Age | Commit message (Expand) | Author |
2008-06-12 | fix synproxy. | Henning Brauer |
2008-06-12 | #if 0 an annoygly chatty printf active whenever we're at loglevel | Henning Brauer |
2008-06-12 | Fix the egress group matching for IPv4. There are to ways to define a /0 | Claudio Jeker |
2008-06-11 | Split address setup operations into a separate function. More to come. | Ryan Thomas McBride |
2008-06-11 | when we establish the mapping from a state key, do it both ways, aka | Henning Brauer |
2008-06-11 | factor out state creation code for readability; make it static inline | Henning Brauer |
2008-06-11 | superfluous to check for m != NULL in pf_find_state, it is plain | Henning Brauer |
2008-06-11 | after finding a state in the outbound path clear the statekey pointer | Henning Brauer |
2008-06-11 | extra paranoia: | Henning Brauer |
2008-06-11 | yuck, fix a last minute collision | Henning Brauer |
2008-06-11 | store a pointer to the stack side state key in the mbuf packet | Henning Brauer |
2008-06-10 | Handle the closing of half connections where we don't see the full | Reyk Floeter |
2008-06-10 | Simplify code slightly; use PR_ZERO with pool_get() rather than bzero(). | Ryan Thomas McBride |
2008-06-10 | Free the counters struct when we free the table entry. | Ryan Thomas McBride |
2008-06-10 | Handle a special sloppy case where we only see one half of the | Reyk Floeter |
2008-06-10 | Make counters on table addresses optional and disabled by default. | Ryan Thomas McBride |
2008-06-10 | when walking the entire state table it makes much more sense to walk | Henning Brauer |
2008-06-10 | remove a debug check& printf that should not have gone in in the first | Henning Brauer |
2008-06-10 | save somespace in the state by collapsing two 8 bit ints used as booleans | Henning Brauer |
2008-06-10 | in pf_test_state_icmp when trying tomatch icmp errors to tcp sessions | Henning Brauer |
2008-06-10 | implement a sloppy tcpstate tracker which does not look at sequence | Henning Brauer |
2008-06-09 | rename arc4random_bytes => arc4random_buf to match libc's nicer name; | Damien Miller |
2008-06-08 | factor out the tcp sequence number tracking from pf_test_state_tcp | Henning Brauer |
2008-06-08 | The default route is 0.0.0.0/0 so it is necessary to check the mask as well. | Claudio Jeker |
2008-06-08 | First minimal cleanup of routing code, kill rtrequest() it got replaced with | Claudio Jeker |
2008-06-08 | Use m_freem() instead of m_free() in trunk_start() to ensure that the | Brad Smith |
2008-06-08 | null pointer check before deref | Henning Brauer |
2008-06-08 | Don't spam dmesg with sppp messages, instead use log(9). | Claudio Jeker |
2008-06-02 | Fix synproxy breakage introduced with the state table reorganization. | Ryan Thomas McBride |
2008-05-30 | trivial KNF before we go further | Henning Brauer |
2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride |
2008-05-29 | rewrite the state table logic. | Henning Brauer |
2008-05-23 | Deal with the situation when TCP nfs mounts timeout and processes | Thordur I. Bjornsson |
2008-05-21 | Only cancel (timeout_del()) the timeout if we're not going to delay it | Michael Knudsen |
2008-05-21 | Just clear the timeout since timeout_del() can cope with | Michael Knudsen |
2008-05-18 | KNF | Ryan Thomas McBride |
2008-05-17 | Initialize the timeouts only once instead of everytime they are started | Can Erkin Acar |
2008-05-15 | divert for ipv6; ok henning, pyr | Markus Friedl |
2008-05-13 | Remove commented out NetBSD __KERNEL_RCSID macro usage. | Brad Smith |
2008-05-11 | Check to make sure pp_tlf is not NULL in sppp_keepalive() before calling it. | Brad Smith |
2008-05-11 | When passing opt[] array as an argument, use opt instead of &opt. While | Can Erkin Acar |
2008-05-10 | convert sdltosa to a real cast because I removed the silly makro last night. | Claudio Jeker |
2008-05-09 | replace rtrequest() with corresponding rtrequest1() replacement. | Claudio Jeker |
2008-05-09 | Add support to kill states by rule label or state id. | Marco Pfatschbacher |
2008-05-09 | there was a race between the addition of mpls and tx mitigation. this gives | David Gwynne |
2008-05-09 | Fix a logic botch around prioinv that resulted in wrong ordering of more | Claudio Jeker |
2008-05-09 | when cloning, copy the priority from the parent to the cloned route, | Henning Brauer |
2008-05-09 | divert packets to local socket without modifying the ip header; | Markus Friedl |
2008-05-09 | A little bit of magic to make arp lookups work in MPLS as they should. | Claudio Jeker |
2008-05-08 | Add license and OpenBSD RCS Tag to the file, spotted by Dries Schellekens. | Pierre-Yves Ritschard |