aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/pf/pf.c
Commit message (Expand)AuthorAgeFilesLines
* pf: Use different address family for source and redirection addressKajetan Staszkiewicz2 days1-8/+13
* pf: remove incorrect __unused annotationKristof Provost5 days1-1/+1
* kern: adopt the cr_gid macro for cr_groups[0] more widelyKyle Evans10 days1-2/+2
* pf: unify DPFPRINTF definitionsKristof Provost11 days1-68/+67
* pf: handle truncated IP options in ICMPKristof Provost11 days1-0/+7
* pf: Make pf(4) more paranoid about IGMP/MLP messages.Kristof Provost11 days1-1/+22
* pf: accept IP options for IGMP and ICMP6 MLDKristof Provost11 days1-18/+114
* pf: run Jumbogram check before we walk the headersKristof Provost11 days1-9/+9
* pf: move IPv4 packet length check upKristof Provost11 days1-6/+7
* Revert "pf: remove unused argument from pf_send_icmp()"Kristof Provost2025-07-161-8/+8
* pf: add missing IPv6 length checkKristof Provost2025-07-161-0/+6
* pf: delay taking the rules lock in pf_test()Kristof Provost2025-07-161-9/+5
* pf: remove unused argument from pf_send_icmp()Kristof Provost2025-07-151-8/+8
* pf: Don't run copies of packets made by dup-to through pf_test.Kristof Provost2025-07-151-0/+6
* pf: synproxy should be processing incoming SYN packets only.Kristof Provost2025-07-151-1/+1
* pf: Fix error handling when pf_map_addr() failsKajetan Staszkiewicz2025-07-131-4/+5
* pf: Don't access sk and nk before they are allocatedKajetan Staszkiewicz2025-07-121-1/+8
* pf: Don't return src node and hash from pf_map_addr_snKajetan Staszkiewicz2025-07-121-3/+1
* pf: Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX.Kristof Provost2025-07-091-4/+4
* pf: Remove useless macrosKristof Provost2025-07-041-76/+90
* pf: honor quick on anchor rulesKristof Provost2025-07-041-3/+4
* pf: Honor quick on anchor rulesKristof Provost2025-07-031-0/+6
* pf: trade few 'goto unlock: for 'break' in pf_test()Kristof Provost2025-06-301-4/+4
* pf: remove STATE_LOOKUPKristof Provost2025-06-301-40/+74
* pf: Refactor the six ways to find TCP options into one new function.Kristof Provost2025-06-271-104/+94
* pf: ensure max-pkt-size works on match rulesKristof Provost2025-06-271-3/+8
* pf: add 'max-pkt-size'Kristof Provost2025-06-271-0/+8
* pf: fix regression in pflog outputKristof Provost2025-06-261-2/+13
* pf: decrement TTL in pf_route(6)()Kristof Provost2025-06-261-1/+23
* pf: Use pf_send_icmp() consistently in pf_route()Kristof Provost2025-06-261-17/+15
* pf: disallow IPv6 routing header by defaultKristof Provost2025-06-261-0/+2
* pf: drop neighbor discovery packets with the wrong hop limitKristof Provost2025-06-261-0/+8
* pf: limit extra SCTP statesKristof Provost2025-06-251-0/+11
* pf: add a generic packet rate matching filterKristof Provost2025-06-251-0/+11
* pf: use counter_rate() for rate checkingKristof Provost2025-06-251-27/+15
* pf: fix NOINET6 buildGleb Smirnoff2025-06-101-0/+2
* pf: align option handling for IPv4 and IPv6Kristof Provost2025-06-061-4/+7
* pf: limit how many headers we look atKristof Provost2025-06-061-5/+13
* pf: use 'struct ah' for the AH extension header rather than 'struct ip6_ext'Kristof Provost2025-06-061-3/+5
* pf: align IPv4 and IPv6 AH header handlingKristof Provost2025-06-061-11/+54
* pf: use struct pf_test_ctx as function argumentKristof Provost2025-06-021-81/+68
* pf: remove unused argument from pf_get_translation()Kristof Provost2025-06-021-1/+1
* pf: rework anchor handling to recurseKristof Provost2025-06-021-282/+275
* pf: teach pf_build_tcp() about SACKKristof Provost2025-05-281-2/+12
* pf: refactor length check in pf_pull_hdr()Kristof Provost2025-05-281-13/+8
* pf: use __func__ rather than hardcoded function namesKristof Provost2025-05-091-9/+11
* pf: reject hop-by-hop if it's not the first extension headerKristof Provost2025-05-081-2/+10
* pf: use pd->m in pf_route() and pf_route6()Kristof Provost2025-05-081-40/+39
* pf: add missing bracesKristof Provost2025-05-081-2/+4
* pf: send a challenge ACK for SYN's matching existing statesKristof Provost2025-05-031-15/+47