aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/ipfilter
Commit message (Expand)AuthorAgeFilesLines
* ipfilter: Fix ip_pptp_pxy (PPTP proxy) length underflowCy Schubert2026-06-081-2/+6
* ipfilter: Fix NULL dereferences in ipf_checkicmp6matchingstate()Teddy Engel2026-05-201-1/+9
* ipfilter: Add NULL check for fin_m in ipf_pr_icmp6()Teddy Engel2026-05-201-0/+3
* ipfilter: Add NULL check for fin_dp in ICMP packet handlersTeddy Engel2026-05-201-0/+4
* ipfilter: Validate length before checksumCy Schubert2026-05-201-4/+13
* ipfilter: Avoid negative array indiciesCy Schubert2026-02-173-4/+4
* ipfilter: Interface name must not extend beyond end of bufferCy Schubert2026-02-101-2/+21
* ipfilter: Fix possible overrunCy Schubert2026-02-041-1/+1
* net: add ifnet_rename_event EVENTHANDLER(9) for interface renamingGleb Smirnoff2025-12-221-0/+8
* ipf: copy{in,out}ptr -> ipf_copy{in,out}_indirectBrooks Davis2025-12-195-12/+14
* ipfilter: Add missing kenv fetchCy Schubert2025-12-161-0/+2
* ipfilter: Prevent stack buffer overflowDag-Erling Smørgrav2025-12-161-14/+37
* ipfilter: Disable ipfs(8) by defaultCy Schubert2025-12-082-1/+8
* ipfilter: Restrict ipfilter within a jailCy Schubert2025-12-084-0/+18
* ipfilter: fix broken buildWarner Losh2025-11-272-6/+1
* ipfilter: Restore used variableCy Schubert2025-11-261-1/+1
* ipfilter: Remove unused variableCy Schubert2025-11-262-2/+2
* ipfilter: Verify ipnat on entry into kernelCy Schubert2025-11-261-1/+41
* ipfilter: Verify frentry on entry into kernelCy Schubert2025-11-263-2/+61
* ipfilter: Add ipf_check_names_string()Cy Schubert2025-11-262-0/+32
* ipfilter: Don't trust userland supplied iph_sizeCy Schubert2025-11-051-0/+9
* ipfilter: Add an htable max size tuneable.Cy Schubert2025-11-052-0/+9
* ipfilter: Add htable (hash table) tunableCy Schubert2025-11-051-0/+27
* ipfilter: Plug ip_htable kernel information leakCy Schubert2025-10-231-0/+2
* ipfilter: Plug ip_nat kernel information leakCy Schubert2025-10-231-0/+1
* ipfilter: fix LINT-NOINET6 buildKristof Provost2025-07-121-2/+3
* netpfil/ipfilter: fix remaining trivial unused variable warningsSiva Mahadevan2025-07-0814-82/+23
* ip_nat6.c: fix non-trivial unused variable warningsSiva Mahadevan2025-07-081-38/+14
* ip_nat.c: fix non-trivial unused variable warningsSiva Mahadevan2025-07-081-30/+13
* ip_htable: fix -Wtautological-pointer-compare warningsSiva Mahadevan2025-07-081-4/+1
* ipfilter: Save unit in hash table entryCy Schubert2025-07-071-0/+1
* Revert "ipfilter: Avoid allocating a new ipf token when not needed"Cy Schubert2025-07-071-4/+9
* netinet: allow per protocol random IP id control, single out IPSECacazuc2025-03-042-3/+3
* tcp: add TH_AE capabilities to ppp and pfRichard Scheffenegger2024-11-291-4/+4
* tcp: extend the use of the th_flags accessor functionRichard Scheffenegger2024-11-298-27/+27
* ipfilter: Remove dead code from "Virtualize ipfilter"Cy Schubert2024-11-121-21/+0
* ipfilter: ipfilter: Remove more dead codeCy Schubert2024-11-121-9/+0
* ipfilter: Avoid holding a lock while stoppingJose Luis Duran2024-11-121-4/+1
* Revert "ipfilter: Avoid stopping with a lock held"Jose Luis Duran2024-11-121-2/+2
* ipfilter: Remove dead codeCy Schubert2024-11-121-3/+0
* ipfilter: Avoid stopping with a lock heldJose Luis Duran2024-11-121-2/+2
* ipfilter(4): Fix typos in source code commentsGordon Bergling2024-07-211-2/+2
* netpfil: Fix typos in source code commentsGordon Bergling2024-04-182-3/+3
* pfil: PFIL_PASS never frees the mbufKristof Provost2024-01-291-0/+4
* netpfil: Fix a typo in a source code commentGordon Bergling2024-01-221-1/+1
* netpfil: Fix typo (triple S)Jose Luis Duran2023-12-282-3/+3
* netpfil: Use accessor functions and named constants for all tcphdr flagsRichard Scheffenegger2023-12-252-10/+3
* sys: Remove ancient SCCS tags.Warner Losh2023-11-2722-65/+0
* ipfilter: Add sysctl flag CTLFLAG_TUN to loader tunableZhenlei Huang2023-09-291-1/+1
* Purge more stray embedded $FreeBSD$ stringsJohn Baldwin2023-09-254-4/+0