| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| ... | |
| * | All users of the PFLOG_PACKET() macro are inside "#if NPFLOG > 0". |   bluhm | 2018-04-06 | 1 | -6/+6 |
| * | If source and destination addresses are equal, the incoming and | bluhm | 2018-03-06 | 1 | -5/+4 |
| * | make kernel compile again without INET6 |   benno | 2018-02-27 | 1 | -1/+5 |
| * | - regression in pflog output |   sashan | 2018-02-18 | 1 | -9/+16 |
| * | syncookies for pf. |   henning | 2018-02-06 | 1 | -4/+51 |
| * | some finger muscle workout: | henning | 2018-02-06 | 1 | -16/+16 |
| * | Use the pf state key linking functions in two more places instead | bluhm | 2018-01-19 | 1 | -21/+6 |
| * | If pf route-to is used for locally generated packets, they may have | bluhm | 2018-01-16 | 1 | -6/+13 |
| * | When pf(4) forwards incoming packets with route-to or reply-to, | bluhm | 2018-01-15 | 1 | -1/+23 |
| * | Use pf_send_icmp() consistently in pf_route(). It sets the routing | bluhm | 2018-01-10 | 1 | -15/+17 |
| * | Make sure that pf_mbuf_link_state_key() does not overwrite an | bluhm | 2017-12-29 | 1 | -1/+2 |
| * | Make the functions which link the pf state keys to mbufs, inpcbs, | bluhm | 2017-12-29 | 1 | -34/+59 |
| * | pf drops IPv4 packets with any options by default. For IPv6 the | bluhm | 2017-12-28 | 1 | -1/+3 |
| * | There was a corner case where linking the inp to the state key did | bluhm | 2017-12-24 | 1 | -3/+15 |
| * | RFC 4861 requires that all neighbor discovery packets have 255 in | bluhm | 2017-12-04 | 1 | -1/+9 |
| * | Simplify the reverse PCB lookup logic. The PF_TAG_TRANSLATE_LOCALHOST | bluhm | 2017-12-01 | 1 | -4/+4 |
| * | The divert structure was using the port number to indicate that | bluhm | 2017-11-28 | 1 | -8/+11 |
| * | It does not make sense to call pcb lookup from pf during packet | bluhm | 2017-11-22 | 1 | -2/+14 |
| * | Sprinkle some NET_ASSERT_LOCKED(), const and co to prepare running |   mpi | 2017-11-20 | 1 | -1/+3 |
| * | add a generic packet rate matching filter. allows things like | henning | 2017-11-13 | 1 | -3/+15 |
| * | remove the ability for pf_ouraddr to say that a packet is forwarded. |   dlg | 2017-11-13 | 1 | -5/+1 |
| * | - add one more softnet taskq | sashan | 2017-10-31 | 1 | -2/+2 |
| * | move pf_get_wscale + pf_get_mss prototypes to pfvar.h (diff shrinkage) | henning | 2017-08-14 | 1 | -3/+1 |
| * | add half-open tcp states accounting, road paved by sashan | henning | 2017-08-14 | 1 | -3/+13 |
| * | to change a state's state (that term is overloaded in pf, protocol state | henning | 2017-08-13 | 1 | -57/+95 |
| * | Remove NET_LOCK()'s argument. | mpi | 2017-08-11 | 1 | -4/+3 |
| * | Reduce contention on the NET_LOCK() by moving the logic of the pfpurge | mpi | 2017-08-06 | 1 | -24/+35 |
| * | Revert previous, it exposed two edge cases still requiring the | mpi | 2017-07-04 | 1 | -6/+5 |
| * | Drop the KERNEL_LOCK() in pf_purge_thread(). | mpi | 2017-07-03 | 1 | -5/+6 |
| * | Fix kernel diagnostic assertion "(sk->inp == NULL) || (sk->inp->inp_pf_sk | bluhm | 2017-06-21 | 1 | -3/+3 |
| * | - let's add PF_LOCK() | sashan | 2017-06-05 | 1 | -13/+34 |
| * | Block IPv6 packets in pf(4) that have hop-by-hop options header or | bluhm | 2017-05-31 | 1 | -3/+8 |
| * | teach pf_build_tcp() about SACK, ok & with sashan | henning | 2017-05-30 | 1 | -5/+13 |
| * | export_pflow() is no longer grabbing the NET_LOCK(), so no need to | mpi | 2017-05-29 | 1 | -6/+2 |
| * | Limit the nested header chain for IPv6 extensions headers and for | bluhm | 2017-05-28 | 1 | -6/+16 |
| * | Fix bad white spaces, wrap long lines, kill some empty lines. | bluhm | 2017-05-28 | 1 | -5/+7 |
| * | Pf was handling IPv4 and IPv6 differently regarding AH extension | bluhm | 2017-05-28 | 1 | -18/+52 |
| * | Move the common length check in pf_pull_hdr() after the address | bluhm | 2017-05-23 | 1 | -14/+10 |
| * | - fixes regression found by pf_forward test | sashan | 2017-05-20 | 1 | -1/+2 |
| * | Change PF behavior to allow MLD Listener Report packets to be sent |   rzalamena | 2017-05-19 | 1 | -3/+9 |
| * | - percpu anchor stacks | sashan | 2017-05-16 | 1 | -250/+270 |
| * | Replace remaining splsoftassert(IPL_SOFTNET) by NET_ASSERT_LOCKED(). | mpi | 2017-05-16 | 1 | -3/+3 |
| * | Enable the NET_LOCK(), take 3. | mpi | 2017-05-15 | 1 | -36/+15 |
| * | Put back the call to pf_remove_src_node lost in the netlock backout |   mikeb | 2017-05-05 | 1 | -1/+2 |
| * | Introduce sstosa() for converting sockaddr_storage with a type safe | bluhm | 2017-05-04 | 1 | -3/+3 |
| * | Revert the NET_LOCK() and bring back pf's contention lock for release. | mpi | 2017-03-17 | 1 | -16/+36 |
| * | Prevent integer overflow in PF when calculating the adaptive timeout. |   claudio | 2017-03-09 | 1 | -3/+3 |
| * | Don't overwrite the flow ID once it's set | mikeb | 2017-03-07 | 1 | -2/+2 |
| * | Enforce that tcbtable and udbtable must be accessed with the NET_LOCK(). | mpi | 2017-03-07 | 1 | -1/+3 |
| * | percpu counters for TCP stats |   jca | 2017-02-09 | 1 | -3/+3 |
