aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil/pf/pf_ioctl.c
Commit message (Expand)AuthorAgeFilesLines
* pf: Use different address family for source and redirection addressKajetan Staszkiewicz41 hours1-0/+2
* pf: Fix a lock leak in pf_ioctl_addrule()Mark Johnston5 days1-8/+8
* pf: unify DPFPRINTF definitionsKristof Provost11 days1-25/+23
* pf: Use goto fail consistently to leave the giant switch in pfioctl().Kristof Provost2025-07-181-85/+85
* pf: stricter af checks for af-to rulesKristof Provost2025-07-181-0/+34
* pf: Reject rules with invalid port rangesKristof Provost2025-07-151-0/+18
* pf: Remove ptr_array from struct pf_krulesetKristof Provost2025-07-151-25/+5
* pf: when calculating the ruleset's checksum, skip automatic table names.Kristof Provost2025-07-121-1/+3
* pf: clean up pf_ioctl_addrule() error handlingKristof Provost2025-07-091-21/+17
* pf: improve DIOCNATLOOK validationKristof Provost2025-07-091-0/+22
* pf: deduplicate the ioctl and netlink NATLOOK handlingKristof Provost2025-07-091-45/+52
* pf: Use proper NUL byte not zero with stringsKristof Provost2025-07-091-10/+10
* pf: Check for main ruleset explicitlyKristof Provost2025-07-041-2/+2
* pf: Rename pf_anchor_remove() to pf_remove_anchor()Kristof Provost2025-07-041-1/+1
* pf: Remove useless macrosKristof Provost2025-07-041-14/+18
* pf: add a generic packet rate matching filterKristof Provost2025-06-251-1/+3
* pf: use counter_rate() for rate checkingKristof Provost2025-06-251-9/+6
* pf: use time_uptime rather than time_secondsKristof Provost2025-06-091-4/+8
* pf: use __func__ rather than hardcoded function namesKristof Provost2025-05-091-11/+12
* pf: fix dealing with 0 limitsKristof Provost2025-05-081-1/+2
* pf: Add modern NAT syntaxKajetan Staszkiewicz2025-04-281-9/+23
* pf: fix pf_ioctl_add_addr() validationKristof Provost2025-04-101-6/+12
* pf: rename pf_unlink_state() to pf_remove_state()Kristof Provost2025-04-091-5/+5
* pf: added /* FALLTHROUGH */ comments, typecasts (u_int32_t)-1, ...Kristof Provost2025-04-091-1/+1
* pf: Introduce unhandled_af()Kristof Provost2025-03-041-0/+6
* pf: list dependecy on crypto.koKristof Provost2025-02-261-0/+1
* pf: bcopy -> memcpyKristof Provost2025-02-191-1/+1
* pf: Add support for multiple source node typesKajetan Staszkiewicz2025-02-131-14/+26
* pf: support negated matches on the rcvifKristof Provost2025-02-131-0/+1
* pf: Stop using net_epoch to synchronize access to eth rulesMark Johnston2025-02-061-29/+3
* pf: remove PFLOGIFS_MAXKristof Provost2025-01-241-4/+0
* pf: add a dedicated pf pool for route optionsKristof Provost2025-01-241-12/+41
* pf: check rather than assert pool typeKristof Provost2025-01-241-3/+6
* pf: nat64Kristof Provost2024-12-171-0/+1
* pf: partially import OpenBSD's NAT rewriteKristof Provost2024-12-171-43/+82
* pf: Move route-to information to rule actionsKajetan Staszkiewicz2024-12-031-9/+9
* pf: Fix missing connection rate for DIOCGETSRCNODESKajetan Staszkiewicz2024-11-211-0/+1
* pf: Merge pf_clear_srcnodes() and pf_kill_srcnodes()Kajetan Staszkiewicz2024-11-121-37/+10
* pf: convert DIOCGETRULESET to netlinkKristof Provost2024-10-101-30/+42
* pf: convert DIOCGETRULESETS to netlinkKristof Provost2024-10-101-20/+32
* pf: replace union pf_krule_ptr with struct pf_krule in in-kernel structsKajetan Staszkiewicz2024-10-021-15/+15
* pf: pf_clear_srcnodes() is always called with NULLKajetan Staszkiewicz2024-09-281-25/+17
* pf: merge pf_test() and pf_test6()Kristof Provost2024-09-271-4/+4
* pf: remove pointless CURVNET_SETKristof Provost2024-09-251-4/+12
* pf: allow filtering on the receive interfaceKristof Provost2024-09-161-1/+14
* pf: ensure we exit net_epoch if pf_keth_anchor_nvcopyout() failsKristof Provost2024-09-081-1/+3
* pf: Stop checking for failures from malloc(M_WAITOK)Zhenlei Huang2024-09-031-32/+0
* pf: 'sticky-address' requires 'keep state'Kajetan Staszkiewicz2024-08-161-0/+5
* pf: Convert struct pf_addr_wrap before sending it over netlinkKajetan Staszkiewicz2024-08-151-2/+1
* pf: convert DIOCGETADDR to netlinkKristof Provost2024-07-221-26/+35