| Commit message (Expand) | Author | Age | Files | Lines |
* | spelling | jsg | 2021-03-10 | 1 | -2/+2 |
* | make if_pfsync.c a better friend with PF_LOCK | sashan | 2021-02-04 | 1 | -2/+2 |
* | - moving state look up outside of PF_LOCK() | sashan | 2018-09-11 | 1 | -2/+2 |
* | Pass down the address family through the pr_input calls. This | bluhm | 2017-04-14 | 1 | -2/+2 |
* | pfsync(4) percpu counters | jca | 2017-02-20 | 1 | -1/+31 |
* | Change the IPv4 pr_input function to the way IPv6 is implemented, | bluhm | 2017-01-29 | 1 | -2/+2 |
* | Since raw_input() and route_input() are gone from pr_input, we can | bluhm | 2017-01-25 | 1 | -2/+2 |
* | Stop using pfsockaddr_union outside of pf so that we can remove its usage | claudio | 2017-01-20 | 1 | -3/+2 |
* | Userland (base & ports) was adapted to always include <netinet/in.h> | deraadt | 2015-01-24 | 1 | -2/+2 |
* | Move obvious kernel prototypes (and structure's with kernel pointers, | deraadt | 2013-10-24 | 1 | -2/+2 |
* | add ESN-related bits missed in the previous commit | mikeb | 2012-06-29 | 1 | -5/+7 |
* | Add support for the Extended (64-bit) Sequence Number as defined | mikeb | 2012-06-29 | 1 | -2/+2 |
* | get rid of struct pfsync_pkt. it was used to store data on the stack to | dlg | 2010-11-29 | 1 | -2/+2 |
* | Add support for using IPsec in multiple rdomains. | reyk | 2010-07-09 | 1 | -2/+2 |
* | factor m_pulldown out of the message handlers up into pfsync_input now | dlg | 2010-01-12 | 1 | -12/+5 |
* | replace a pad in the pfsync subheader with a length field. it stores the | dlg | 2010-01-10 | 1 | -3/+3 |
* | bump pfsync protocol version | dlg | 2009-11-09 | 1 | -2/+2 |
* | rtables are stacked on rdomains (it is possible to have multiple routing | claudio | 2009-11-03 | 1 | -12/+22 |
* | enable support for deferring the packet that creates a state so that your | dlg | 2009-06-14 | 1 | -3/+4 |
* | do not include space in the end of the from for a hmac. after discussion | dlg | 2009-03-31 | 1 | -3/+1 |
* | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | dlg | 2009-02-16 | 1 | -144/+211 |
* | Simplify state creation code; merge state import/export code between pfsync | mcbride | 2008-06-29 | 1 | -52/+12 |
* | Crank PFSYNC_VERSION, lots has changed in struct pfsync_state due to the | mcbride | 2008-06-17 | 1 | -2/+2 |
* | Second half of PF state table rearrangement. | mcbride | 2008-05-29 | 1 | -12/+2 |
* | add sysctl entry points into various network layers, in particular to | deraadt | 2007-12-14 | 1 | -1/+14 |
* | First step of rearranging pf's state table internals... | mcbride | 2007-05-31 | 1 | -58/+3 |
* | make pfsync a clonable too, but prevent more than one instance from | henning | 2006-10-31 | 1 | -2/+2 |
* | Only preemptively increase the replay counter for outbound TDBs. | mcbride | 2006-05-28 | 1 | -2/+2 |
* | crank pf_state and pf_src_node byte and packet counters to u_in64_t, since | mcbride | 2005-11-04 | 1 | -3/+14 |
* | Basic support for attaching states from pfsync to the correct rules. | mcbride | 2005-10-27 | 1 | -2/+3 |
* | Improve the safety of pf IOCTLs, taking into account that some paths can sleep. | pascoe | 2005-09-28 | 1 | -1/+5 |
* | Only send the PFSS_TIMESTAMP timestamp bit across the wire, in case we | pascoe | 2005-08-16 | 1 | -2/+3 |
* | Synchronise timestamp modulation and scrubbing min ttl information. | pascoe | 2005-08-16 | 1 | -3/+16 |
* | Partial backout of previous revision, reinstates the ability to propagate | pascoe | 2005-08-13 | 1 | -3/+2 |
* | Do not send "deletion" messages for states created by other pfsync peers when | pascoe | 2005-08-03 | 1 | -3/+3 |
* | use flag macro instead of constant | pascoe | 2005-08-03 | 1 | -2/+3 |
* | Add SA replay counter synchronization to pfsync(4). Required for IPsec | ho | 2005-05-28 | 1 | -3/+22 |
* | Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreq | mcbride | 2005-01-20 | 1 | -2/+2 |
* | move the ioctls w/ all the other ifaces; mcbride@ ok | mickey | 2004-12-14 | 1 | -3/+1 |
* | Fix for PR3983 | mcbride | 2004-11-16 | 1 | -3/+8 |
* | Allow a unicast ip address to be specified for pfsync to send it's state | mcbride | 2004-08-03 | 1 | -5/+7 |
* | spelling; dlg | deraadt | 2004-07-13 | 1 | -3/+3 |
* | pfsync stats fixups: | mcbride | 2004-04-28 | 1 | -16/+18 |
* | Support for best effort bulk transfers of states when pfsync syncif is | mcbride | 2004-03-22 | 1 | -3/+24 |
* | Make pfsync deal with clearing states bound to a group or interface (eg | mcbride | 2004-02-20 | 1 | -3/+5 |
* | Make pfsync work correctly with IP options on 64-bit alignment | mcbride | 2004-02-10 | 1 | -5/+8 |
* | - Include the value of pf_state.timeout in pfsync messages | mcbride | 2004-01-22 | 1 | -2/+3 |
* | Port is already stored in network byte order, no need to convert. | mcbride | 2004-01-18 | 1 | -3/+3 |
* | Many improvements to the handling of interfaces in PF. | cedric | 2003-12-31 | 1 | -2/+3 |
* | Add a new PFSYNC_ACT_UREQ message type. | mcbride | 2003-12-28 | 1 | -18/+27 |