| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | spelling |   jsg | 2021-03-10 | 1 | -2/+2 |
| * | Refactor ip_fragment() and ip6_fragment(). Use a mbuf list to |   bluhm | 2021-03-01 | 1 | -28/+15 |
| * | When cutting of the head of an overlapping fragment during pf | bluhm | 2021-02-22 | 1 | -1/+26 |
| * | Activate use of PF_LOCK() by removing the WITH_PF_LOCK ifdefs. |   patrick | 2021-02-09 | 1 | -7/+1 |
| * | kernel: use gettime(9)/getuptime(9) in lieu of time_second(9)/time_uptime(9) |   cheloha | 2020-06-24 | 1 | -4/+4 |
| * | IPv6 fragments with malformed extension headers could be erroneously | bluhm | 2019-02-28 | 1 | -3/+3 |
| * | Make pf compile without DIAGNOSTIC again |   reyk | 2018-10-23 | 1 | -1/+3 |
| * | Instead of calculating the mbuf packet header length here and there, | bluhm | 2018-09-10 | 1 | -20/+3 |
| * | During fragment reassembly, mbuf chains with packet headers were | bluhm | 2018-09-10 | 1 | -3/+8 |
| * | Limit the fragment entry queue length to 64 per bucket. So we have | bluhm | 2018-09-10 | 1 | -13/+34 |
| * | Split the pf(4) fragment reassembly queue into smaller parts. | bluhm | 2018-09-08 | 1 | -21/+154 |
| * | Forgot to rename pf_frent_holes() prototype in previous commit. | bluhm | 2018-09-04 | 1 | -2/+2 |
| * | Avoid traversing the list of fragment entris to check whether the | bluhm | 2018-09-04 | 1 | -41/+47 |
| * | Refactor the six ways to find TCP options into one new function. As a result: |   procter | 2018-06-18 | 1 | -153/+102 |
| * | some finger muscle workout: |   henning | 2018-02-06 | 1 | -2/+2 |
| * | Fragments for a single connection (a combination of proto,src,dst,af) | bluhm | 2017-06-26 | 1 | -1/+24 |
| * | To avoid packet loss due to reuse of the 16 bit IPv4 fragment id, | bluhm | 2017-06-24 | 1 | -63/+113 |
| * | When dealing with mbuf pointers passed down as function parameters, | bluhm | 2017-06-19 | 1 | -3/+2 |
| * | - let's add PF_LOCK() |   sashan | 2017-06-05 | 1 | -6/+39 |
| * | Enable the NET_LOCK(), take 3. |   mpi | 2017-05-15 | 1 | -1/+3 |
| * | Some of the LOG_NOTICE messages from PF were seen in normal operations |   sthen | 2017-04-23 | 1 | -5/+5 |
| * | Revert the NET_LOCK() and bring back pf's contention lock for release. | mpi | 2017-03-17 | 1 | -3/+1 |
| * | removes the pf_consistency_lock and protects the users with |   benno | 2017-01-30 | 1 | -1/+3 |
| * | In pf_refragment6() use the valid route from pf_route6() instead | bluhm | 2016-12-29 | 1 | -13/+2 |
| * | Use __func__ instead of explicit function name in panic messages. | bluhm | 2016-12-29 | 1 | -4/+4 |
| * | Fix white spaces. No binary change. | bluhm | 2016-12-28 | 1 | -10/+10 |
| * | Fold union pf_headers buffer into struct pf_pdesc (enabled by pfvar_priv.h). | procter | 2016-11-22 | 1 | -5/+5 |
| * | Follow RFC 5722 more strictly when handling overlapping fragments | bluhm | 2016-11-21 | 1 | -4/+7 |
| * | Put union pf_headers and struct pf_pdesc into separate header file | bluhm | 2016-10-26 | 1 | -8/+9 |
| * | roll back turning RB into RBT until i get better at this process. |   dlg | 2016-09-27 | 1 | -12/+12 |
| * | move pf from the RB macros to the RBT functions. | dlg | 2016-09-27 | 1 | -12/+12 |
| * | all pools have their ipl set via pool_setipl, so fold it into pool_init. | dlg | 2016-09-15 | 1 | -10/+7 |
| * | pool_setipl for pf bits | dlg | 2016-09-02 | 1 | -1/+4 |
| * | Kill ip6_forward_rt reducing differences between v4 and v6. | mpi | 2016-08-24 | 1 | -2/+2 |
| * | Reintroduce 5.3-style checksum modification to preserve end-to-end checksums | procter | 2016-08-17 | 1 | -34/+37 |
| * | Kill nd6_output(), it doesn't do anything since the resolution logic | mpi | 2016-06-15 | 1 | -2/+2 |
| * | There's no need to convert values returned by arc4random to the network |   mikeb | 2016-06-15 | 1 | -3/+2 |
| * | Do not call nd6_output() without route entry argument. | mpi | 2016-05-31 | 1 | -2/+14 |
| * | Backout pf.c r1.972, pf_norm.c r1.184, ok claudio | sthen | 2016-05-28 | 1 | -14/+2 |
| * | Do not call nd6_output() without route entry argument. | mpi | 2016-05-24 | 1 | -2/+14 |
| * | No need for <net/if_types.h> | mpi | 2015-11-24 | 1 | -2/+1 |
| * | Kill two simple in6_ifstat_inc(). | mpi | 2015-09-10 | 1 | -2/+1 |
| * | PF must keep IPv6 fragment size as chosen by sender also for packets, | sashan | 2015-08-19 | 1 | -5/+18 |
| * | unused arguments at pf_normalize_tcp_init() and pf_refragment6() | sashan | 2015-07-19 | 1 | -4/+3 |
| * | INET/INET6 address family check should be unified in PF | sashan | 2015-07-18 | 1 | -4/+8 |
| * | Eliminate rabid semicolon |   chris | 2015-05-05 | 1 | -2/+2 |
| * | In most cases, IP fragments do not have an Ethernet padding. So | bluhm | 2015-04-29 | 1 | -3/+5 |
| * | On Ethernet packets have a minimal length, so very short packets | bluhm | 2015-04-17 | 1 | -2/+6 |
| * | Remove some includes include-what-you-use claims don't | jsg | 2015-03-14 | 1 | -2/+1 |
| * | pf normalization code was in dire need of style normalization. | henning | 2015-02-08 | 1 | -67/+38 |
