miod Vallat |
2009-03-14 | Some ICMP types that also have icmp_id, pointed out by markus@ | Ryan Thomas McBride |
2009-03-09 | Make the DIOCSETIFFLAG, DIOCSETLIMIT, and DIOCSETTIMEOUT ioctls | Ryan Thomas McBride |
2009-03-07 | Make sure pd2 has a pointer to the icmp header in the payload; fixes | Ryan Thomas McBride |
2009-03-05 | Fix a panic in ether_output() when attempting to send multicast traffic on | Michele Marchetto |
2009-03-05 | Stricter state checking for ICMP and ICMPv6 packets: include the ICMP type | Ryan Thomas McBride |
2009-03-02 | Make sure rt_gateway is not NULL in rt_mpath_matchgate(). It is possible to | Claudio Jeker |
2009-03-01 | rework serialisation of messages slightly. | David Gwynne |
2009-03-01 | check pfsyncs IFF_RUNNING flag before doing stuff. should save time for | David Gwynne |
2009-03-01 | i can't see a reason that we'd need to go to splnet to call ip_output. | David Gwynne |
2009-02-27 | Do not check the link state when installing a route. This bit was missing in | Claudio Jeker |
2009-02-27 | fix quick reuse of tcp states. | Henning Brauer |
2009-02-27 | fix mbuf problems and simplify code, well spotted and input by | Joerg Goltermann |
2009-02-26 | bulk updates are sent from a timeout which walks over the state tree and | David Gwynne |
2009-02-24 | restore the parsing of incoming tdb update messages. this was disabled | David Gwynne |
2009-02-24 | Disable rt_if_track() for now. This causes the rtfree panic seen in PR6043 | Claudio Jeker |
2009-02-24 | request a bulk update when the pfsync if configuration is changed via an | David Gwynne |
2009-02-23 | dont put pfsync packets on the wire if no syncdev is specified. issues | David Gwynne |
2009-02-20 | Ensure that bpf_mtap() is always called at the same interrupt priority | Joel Sing |
2009-02-18 | bring back the NAT NOP fix, but this time right. | Henning Brauer |
2009-02-18 | if a peer requests a state that is marked as NOSYNC, then skip it. | David Gwynne |
2009-02-18 | Free authentication data when detaching sppp from interface. | Can Erkin Acar |
2009-02-17 | // style comments shouldnt be in the tree. | David Gwynne |
2009-02-17 | assert copyright over the changes i made. | David Gwynne |
2009-02-17 | init the tdb tailq. hopefully this fixes sthens crash. | David Gwynne |
2009-02-17 | fix uninitialized variable. | Charles Longeau |
2009-02-16 | allocate the large structures instead of putting them on the stack, and | Theo de Raadt |
2009-02-16 | Allow username and password to be up to 255 characters in length. | Can Erkin Acar |
2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
2009-02-15 | Revert previous. | Marc Balmer |
2009-02-15 | Fix compilation of kernels that have pf, but not pfsync. | Marc Balmer |
2009-02-12 | revert pf.c r1.629 (which moved to this file) which was causing | Stuart Henderson |
2009-02-06 | Remove bogus casts of integer constants SPPPIO[GS]DEFS to caddr_t | Alexander Yurchenko |