| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | States in pf(4) let ICMP and ICMP6 packets pass if they have a |   bluhm | 2019-03-20 | 1 | -4/+24 |
| * | Use timeout_add_sec() instead of timeout_add() with a multiplication with hz |   claudio | 2018-12-17 | 1 | -2/+2 |
| * | Remove useless macros |   kn | 2018-12-10 | 1 | -32/+34 |
| * | in the "pf: key search" debug message, add the direction. interface *and* |   henning | 2018-11-15 | 1 | -2/+3 |
| * | - pf: honor quick on anchor rules |   sashan | 2018-10-16 | 1 | -4/+5 |
| * | Honor quick on anchor rules | kn | 2018-10-04 | 1 | -1/+7 |
| * | Add reference counting for inet pcb, this will be needed when we | bluhm | 2018-09-13 | 1 | -7/+27 |
| * | - moving state look up outside of PF_LOCK() | sashan | 2018-09-11 | 1 | -33/+117 |
| * | Fix arguments of pf_purge_expired_{src_nodes,rules}() |   sf | 2018-07-22 | 1 | -2/+2 |
| * | trade few 'goto unlock: for 'break' in pf_test() | sashan | 2018-07-12 | 1 | -6/+5 |
| * | the STATE_LOOKUP macro made sense ages ago. It stopped making sense | henning | 2018-07-11 | 1 | -56/+69 |
| * | in pf_set_protostate(), only decrement the half-open states counter when | henning | 2018-07-10 | 1 | -2/+2 |
| * | provide a generic packet delay functionality. packets to be delayed are marked | henning | 2018-07-10 | 1 | -3/+43 |
| * | Refactor the six ways to find TCP options into one new function. As a result: |   procter | 2018-06-18 | 1 | -106/+91 |
| * | The function pf_create_state() calls pf_set_protostate() before | bluhm | 2018-06-04 | 1 | -2/+3 |
| * | While sending the pf syncookie, we are holding the pf lock. So | bluhm | 2018-06-01 | 1 | -2/+2 |
| * | pf route-to should not send packets from 127.0.0.1 or ::1 address | bluhm | 2018-05-10 | 1 | -3/+5 |
| * | All users of the PFLOG_PACKET() macro are inside "#if NPFLOG > 0". | bluhm | 2018-04-06 | 1 | -6/+6 |
| * | If source and destination addresses are equal, the incoming and | bluhm | 2018-03-06 | 1 | -5/+4 |
| * | make kernel compile again without INET6 |   benno | 2018-02-27 | 1 | -1/+5 |
| * | - regression in pflog output | sashan | 2018-02-18 | 1 | -9/+16 |
| * | syncookies for pf. | henning | 2018-02-06 | 1 | -4/+51 |
| * | some finger muscle workout: | henning | 2018-02-06 | 1 | -16/+16 |
| * | Use the pf state key linking functions in two more places instead | bluhm | 2018-01-19 | 1 | -21/+6 |
| * | If pf route-to is used for locally generated packets, they may have | bluhm | 2018-01-16 | 1 | -6/+13 |
| * | When pf(4) forwards incoming packets with route-to or reply-to, | bluhm | 2018-01-15 | 1 | -1/+23 |
| * | Use pf_send_icmp() consistently in pf_route(). It sets the routing | bluhm | 2018-01-10 | 1 | -15/+17 |
| * | Make sure that pf_mbuf_link_state_key() does not overwrite an | bluhm | 2017-12-29 | 1 | -1/+2 |
| * | Make the functions which link the pf state keys to mbufs, inpcbs, | bluhm | 2017-12-29 | 1 | -34/+59 |
| * | pf drops IPv4 packets with any options by default. For IPv6 the | bluhm | 2017-12-28 | 1 | -1/+3 |
| * | There was a corner case where linking the inp to the state key did | bluhm | 2017-12-24 | 1 | -3/+15 |
| * | RFC 4861 requires that all neighbor discovery packets have 255 in | bluhm | 2017-12-04 | 1 | -1/+9 |
| * | Simplify the reverse PCB lookup logic. The PF_TAG_TRANSLATE_LOCALHOST | bluhm | 2017-12-01 | 1 | -4/+4 |
| * | The divert structure was using the port number to indicate that | bluhm | 2017-11-28 | 1 | -8/+11 |
| * | It does not make sense to call pcb lookup from pf during packet | bluhm | 2017-11-22 | 1 | -2/+14 |
| * | Sprinkle some NET_ASSERT_LOCKED(), const and co to prepare running |   mpi | 2017-11-20 | 1 | -1/+3 |
| * | add a generic packet rate matching filter. allows things like | henning | 2017-11-13 | 1 | -3/+15 |
| * | remove the ability for pf_ouraddr to say that a packet is forwarded. |   dlg | 2017-11-13 | 1 | -5/+1 |
| * | - add one more softnet taskq | sashan | 2017-10-31 | 1 | -2/+2 |
| * | move pf_get_wscale + pf_get_mss prototypes to pfvar.h (diff shrinkage) | henning | 2017-08-14 | 1 | -3/+1 |
| * | add half-open tcp states accounting, road paved by sashan | henning | 2017-08-14 | 1 | -3/+13 |
| * | to change a state's state (that term is overloaded in pf, protocol state | henning | 2017-08-13 | 1 | -57/+95 |
| * | Remove NET_LOCK()'s argument. | mpi | 2017-08-11 | 1 | -4/+3 |
| * | Reduce contention on the NET_LOCK() by moving the logic of the pfpurge | mpi | 2017-08-06 | 1 | -24/+35 |
| * | Revert previous, it exposed two edge cases still requiring the | mpi | 2017-07-04 | 1 | -6/+5 |
| * | Drop the KERNEL_LOCK() in pf_purge_thread(). | mpi | 2017-07-03 | 1 | -5/+6 |
| * | Fix kernel diagnostic assertion "(sk->inp == NULL) || (sk->inp->inp_pf_sk | bluhm | 2017-06-21 | 1 | -3/+3 |
| * | - let's add PF_LOCK() | sashan | 2017-06-05 | 1 | -13/+34 |
| * | Block IPv6 packets in pf(4) that have hop-by-hop options header or | bluhm | 2017-05-31 | 1 | -3/+8 |
| * | teach pf_build_tcp() about SACK, ok & with sashan | henning | 2017-05-30 | 1 | -5/+13 |
