Age | Commit message (Expand) | Author |
2011-03-14 | fixed a use-after-free bug introduced at 1.7 in pipex_mppe_output(). | YASUOKA Masahiko |
2011-03-14 | fix typo | YASUOKA Masahiko |
2011-03-13 | Add a way to enable/disable Wake On LAN with ifconfig. | Stefan Sperling |
2011-03-07 | Declare the inline function pf_addr_compare() non-static in pfvar.h | Alexander Bluhm |
2011-03-05 | The function pf_tag_packet() never fails. Remove a redundant check | Alexander Bluhm |
2011-03-02 | when sending deferred packets use ip6_output for v6 frames instead of | David Gwynne |
2011-02-24 | Don't use address and control field on PPPoE, they must not be used as | YASUOKA Masahiko |
2011-02-23 | fixup source address rewriting for the icmp errors with the rdr-to setup. | Mike Belopuhov |
2011-02-18 | when changing the vlandev of a running vlan(4) interface, we also need to | Reyk Floeter |
2011-02-14 | free mbuf in failure case. fix for pr6562. ok claudio. | Ted Unangst |
2011-02-14 | Add missing byte-order swap to pf_match_addr_range. Without this, rules | Stuart Henderson |
2011-02-13 | Unbreak userland as well, since bpf_filter.c is also used in libpcap. | Can Erkin Acar |
2011-02-12 | Unbreak previous commit by adding the proper header file. | Can Erkin Acar |
2011-02-12 | Clear the filter memory area before using it. Leaving it uninitialized may | Can Erkin Acar |
2011-02-06 | pf_translate() may be called from pflog_packet(). Make sure that | Alexander Bluhm |
2011-02-06 | pf_test() and pf_test6() drop IPv4-ICMP6 and IPv6-ICMP packets. Do | Alexander Bluhm |
2011-02-05 | When a packet with an unusual protocol number got rewritten, the | Alexander Bluhm |
2011-02-01 | The check for invalid IPv6 fragment size in pf_normalize_ip6() was | Alexander Bluhm |
2011-01-28 | Replace another m_free() with m_freem() to plug an mbuf leak in mpe_input(). | Reyk Floeter |
2011-01-28 | Fix another memory leak by replacing m_free() with m_freem() in trunk's | Reyk Floeter |
2011-01-28 | Change an m_free() to m_freem() to free the whole mbuf chain and to prevent | Reyk Floeter |
2011-01-28 | make sure that the size of the addresses userland is trying to configure | David Gwynne |
2011-01-25 | pool is properly spelled pl. makes this one fit in netstat column. | Ted Unangst |
2011-01-22 | Pf must not scrub packets which will be dropped anyway. | Alexander Bluhm |
2011-01-21 | make mpls compile w/o errors when inet6 is not defined | Mike Belopuhov |
2011-01-20 | The reason accounting in pf_reassemble() was not correct. Change | Alexander Bluhm |
2011-01-19 | Give pf_normalize_ip() the same 3 way semantics as pf_test(). | Alexander Bluhm |
2011-01-18 | When changing the ifa_broadaddr broadcast address, ifa_update_broadaddr() | Alexander Bluhm |
2011-01-12 | Never include SADB_X_EXT_REMOTE_AUTH (which is either a | Mike Belopuhov |
2011-01-11 | for key material that is being being discarded, convert bzero() to | Theo de Raadt |
2011-01-11 | Perform IP options check in pf_test_rule(), before creating state. | Ryan Thomas McBride |
2011-01-11 | delay deferred packets for a maximum of 20ms instead of 100 ticks (which | David Gwynne |
2011-01-10 | If pf_test() was called recursively, the global variable pf_hdrs | Alexander Bluhm |
2011-01-10 | DPFPRINTF already adds the "pf: ", no need to put it in the error | Ryan Thomas McBride |
2011-01-06 | dst my point to memory inside rt so move the check up before the | Claudio Jeker |
2011-01-06 | Minor style nit | Claudio Jeker |
2011-01-06 | Put htons() around ip_randomid() for pf scrub random-id to make it | Alexander Bluhm |
2011-01-06 | Do not assign m->m_pkthdr.rdomain before m was allocated. | Claudio Jeker |
2011-01-05 | Remove mbuf ptr save dance in pf_test6(). It was a leftover with | Alexander Bluhm |
2011-01-04 | in bpf_movein(), range-check mbuf size against MCLBYTES before | Theo de Raadt |
2011-01-03 | Allow to change vlan options of existing vlan(4)/svlan(4) devices at | Reyk Floeter |
2010-12-31 | Remove dead code from pf_norm.c. The fragment cache is some leftover | Alexander Bluhm |
2010-12-31 | Address comparisson is implemented twice in pf.c. Put this into a | Alexander Bluhm |
2010-12-24 | in pf_src_connlimit, the indices to sk->addr were swapped. | Henning Brauer |
2010-12-21 | Convert netisr to a normal soft interrupt instead of hanving MD code | Claudio Jeker |
2010-12-15 | Be more careful when copying the pf rule from userland into the kernel. | Claudio Jeker |
2010-12-07 | remove a bunch of unused arguments | Jonathan Gray |
2010-11-29 | Let ifa_print_rb() build on INET6-free kernels. Repairs RAMDISK on a few | Miod Vallat |
2010-11-29 | use m_pulldown to get a contig view of the pfsync_header instead of | David Gwynne |
2010-11-29 | get rid of struct pfsync_pkt. it was used to store data on the stack to | David Gwynne |