Age | Commit message (Expand) | Author |
2008-07-22 | after pf_state_key_atach nothing must use the state keys passed to it any | Henning Brauer |
2008-07-21 | some whitespace cleanup I did while looking through the code | David Krause |
2008-07-21 | fix typo that broke rdr rules (without pass) with non-TCP/UDP/ICMP protocols | David Krause |
2008-07-14 | m_copy can return NULL, so check for it | Henning Brauer |
2008-07-10 | check pf NAT source port allocation against net.inet.(tcp|udp).baddynamic | Damien Miller |
2008-07-10 | In pf_state_insert(), if the first pf_state_key_attach() fails, the | David Krause |
2008-07-05 | in pf_state_key_attach(), when there is already an existing state key that | David Krause |
2008-07-04 | in pf_state_key_attach(), when we find that there already is a state key | Henning Brauer |
2008-07-04 | remove prototype for nonexistant function | Henning Brauer |
2008-07-03 | link pf state keys to tcp pcbs and vice versa. | Henning Brauer |
2008-07-01 | Don't return immediately if we're actually passing the traffic, we want to | Ryan Thomas McBride |
2008-07-01 | PF_DT_SKIP_STATETREE is no longer used. | Ryan Thomas McBride |
2008-06-29 | this stupid per-arch SIZEOF_BPF_HDR define is really really stupid, but | Theo de Raadt |
2008-06-29 | Simplify state creation code; merge state import/export code between pfsync | Ryan Thomas McBride |
2008-06-26 | First pass at removing clauses 3 and 4 from NetBSD licenses. | Ray Lai |
2008-06-26 | Fix sticky-address on rdr; With the current nat code, we always use the same | Ryan Thomas McBride |
2008-06-22 | Revert 1.203; it's not safe to blindly walk the tailq instead of the rbtree | Ryan Thomas McBride |
2008-06-21 | Only do state key linking on the outbound path. | Ryan Thomas McBride |
2008-06-19 | add 10GbaseT media type, 10 Gigabit Ethernet over CAT 6 unshielded or | Reyk Floeter |
2008-06-19 | Fix handling check for NAT and creation of a second pf_state_key in pfsync. | Ryan Thomas McBride |
2008-06-17 | Crank PFSYNC_VERSION, lots has changed in struct pfsync_state due to the | Ryan Thomas McBride |
2008-06-16 | when freeing a state key sk1, look wether it is linked to another state key | Henning Brauer |
2008-06-15 | A bit of cleanup: | Marco Pfatschbacher |
2008-06-15 | Add 802.3ad LACP support for trunk(4). | Marco Pfatschbacher |
2008-06-14 | add carppeer; an option to specify a different multicast address or | Reyk Floeter |
2008-06-14 | Remove NBPFILTER conditional since we do not include "bpfilter.h" and the | Joel Sing |
2008-06-14 | Include "pflog.h" so that we get NPFLOG. | Joel Sing |
2008-06-14 | Also do the PR_ZERO dance here. This was held back on Henning's request | Michael Knudsen |
2008-06-14 | There's no more reason to use oldnointr allocator here since we pace | Artur Grabowski |
2008-06-14 | pool_get()s not in interrupt context should not be PR_NOWAIT, but | Henning Brauer |
2008-06-14 | Move bpf_mtap_hdr() above the trunk_*_input() routines. | Marco Pfatschbacher |
2008-06-13 | Move the responsibility to free received packets on trunked interfaces | Marco Pfatschbacher |
2008-06-13 | Change the logic when selecting routes on RTM_CHANGE & RTM_GET. RTM_CHANGE | Claudio Jeker |
2008-06-13 | we used to use the lowest (so it is deterministic) mac address in the | Henning Brauer |
2008-06-13 | Treat LINK_STATE_UNKNOWN as LINK_STATE_UP. | Marco Pfatschbacher |
2008-06-13 | Cleanup a bit. Instead of doing dst = 0 in every error handling block init | Claudio Jeker |
2008-06-12 | fix synproxy. | Henning Brauer |
2008-06-12 | #if 0 an annoygly chatty printf active whenever we're at loglevel | Henning Brauer |
2008-06-12 | Fix the egress group matching for IPv4. There are to ways to define a /0 | Claudio Jeker |
2008-06-11 | Split address setup operations into a separate function. More to come. | Ryan Thomas McBride |
2008-06-11 | when we establish the mapping from a state key, do it both ways, aka | Henning Brauer |
2008-06-11 | factor out state creation code for readability; make it static inline | Henning Brauer |
2008-06-11 | superfluous to check for m != NULL in pf_find_state, it is plain | Henning Brauer |
2008-06-11 | after finding a state in the outbound path clear the statekey pointer | Henning Brauer |
2008-06-11 | extra paranoia: | Henning Brauer |
2008-06-11 | yuck, fix a last minute collision | Henning Brauer |
2008-06-11 | store a pointer to the stack side state key in the mbuf packet | Henning Brauer |
2008-06-10 | Handle the closing of half connections where we don't see the full | Reyk Floeter |
2008-06-10 | Simplify code slightly; use PR_ZERO with pool_get() rather than bzero(). | Ryan Thomas McBride |
2008-06-10 | Free the counters struct when we free the table entry. | Ryan Thomas McBride |