aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/pf
Commit message (Expand)AuthorAgeFilesLines
* pf: fix incorrect table decoding in netlinkKristof Provost16 hours1-1/+8
* pfctl: optionally print the rule in the state overviewKristof Provost2026-05-072-76/+115
* pf: do not reject rules with colliding hashesKristof Provost2026-05-051-16/+8
* pfsync: reject invalid SCTP statesKristof Provost2026-05-051-0/+7
* pf: improve SCTP validationKristof Provost2026-04-291-5/+11
* pf: improve ASCONF chunk validationKristof Provost2026-04-281-0/+7
* pf: fix duplicate rule detection for automatic tablesKristof Provost2026-04-231-3/+1
* pf: only allow a subset of netlink calls when securelevel is setKristof Provost2026-04-211-0/+47
* pf: do not allow flags to be changed with securelevel setKristof Provost2026-04-211-2/+0
* pf: Use MTX_DUPOK to initialize hash chain mutexesMark Johnston2026-04-201-0/+1
* pf: be more robust against interface name conflictsKristof Provost2026-04-201-0/+7
* pf: use correct address family in pfr_pool_get()Kristof Provost2026-04-171-1/+1
* pf: pf_frag_compare() should not be using subtraction to compare fragment IDsKristof Provost2026-04-171-4/+4
* pf: fix error handling in pf_sourcelim_add()Kristof Provost2026-04-171-1/+3
* pf: use hashalloc(9) for key, id, src-node and udp-endpoint hashesGleb Smirnoff2026-04-121-92/+54
* pf: include all elements when hashing rulesKristof Provost2026-03-241-9/+97
* pf: Fix hashing of IP address rangesMichael Gmelin2026-03-241-0/+1
* pf: avoid NULL deref on purged statesKristof Provost2026-02-181-1/+3
* pf: convert DIOCRTSTADDRS to netlinkKristof Provost2026-02-162-0/+42
* pf: fix use of uninitialised variableKristof Provost2026-02-031-22/+19
* pf: Pass v6 packets to the divert socketMark Johnston2026-01-271-5/+1
* pf: Rationalize the ip_divert_ptr testMark Johnston2026-01-261-5/+10
* netinet6: use in6_ifmtu() instead of IN6_LINKMTU() macroGleb Smirnoff2026-01-231-2/+2
* pfctl(8): change default limiter action from no-match to blockKristof Provost2026-01-191-0/+2
* pf: remove unused functionKristof Provost2026-01-141-6/+0
* pf: configurable action on limiter exceededKristof Provost2026-01-145-14/+72
* pf: avoid a shadowed variable in the pf_create_state() source limiter handlingKristof Provost2026-01-141-1/+1
* pf: state/source limiter finishing touchesKristof Provost2026-01-141-28/+25
* pf: remove redundant range checksKristof Provost2026-01-141-12/+0
* pf: convert state limiter interface to netlinkKristof Provost2026-01-143-152/+497
* pf: introduce source and state limitersKristof Provost2026-01-145-0/+1595
* pf: handle nlattr_add_nested() failureKristof Provost2026-01-081-0/+45
* pf: remove redundant zeroingKristof Provost2026-01-081-54/+0
* pf: sprinkle const over pf_addr_cmp()Kristof Provost2026-01-021-1/+1
* pf: convert DIOCRCLRASTATS to netlinkKristof Provost2025-12-302-0/+42
* pf: don't reject route-to'd too-large packetsKristof Provost2025-12-261-2/+4
* pf: Fix state handling when ICMP packets are divertedMark Johnston2025-12-221-4/+6
* net: add ifnet_rename_event EVENTHANDLER(9) for interface renamingGleb Smirnoff2025-12-221-0/+12
* pf: make eventhandler_tag's staticGleb Smirnoff2025-12-221-6/+6
* pf: fix pcounters array sizeKristof Provost2025-12-211-1/+1
* pf: Avoid taking the pf rules write lock in a couple of ioctlsMark Johnston2025-12-193-50/+45
* pf: Fix the reply command in a couple of placesMark Johnston2025-12-181-2/+2
* pf: fix min-ttl and set-tos for nat64Kristof Provost2025-12-151-2/+4
* pfsync: Avoid zeroing the state export unionMark Johnston2025-12-142-12/+36
* pf: handle TTL expired during nat64Kristof Provost2025-12-111-5/+20
* pf: Fix error handling in pf_handle_get_tstats()Mark Johnston2025-12-081-0/+10
* pf: Fix an off-by-one in pf_handle_getcreators()Mark Johnston2025-12-081-1/+1
* pf: convert DIOCRGETASTATS to netlinkKristof Provost2025-12-052-1/+123
* pf: make unhandled_af() inlineGleb Smirnoff2025-12-041-6/+0
* pfsync: fix incorrect unlock during destroyKristof Provost2025-12-011-2/+2