aboutsummaryrefslogtreecommitdiff
path: root/sys/contrib/ipfilter
Commit message (Expand)AuthorAgeFilesLines
* The bucket index is subtracted by one at lines 2304 and 2314. When 0 itCy Schubert2018-08-191-2/+4
* Add handy DTrace probes useful in diagnosing NAT issues. DTrace probesCy Schubert2018-08-191-0/+19
* Expose np (nat_t - an entry in the nat table structure) in the DTraceCy Schubert2018-08-191-1/+1
* Correct a comment. Should have been detected by ipf_nat_in() notCy Schubert2018-08-101-1/+1
* Identify the return value (rval) that led to the IPv4 NAT failureCy Schubert2018-08-101-6/+22
* Remove redundant and incorrect default definition of AF_INET6. AF_INET6Cy Schubert2018-08-071-4/+0
* Use the new VNET_DEFINE_STATIC macro when we are defining static VNETAndrew Turner2018-07-241-1/+1
* ifnet: Replace if_addr_lock rwlock with epoch + mutexMatt Macy2018-05-182-3/+3
* Fix style error introduced in r333393.Cy Schubert2018-05-091-1/+1
* Document intentional fallthrough. (CID 976535)Cy Schubert2018-05-091-0/+1
* Fix memory leak. (CID 1199373).Cy Schubert2018-05-091-0/+1
* style: Remove remaining deprecated MALLOC/FREE macrosConrad Meyer2018-01-251-4/+4
* Remove redundant variable.Cy Schubert2018-01-131-2/+0
* Though this block of code is not used by FreeBSD, correct a call toCy Schubert2018-01-131-1/+1
* When growing the state, also grow the seed array. Otherwise memoryCy Schubert2018-01-091-18/+43
* Correct function name in description block.Cy Schubert2018-01-041-1/+1
* Fix typo from r323945.Cy Schubert2017-09-241-1/+1
* Correct two misspellings. Also align */.Cy Schubert2017-09-231-2/+2
* Don't use an apostrophe in a possesive pronoun.Cy Schubert2017-09-181-1/+1
* Improve the wording of a comment describing why EAGAIN is the error code.Cy Schubert2017-09-121-4/+4
* Fix matchcing of NATed ICMP queries (resolving NATed MTU discovery).Cy Schubert2017-08-051-13/+6
* Revert r318789. It causes hanging NAT tcp sessions.Cy Schubert2017-05-291-2/+0
* Fix return value of ip_sync_nat. Previously, regardless of error itCy Schubert2017-05-271-2/+2
* Ifdef out a redundant if statement when LARGE_NAT is disabled.Cy Schubert2017-05-241-0/+2
* Remove redundant variable declaration.Cy Schubert2017-05-231-4/+0
* Refactor & compact struct i6addr_t #ifdef: remove redundant structureCy Schubert2017-05-221-14/+2
* Restore prototype accidently removed by r316811. Also remove $NetBSD$Cy Schubert2017-04-191-1/+1
* Clean up extraneous brackets.Cy Schubert2017-04-151-2/+2
* Add missing free()'s after calls to randomize().Cy Schubert2017-04-141-1/+5
* Keep state incorrectly assumes keep frags. This is counter to theCy Schubert2017-04-142-2/+3
* Fix a use after free panic in ipfilter's fragment processing.Cy Schubert2017-04-141-1/+1
* Fix lookup of original destination address when using a redirect rule.Cy Schubert2017-01-272-4/+4
* Currently the fragment info is placed at the top of the linked listCy Schubert2017-01-262-1/+6
* Get rid of a compiler warning which I saw too often.Bjoern A. Zeeb2017-01-121-4/+4
* In case of removal of m_copy() the macro should remain named M_COPY()Kevin Lo2016-10-082-3/+3
* Remove an extra etter.Eitan Adler2016-09-291-1/+1
* Remove the compatibility macro if_addrlist.Kevin Lo2016-09-291-0/+1
* Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.Kevin Lo2016-09-153-4/+4
* Follow-up to r304953, in which I broke the build: apparently the SOLARISDimitry Andric2016-08-285-14/+28
* Complete r304953.Konstantin Belousov2016-08-281-1/+5
* Define ipfilter's SOLARIS macro in a defined and portable way.Dimitry Andric2016-08-281-1/+5
* Only set the ipfilter running state to 'not running' if we areBjoern A. Zeeb2016-07-061-2/+3
* Virtualise ipfilter.Bjoern A. Zeeb2016-06-305-159/+345
* Remove unused global variables as well as unused memoryBjoern A. Zeeb2016-06-303-23/+0
* Get closer to a VIMAGE network stack teardown from top to bottom ratherBjoern A. Zeeb2016-06-211-1/+1
* Remove extraneous blank line.Cy Schubert2016-05-201-1/+0
* Enable the two ip_frag tuneables. The code is there but the twoCy Schubert2016-05-202-1/+21
* Make subsequent code reachable.Cy Schubert2016-05-151-3/+6
* Use NULL instead of 0 for pointer comparison.Cy Schubert2016-04-151-2/+2
* Add DTrace probes for packets flagged as bad by ipfilter. All probesCy Schubert2016-04-074-11/+62