aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* pf: free match rules after exiting critical sectionSiva Mahadevan2026-06-101-4/+4
* ipfw nat: Add assertion that mbuf is not a chainEd Maste2026-06-081-2/+3
* ipfilter: Fix ip_pptp_pxy (PPTP proxy) length underflowCy Schubert2026-06-081-2/+6
* pfsync: remove invalid panicKristof Provost2026-06-081-1/+5
* netpfil: add PF netlink command decoding supportIshan Agrawal2026-06-031-52/+51
* nat64lsn: Fix type confusion panic when using wrong NAT64 instance typeTeddy Engel2026-06-021-1/+2
* divert: Define semantics for SO_REUSEPORT_LB on divert socketsMark Johnston2026-05-262-2/+2
* pf: fix incorrect table decoding in netlinkKristof Provost2026-05-211-1/+8
* ipfw: fix checksum after NATTimo Völker2026-05-211-8/+7
* ipfilter: Fix NULL dereferences in ipf_checkicmp6matchingstate()Teddy Engel2026-05-201-1/+9
* ipfilter: Add NULL check for fin_m in ipf_pr_icmp6()Teddy Engel2026-05-201-0/+3
* ipfilter: Add NULL check for fin_dp in ICMP packet handlersTeddy Engel2026-05-201-0/+4
* ipfilter: Validate length before checksumCy Schubert2026-05-201-4/+13
* ipfw: fix IPv6 flow label matchingBoris Lytochkin2026-05-121-1/+3
* pfctl: optionally print the rule in the state overviewKristof Provost2026-05-072-76/+115
* pf: do not reject rules with colliding hashesKristof Provost2026-05-051-16/+8
* pfsync: reject invalid SCTP statesKristof Provost2026-05-051-0/+7
* pf: improve SCTP validationKristof Provost2026-04-291-5/+11
* pf: improve ASCONF chunk validationKristof Provost2026-04-281-0/+7
* pf: fix duplicate rule detection for automatic tablesKristof Provost2026-04-231-3/+1
* pf: only allow a subset of netlink calls when securelevel is setKristof Provost2026-04-211-0/+47
* pf: do not allow flags to be changed with securelevel setKristof Provost2026-04-211-2/+0
* pf: Use MTX_DUPOK to initialize hash chain mutexesMark Johnston2026-04-201-0/+1
* pf: be more robust against interface name conflictsKristof Provost2026-04-201-0/+7
* pf: use correct address family in pfr_pool_get()Kristof Provost2026-04-171-1/+1
* pf: pf_frag_compare() should not be using subtraction to compare fragment IDsKristof Provost2026-04-171-4/+4
* pf: fix error handling in pf_sourcelim_add()Kristof Provost2026-04-171-1/+3
* pf: use hashalloc(9) for key, id, src-node and udp-endpoint hashesGleb Smirnoff2026-04-121-92/+54
* ipfw_nptv6: fix handling the ifaddr removal eventAndrey V. Elsukov2026-04-021-2/+2
* pf: include all elements when hashing rulesKristof Provost2026-03-241-9/+97
* pf: Fix hashing of IP address rangesMichael Gmelin2026-03-241-0/+1
* ipfw: add support for masked ip-address lookupsBoris Lytochkin2026-03-013-98/+191
* pf: avoid NULL deref on purged statesKristof Provost2026-02-181-1/+3
* ipfilter: Avoid negative array indiciesCy Schubert2026-02-173-4/+4
* pf: convert DIOCRTSTADDRS to netlinkKristof Provost2026-02-162-0/+42
* ipfilter: Interface name must not extend beyond end of bufferCy Schubert2026-02-101-2/+21
* ipfilter: Fix possible overrunCy Schubert2026-02-041-1/+1
* pf: fix use of uninitialised variableKristof Provost2026-02-031-22/+19
* ipfw: fix my stupid error in casting void * to enumGleb Smirnoff2026-01-271-4/+4
* ipfw: don't recurse on the upper half lock in ipfw_iface_ref()Gleb Smirnoff2026-01-271-11/+5
* pf: Pass v6 packets to the divert socketMark Johnston2026-01-271-5/+1
* ipfw: don't use the upper half lock to walk dynamic states bucketsGleb Smirnoff2026-01-261-14/+4
* pf: Rationalize the ip_divert_ptr testMark Johnston2026-01-261-5/+10
* netinet6: use in6_ifmtu() instead of IN6_LINKMTU() macroGleb Smirnoff2026-01-231-2/+2
* pfctl(8): change default limiter action from no-match to blockKristof Provost2026-01-191-0/+2
* ipfw: fix !VIMAGE buildGleb Smirnoff2026-01-181-1/+1
* netpfil/ipfw: Fix a typo in a source code commentGordon Bergling2026-01-171-1/+1
* ipfw: refactor how we store bpf tap pointsGleb Smirnoff2026-01-175-36/+49
* ipfw: in a vnet destructor use NET_EPOCH_WAIT()Gleb Smirnoff2026-01-171-5/+5
* ipfw: remove locking workarounds in the table codeGleb Smirnoff2026-01-173-373/+68
generated by cgit v1.3 (git 2.53.0) at 2026-09-03 17:20:35 +0000