aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* Add IPv6 support for O_TCPDATALEN opcode.Andrey V. Elsukov2017-10-241-5/+21
* Fix regression in handling O_FORWARD_IP opcode after r279948.Andrey V. Elsukov2017-10-131-0/+3
* Fix a bug which avoided that rules for matching port numbers for SCTPMichael Tuexen2017-10-021-2/+2
* Use in_localip() function instead of unlocked access to addresses hashAndrey V. Elsukov2017-09-201-8/+2
* Do not acquire IPFW_WLOCK when a named object is created and destroyed.Andrey V. Elsukov2017-09-205-24/+0
* pf_get_sport(): Prevent possible endless loop when searching for an unused na...Kristof Provost2017-08-081-3/+5
* Fix a couple of typos in a comment.Luiz Otavio O Souza2017-07-211-1/+1
* Fix GRE over IPv6 tunnels with IPFWPhilip Paeps2017-07-131-0/+7
* pf: Fix vnet purgingKristof Provost2017-07-091-3/+6
* Fix IPv6 extension header parsing. The length field doesn't include theAndrey V. Elsukov2017-06-293-3/+3
* Fix the queue delay estimation in PIE/FQ-PIE when the timestampDon Lewis2017-05-192-6/+16
* The result of right shifting a negative signed value is implementationDon Lewis2017-05-192-42/+76
* pf: Fix vnet initialisationKristof Provost2017-05-071-11/+2
* pf: Fix panic on unloadKristof Provost2017-05-031-6/+5
* Fix VNET leakages in PF by V_irtualizing pfr_ktables and friends.Marko Zec2017-04-251-24/+29
* Since curvnet is already properly set on entry to event handlers,Marko Zec2017-04-251-27/+9
* pf: Fix possible incorrect IPv6 fragmentationKristof Provost2017-04-201-0/+4
* pf: Also clear limit countersKristof Provost2017-04-181-0/+2
* Avoid undefined behavior.Andrey V. Elsukov2017-04-141-1/+2
* Use address of specific union member instead of whole union address toAndrey V. Elsukov2017-04-141-3/+5
* The rule field in the ipfw_dyn_rule structure is used as storageAndrey V. Elsukov2017-04-141-5/+7
* Fix potential NULL deref.Gleb Smirnoff2017-04-141-4/+5
* o Redundant assignments removed.Maxim Konovalov2017-04-132-2/+0
* dummynet: Use strlcpy to appease static checkersConrad Meyer2017-04-132-2/+2
* Remove "IPFW static rules" rmlock.Andrey V. Elsukov2017-04-038-13/+14
* Add ipfw_pmod kernel module.Andrey V. Elsukov2017-04-033-0/+383
* Add O_EXTERNAL_DATA opcode support.Andrey V. Elsukov2017-04-032-13/+23
* Add the log formatting for an external action opcode.Andrey V. Elsukov2017-04-031-0/+5
* pf: Fix leak of pf_state_keysKristof Provost2017-04-011-1/+1
* Reset the cached state of last lookup in the dynamic states when anAndrey V. Elsukov2017-03-311-1/+10
* pf: Fix possible shutdown raceKristof Provost2017-03-222-11/+16
* pf: Fix rule evaluation after inet6 route-toKristof Provost2017-03-191-0/+3
* Change several constants used by the PIE algorithm from unsigned to signed.Don Lewis2017-03-181-3/+3
* pf: Fix memory leak on vnet shutdown or unloadKristof Provost2017-03-181-2/+2
* Use memset with structure size.Andrey V. Elsukov2017-03-141-1/+1
* nat64lsn: Use memset() with structure, not pointer, sizeConrad Meyer2017-03-131-1/+1
* pf: Fix incorrect rw_sleep() in pf_unload()Kristof Provost2017-03-122-4/+2
* pf: Do not lose the VNET lock when ending the purge threadKristof Provost2017-03-121-0/+1
* o Typo in the comment fixed.Maxim Konovalov2017-03-091-1/+1
* pf: Fix a crash in low-memory situationsKristof Provost2017-03-061-1/+1
* Fix the build. Use new ipfw_lookup_table() in the nat64 too.Andrey V. Elsukov2017-03-061-4/+6
* Add IPv6 support to O_IP_DST_LOOKUP opcode.Andrey V. Elsukov2017-03-054-88/+115
* Reject invalid object types that can not be used with specific opcodes.Andrey V. Elsukov2017-03-051-1/+8
* Fix matching table entry value. Use real table value instead of its indexAndrey V. Elsukov2017-03-031-4/+6
* Fix NPTv6 rule counters when one_pass is not enabled.Andrey V. Elsukov2017-03-012-14/+23
* sys: Replace zero with NULL for pointers.Pedro F. Giffuni2017-02-221-1/+1
* Use inet_ntoa_r() instead of inet_ntoa() throughout the kernelEric van Gyzen2017-02-161-1/+2
* pf: use inet_ntoa_r() instead of inet_ntoa(); maybe fix IPv6 OS fingerprintingEric van Gyzen2017-02-161-4/+11
* Fix typos in comments (returing -> returning)Enji Cooper2017-02-071-1/+1
* Fix indentantion in pf_purge_thread(). No functional change.Gleb Smirnoff2017-01-301-23/+29