| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Bridged packets are supplied to the firewall with their IP header | Ian Dowse | 2002-12-27 | 1 | -1/+6 |
| * | o Untangle the confusion with the malloc flags {M_WAITOK, M_NOWAIT} and | Bosko Milekic | 2002-12-19 | 1 | -2/+2 |
| * | Remove (almost all) global variables that were used to hold | Luigi Rizzo | 2002-06-22 | 1 | -38/+42 |
| * | Remove custom definitions (IP_FW_TCPF_SYN etc.) of TCP header flags | Luigi Rizzo | 2002-05-13 | 1 | -2/+1 |
| * | Add code to match MAC header fields (at the moment supported on | Luigi Rizzo | 2002-05-12 | 1 | -62/+108 |
| * | Cleanup the interface to ip_fw_chk, two of the input arguments | Luigi Rizzo | 2002-05-09 | 1 | -74/+81 |
| * | Enlighten those who read the FINE POINTS of the documentation a bit | Crist J. Clark | 2002-05-01 | 1 | -2/+6 |
| * | Simple p_ucred -> td_ucred changes to start using the per-thread ucred | John Baldwin | 2002-02-27 | 1 | -1/+1 |
| * | BUGFIX: make use of the pointer to the target of skipto rules, | Luigi Rizzo | 2002-02-20 | 1 | -2/+4 |
| * | o Move NTOHL() and associated macros into <sys/param.h>. These are | Mike Barcroft | 2002-02-18 | 1 | -2/+2 |
| * | Silence unused variable warning in the !KLD_MODULE case. | Dima Dorfman | 2002-02-10 | 1 | -0/+2 |
| * | Fix a missing "ipfw:" in a syslog message. | Crist J. Clark | 2002-01-07 | 1 | -1/+1 |
| * | Implement matching IP precedence in ipfw(4). | Yaroslav Tykhiy | 2001-12-21 | 1 | -1/+4 |
| * | minor whitespace fixes. | Jonathan Lemon | 2001-12-14 | 1 | -1/+1 |
| * | ipfw_modevent(): Don't use an unnatural block to define a variable | Dima Dorfman | 2001-11-27 | 1 | -3/+0 |
| * | Remove debugging printfs that weren't conditional on any debugging | Dima Dorfman | 2001-11-27 | 1 | -2/+0 |
| * | MFS: sync the ipfw/dummynet/bridge code with the one recently merged | Luigi Rizzo | 2001-11-04 | 1 | -76/+95 |
| * | Only allow users to see their own socket connections if | Paul Saab | 2001-10-05 | 1 | -4/+2 |
| * | Make it so dummynet and bridge can be loaded as modules. | Paul Saab | 2001-10-05 | 1 | -13/+5 |
| * | Fix a problem with unnumbered rules introduced in latest commit. | Luigi Rizzo | 2001-10-01 | 1 | -3/+3 |
| * | Two main changes here: | Luigi Rizzo | 2001-09-27 | 1 | -164/+242 |
| * | o Modify IPFW and DUMMYNET administrative setsockopt() calls to use | Robert Watson | 2001-09-26 | 1 | -3/+8 |
| * | Fix a null pointer dereference introduced in the last commit, plus | Luigi Rizzo | 2001-09-24 | 1 | -6/+4 |
| * | A bunch of minor changes to the code (see below) for readability, code size | Luigi Rizzo | 2001-09-20 | 1 | -304/+318 |
| * | the IP_FW_GET code in ip_fw_ctl() sizes a buffer to hold information | Bill Fumerola | 2001-08-26 | 1 | -0/+3 |
| * | While in there fixing a fragment logging bug, fix it so we log | Crist J. Clark | 2001-07-02 | 1 | -8/+11 |
| * | pipe/queue are the only consumers of flow_id, so only set it in those cases | Bill Fumerola | 2001-04-06 | 1 | -1/+1 |
| * | Replace dyn_fin_lifetime with dyn_ack_lifetime for half-closed state. | Hidetoshi Shimokawa | 2001-03-27 | 1 | -1/+1 |
| * | Only flush rules that have a rule number above that set by a new | Paul Richards | 2001-03-21 | 1 | -8/+17 |
| * | The TCP sequence number used for sending a RST with the ipfw reset rule | Jonathan Lemon | 2001-03-09 | 1 | -1/+1 |
| * | The TCP header-specific section suffered a little bit of bitrot recently: | Bill Fumerola | 2001-02-27 | 1 | -1/+1 |
| * | Clean up warning. | Jonathan Lemon | 2001-02-15 | 1 | -1/+0 |
| * | Introduce a new feature in IPFW: Check of the source or destination | Poul-Henning Kamp | 2001-02-13 | 1 | -0/+12 |
| * | Sync with the bridge/dummynet/ipfw code already tested in stable. | Luigi Rizzo | 2001-02-10 | 1 | -43/+41 |
| * | Mechanical change to use <sys/queue.h> macro API instead of | Poul-Henning Kamp | 2001-02-04 | 1 | -15/+14 |
| * | MFS: bridge/ipfw/dummynet fixes (bridge.c will be committed separately) | Luigi Rizzo | 2001-02-02 | 1 | -4/+2 |
| * | Make sure we do not follow an invalid pointer in ipfw_report | Luigi Rizzo | 2001-01-27 | 1 | -1/+2 |
| * | Minor cleanups after yesterday's patch. | Luigi Rizzo | 2001-01-26 | 1 | -4/+3 |
| * | Bring dummynet in line with the code that now works in -STABLE. | Luigi Rizzo | 2001-01-26 | 1 | -41/+39 |
| * | o IPFW incorrectly handled filtering in the presence of previously | Robert Watson | 2001-01-09 | 1 | -5/+13 |
| * | Convert more malloc+bzero to malloc+M_ZERO. | David Malone | 2000-12-08 | 1 | -6/+3 |
| * | Fixed the security breach I introduced in rev 1.145. | Ruslan Ermilov | 2000-11-07 | 1 | -3/+3 |
| * | Remove unneeded #include <sys/proc.h> lines. | Poul-Henning Kamp | 2000-10-29 | 1 | -1/+0 |
| * | Fetch the protocol header (TCP, UDP, ICMP) only from the first fragment | Ruslan Ermilov | 2000-10-27 | 1 | -16/+11 |
| * | Close PR22152 and PR19511 -- correct the naming of a variable | Luigi Rizzo | 2000-10-26 | 1 | -1/+1 |
| * | Allow for IP_FW_ADD to be used in getsockopt(2) incarnation as | Ruslan Ermilov | 2000-10-12 | 1 | -1/+3 |
| * | As we now may check the TCP header window field, make sure we pullup | Ruslan Ermilov | 2000-10-06 | 1 | -4/+4 |
| * | Added the missing ntohs() conversion when matching IP packet with | Ruslan Ermilov | 2000-10-03 | 1 | -1/+1 |
| * | Add new fields for more granularity: | Bill Fumerola | 2000-10-02 | 1 | -4/+48 |
| * | Document that net.inet.ip.fw.one_pass only affects dummynet(4). | Ruslan Ermilov | 2000-09-29 | 1 | -1/+1 |
