Age | Commit message (Expand) | Author |
2013-11-18 | The prio value of a pf match rule was overridden by a later pass | Alexander Bluhm |
2013-11-18 | use arc4random() for ether_fakeaddr, because it is safe | Theo de Raadt |
2013-11-18 | Convert trunk(4) to use a detachhook, discussed at b2k13 with many. | Martin Pieuchot |
2013-11-17 | speeling | David Gwynne |
2013-11-16 | Remove dead assignments and now unused variables. | Charles Longeau |
2013-11-15 | calculate the line in the sand before comparing it to ticks, which looks | David Gwynne |
2013-11-15 | Revert 1.858, as it causes panics of inp: | Christiano F. Haesbaert |
2013-11-15 | After discussion with deraadt@ and Fernando Gont, it seems that the | Alexander Bluhm |
2013-11-15 | inherit the rdomain sc to pkthdr | Henning Brauer |
2013-11-15 | Forget socket linking on pf_pkt_addr_changed(), this fixes among other | Christiano F. Haesbaert |
2013-11-14 | Improvements for address assignment and related issues in IPv6CP. | Stefan Sperling |
2013-11-13 | DIOCGETSRCNODES was leaking a little bit more kernel information | Theo de Raadt |
2013-11-12 | two ioctl's were disclosing kernel pointers and such. | Theo de Raadt |
2013-11-12 | try bpf.c r1.84 again, this time without semantic changes to if statements. | David Gwynne |
2013-11-11 | Revert bpf.c 1.84 / bpfdesc.h 1.19 for now, "panic: timeout_add: to_ticks (-1) | Stuart Henderson |
2013-11-11 | Replace most of our formating functions to convert IPv4/6 addresses from | Martin Pieuchot |
2013-11-11 | replace the user of ticks in a condition like "interval + start < ticks" | David Gwynne |
2013-11-09 | ticks is compared against mcl_grown to see if time has elapsed since | David Gwynne |
2013-11-08 | To make sure detach hooks are executed in reverse order they were added, | Martin Pieuchot |
2013-11-07 | Now that it is safe to disestablish a hook from itself, do not leak the | Martin Pieuchot |
2013-11-05 | Remove useless #ifdef *BSD cruft from sppp(4). No binary change. | Stefan Sperling |
2013-11-01 | push the queues every 1/HZ using timeout(9) | pelikan |
2013-11-01 | keep net/hfsc.h away from userspace, except in pfctl | pelikan |
2013-11-01 | The old routing messages compatibility code did not work on strict | Alexander Bluhm |
2013-11-01 | Send pflow(4) packets in the correct rdomain. | Florian Obser |
2013-10-31 | Convert the route expire timestamp in kernel and routing message | Alexander Bluhm |
2013-10-31 | revert previous, net/if.h exports bad things to userspace. | pelikan |
2013-10-31 | push the queues every 1/HZ using timeout(9) | pelikan |
2013-10-30 | Allow to compile a kernel without INET6. | Martin Pieuchot |
2013-10-30 | translate icmpv6 echo id's the same way we do for icmpv4; ok henning | Mike Belopuhov |
2013-10-30 | add a comment describing why do we call pf_map_addr again if port | Mike Belopuhov |
2013-10-28 | Do not use the multicast macro IFP_TO_IA() to check if an interface has | Martin Pieuchot |
2013-10-28 | tedu FDDI support and the 3 flavors the driver for DEC devices, even | Martin Pieuchot |
2013-10-28 | previous udp port number rewrite fix turned out to be a work around | Mike Belopuhov |
2013-10-24 | Move more stuff under _KERNEL | Theo de Raadt |
2013-10-24 | Remove the number of in6_var.h inclusions by moving some functions and | Martin Pieuchot |
2013-10-24 | Move obvious kernel prototypes (and structure's with kernel pointers, | Theo de Raadt |
2013-10-23 | delete junk NRL v6 block; ok claudio | Theo de Raadt |
2013-10-23 | translate port numbers for inner udp packets when they're returned | Mike Belopuhov |
2013-10-23 | Remove the number of in_var.h inclusions by moving some functions and | Martin Pieuchot |
2013-10-23 | overwrite icmp packet type-specific nextptr field only when we're | Mike Belopuhov |
2013-10-22 | In pf_test_state_icmp(), actually copy pd->hdr.any back into the mbuf as | Lawrence Teo |
2013-10-22 | whitespace | Reyk Floeter |
2013-10-21 | nuke comment. How soon is now? | Sebastian Benoit |
2013-10-21 | pf_translate: missing conditonal pf_check_proto_cksum calls before | Henning Brauer |
2013-10-21 | Enable IPv6 routing domain support | Peter Hessler |
2013-10-20 | Deep inside DIOCXCOMMIT, should return a real errno instead of -1 | Theo de Raadt |
2013-10-20 | Rename rn_mpath_count() to rn_mpath_active_count() since it will only | Claudio Jeker |
2013-10-20 | in pf_cksum, set the icmp/icmp6 cksums to 0, for comsistency with tcp/udp | Henning Brauer |
2013-10-20 | In rt_mpath_conflict() there is no need to check the priority in the loop | Claudio Jeker |