FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F13.1.0 2022-02-18T10:14:59Z 2022-02-18T10:14:59Z Kristof Provost kp@FreeBSD.org 2022-01-31T17:31:53Z urn:sha1:c428292cb3768d913eda6d546ece59379b6277d5 735748f30a changed the output of the states so that the creator id endianness would be consistent. This means that we need to convert the host endianness creatorid back to big-endian before we give it to the kernel. MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 6f47a72d8ebf444641bda192b33eb217c9013811) 2022-02-18T10:14:58Z Kristof Provost kp@FreeBSD.org 2022-01-21T16:50:15Z urn:sha1:63220460d0af381abfaddc4a203c3df21bd9719d We provide the hostid (which is the state creatorid) to the kernel as a big endian number (see pfctl/pfctl.c pfctl_set_hostid()), so convert it back to system endianness when we get it from the kernel. This avoids a confusing mismatch between the value the user configures and the value displayed in the state. MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D33989 (cherry picked from commit 735748f30aad80593e2b7f5f5f175d64484c5eeb) 2021-12-01T15:53:20Z Kristof Provost kp@FreeBSD.org 2021-11-08T12:28:43Z urn:sha1:10199101997bdc352a74998dc7a39a24f5d722c4 We didn't populate dyncnt/tblcnt, so `pfctl -sr -vv` might not have the table element count. PR: 259689 MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D32893 (cherry picked from commit 2de49deeca0b1377664dee2cd0a43ee7cf6b4bc4) 2021-12-01T15:53:19Z Kristof Provost kp@FreeBSD.org 2021-11-08T12:25:20Z urn:sha1:525205b5d2f12b85c84cf060b5e42d5472e31501 PR: 259689 MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D32892 (cherry picked from commit 218a8a491c4980dcc941908f9505d37e7f052868) 2021-11-26T03:42:04Z Kristof Provost kp@FreeBSD.org 2021-11-05T08:37:56Z urn:sha1:9aa63a8d13c6aa873cecca6858f52d1c381ecfd5 Always use uint64_t over u_int64_t, for the sake of consistency. No functional change. MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 7bb3c927f7d9c48b356b4d20907b813f9b83273b) 2021-11-26T03:39:05Z Kristof Provost kp@FreeBSD.org 2021-10-29T15:40:53Z urn:sha1:cfe9b890d574a92e8b04eb662e9ac2010d243193 Allow users to set a number on rules which will be exposed as part of the pflog header. The intent behind this is to allow users to correlate rules across updates (remember that pf rules continue to exist and match existing states, even if they're removed from the active ruleset) and pflog. Obtained from: pfSense MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D32750 (cherry picked from commit 76c5eecc3490d89a9a3492ed2354802b69d69602) 2021-10-06T08:46:54Z Kristof Provost kp@FreeBSD.org 2021-08-13T11:42:59Z urn:sha1:c5a340e864028fcb35301275d38bafd39eb2fd26 Hook up the userspace bits to configure syncookies in adaptive mode. MFC after: 1 week Sponsored by: Modirum MDPay Differential Revision: https://reviews.freebsd.org/D32136 (cherry picked from commit 5062afff9de7e67da96e3f0dcb9d8bbd5a4e1c5b) 2021-09-06T08:06:33Z Kristof Provost kp@FreeBSD.org 2021-08-26T15:06:15Z urn:sha1:d1d99d7575dac949030a065c952651514c8bf50f MFC after: 1 week Sponsored by: Modirum MDPay Differential Revision: https://reviews.freebsd.org/D31696 (cherry picked from commit 46fb68b1de49c8d235024374b71c1249af9e62ef) 2021-09-06T08:06:29Z Kristof Provost kp@FreeBSD.org 2021-08-22T14:20:15Z urn:sha1:6f85e21674a15174be96de95275dd36b61a404dc Reviewed by: donner MFC after: 1 week Sponsored by: Modirum MDPay Differential Revision: https://reviews.freebsd.org/D31695 (cherry picked from commit b0ccc2e277acddd33c65b444e7841b780b3094d7) 2021-08-23T14:19:39Z Kristof Provost kp@FreeBSD.org 2021-08-20T11:43:15Z urn:sha1:b98f2ec0d635639987dcb6c6261f9013b35c3777 Several fields are supplied in big-endian format, so we need to convert them before we display them. MFC after: 3 days Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 719b5397c2887bc0619bb6ffb38f67f37bbf13c6)