Age | Commit message (Expand) | Author |
2009-06-08 | in pf_print_state_parts, do not use skw->proto to print the protocol | Henning Brauer |
2009-06-08 | bring back the fixed PF_AEQ/ANEQ/AZERO macros, the offending use has been | Henning Brauer |
2009-06-08 | "do not call PF_ANEQ with af=0, dragons". fixes a problem with skip | Stuart Henderson |
2009-06-08 | gah. something is not quite right, sthen sees strange behaviour fixed | Henning Brauer |
2009-06-08 | unfuck PF_AEQ PF_ANEQ PF_AZERO macos that got fucked when v6 support | Henning Brauer |
2009-06-06 | when xflags got changed, tell the userland by routing sockets | Rainer Giedat |
2009-06-05 | Add missing #ifdef INET6 ... #endif | Alexander Hall |
2009-06-05 | Initial support for routing domains. This allows to bind interfaces to | Claudio Jeker |
2009-06-04 | allow IPvShit to be turned off completely per-interface. | Henning Brauer |
2009-06-04 | Emulate a link state in tun(4). The link state goes up when the device is | Claudio Jeker |
2009-06-03 | make wireless interfaces priority 4 by default. other interfaces remain | Bob Beck |
2009-06-02 | do the pf_pkt_addr_changed(m) magic just like gif etc | Henning Brauer |
2009-06-01 | There is no need to use a variable just for sizeof(). Garbage collect ifa. | Claudio Jeker |
2009-05-31 | Consolidate common code for interface attachment into single function | Bret Lambert |
2009-05-31 | make set loginterface, set hostid, set reassemble and set debug | Henning Brauer |
2009-05-31 | Hide RTP_DOWN in the kernel and don't expose it to userland. Userland is | Claudio Jeker |
2009-05-31 | Reenable interface state tracking now that I found and fixed the cause of | Claudio Jeker |
2009-05-31 | Fix for the rtfree 2 panic seen by some people before the release. A missing | Claudio Jeker |
2009-05-26 | inherit the route label on cloned routes | Reyk Floeter |
2009-05-18 | The routing table index rtableid has type unsigned int in the routing | Alexander Bluhm |
2009-05-13 | dont go splx(s) in the ioctl handler if we havent done splnet(). this adds | David Gwynne |
2009-05-13 | only keep track of the number of updates on tcp connections. state sync on | David Gwynne |
2009-04-30 | treat log as what it is, a flag variable. effectively a noop now but stops | Henning Brauer |
2009-04-23 | print the type of the icmp message we're bitching about when debugging is | David Gwynne |
2009-04-18 | Make "route(8) change" aware of MPLS. | Michele Marchetto |
2009-04-17 | move the lastr = r assignment behind the anchor rule check so we don't | Henning Brauer |
2009-04-16 | Really turn fragment reassembly on by default. pfctl must handle this | David Krause |
2009-04-15 | little dose of scrubbing after the monster changes: | Henning Brauer |
2009-04-15 | move OK ICMP to NOISY level, makes it easier to run at MISC level; ok henning@ | David Krause |
2009-04-15 | move pfsync stale update messages to NOISY level; ok dlg@ henning@ | David Krause |
2009-04-14 | Correctly handle the case when state might be NULL in pf_test like | Alexander Yurchenko |
2009-04-11 | Avoid dereferencing a null pointer when pf attempts to translate a | Joel Sing |
2009-04-07 | after i took everything in this fiule apart and reassembled with a lot of | Henning Brauer |
2009-04-07 | turn fragment reassembly on by default. the is little to no reason to | Henning Brauer |
2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
2009-04-04 | use time_uptime instead of time_second internally. time_uptime isnt | David Gwynne |
2009-03-31 | claudio has spent too much time with the mbuf macros. | David Gwynne |
2009-03-31 | do not include space in the end of the from for a hmac. after discussion | David Gwynne |
2009-03-23 | wait an appropriate amount of time before giving up on a bulk update, | David Gwynne |
2009-03-17 | we do know how to handle iack. in the rx path at least. | David Gwynne |
2009-03-15 | Introduce splsoftassert(), similar to splassert() but for soft interrupt | Miod Vallat |
2009-03-14 | Some ICMP types that also have icmp_id, pointed out by markus@ | Ryan Thomas McBride |
2009-03-09 | Make the DIOCSETIFFLAG, DIOCSETLIMIT, and DIOCSETTIMEOUT ioctls | Ryan Thomas McBride |
2009-03-07 | Make sure pd2 has a pointer to the icmp header in the payload; fixes | Ryan Thomas McBride |
2009-03-05 | Fix a panic in ether_output() when attempting to send multicast traffic on | Michele Marchetto |
2009-03-05 | Stricter state checking for ICMP and ICMPv6 packets: include the ICMP type | Ryan Thomas McBride |
2009-03-02 | Make sure rt_gateway is not NULL in rt_mpath_matchgate(). It is possible to | Claudio Jeker |
2009-03-01 | rework serialisation of messages slightly. | David Gwynne |
2009-03-01 | check pfsyncs IFF_RUNNING flag before doing stuff. should save time for | David Gwynne |
2009-03-01 | i can't see a reason that we'd need to go to splnet to call ip_output. | David Gwynne |