aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
...
* ipfilter: Remove unused variableCy Schubert2025-11-262-2/+2
* ipfilter: Verify ipnat on entry into kernelCy Schubert2025-11-261-1/+41
* ipfilter: Verify frentry on entry into kernelCy Schubert2025-11-263-2/+61
* ipfilter: Add ipf_check_names_string()Cy Schubert2025-11-262-0/+32
* pf: relax sctp v_tag verificationKristof Provost2025-11-251-1/+5
* pf: fix another endpoint-independent crashKristof Provost2025-11-211-4/+12
* ipfw: fix lookup dst-ip opcodeBoris Lytochkin2025-11-181-2/+2
* pf: fix udp_mapping cleanupKristof Provost2025-11-171-7/+22
* pf: handle divert packetsKristof Provost2025-11-151-8/+12
* ipfilter: Don't trust userland supplied iph_sizeCy Schubert2025-11-051-0/+9
* ipfilter: Add an htable max size tuneable.Cy Schubert2025-11-052-0/+9
* ipfilter: Add htable (hash table) tunableCy Schubert2025-11-051-0/+27
* pf: convert DIOCRGETADDRS to netlinkKristof Provost2025-11-052-0/+90
* ipfw: pmod: avoid further rule processing after tcp-mod failuresKyle Evans2025-11-011-9/+16
* pf: convert DIOCRSETADDRS to netlinkKristof Provost2025-10-315-5/+55
* pf: Check if source nodes use a valid redirection addressKajetan Staszkiewicz2025-10-303-4/+101
* pf: Make nat-to and rdr-to work properly both on in and out rulesKajetan Staszkiewicz2025-10-301-2/+14
* pf: improve add state validationKristof Provost2025-10-301-0/+3
* pf: improve DIOCRCLRTABLES validationKristof Provost2025-10-301-0/+11
* ipfw: Retire obsolete compat codeEd Maste2025-10-273-936/+28
* ipfilter: Plug ip_htable kernel information leakCy Schubert2025-10-231-0/+2
* ipfilter: Plug ip_nat kernel information leakCy Schubert2025-10-231-0/+1
* pf: fix 'no rdr'Kristof Provost2025-10-192-0/+2
* style(9): white space after ; and around binary operatorsDavid E. O'Brien2025-10-161-2/+2
* ipfw: Check for errors from sooptcopyin() and sooptcopyout()Mark Johnston2025-10-141-5/+7
* pf: Use proper prototype for SYSINIT functionsZhenlei Huang2025-10-131-2/+2
* ipfw: Use proper prototype for SYSINIT functionsZhenlei Huang2025-10-132-8/+5
* dummynet: SDT probe dropped packetsKristof Provost2025-10-111-0/+6
* pf: fix 'natpass'Kristof Provost2025-10-021-27/+32
* pf: return PF_PASS/PF_DROP from pf_setup_pdesc()Kristof Provost2025-10-021-22/+22
* pf: fix possibe SCTP panicKristof Provost2025-10-021-6/+13
* pf: mark pf_match_translation() staticKristof Provost2025-10-021-2/+2
* pf: Fix interface counters for af-to rulesKajetan Staszkiewicz2025-09-281-52/+99
* pf: Fix rule and state countersKajetan Staszkiewicz2025-09-281-141/+196
* pf: Always skip outbound filtering for inbound af-to rulesKajetan Staszkiewicz2025-09-281-2/+2
* pf: export expiration time as time_tKristof Provost2025-09-252-2/+2
* pf: print 'once' rule expire timeKristof Provost2025-09-253-1/+3
* pf: support one shot rulesKristof Provost2025-09-252-0/+21
* pf: pass pre-NAT addresses to dummynetKristof Provost2025-09-241-6/+33
* pf: check if a group has a kif before dereferencing itKristof Provost2025-09-241-2/+4
* pf: Add pfsync protocol for FreeBSD 15Kajetan Staszkiewicz2025-09-232-86/+337
* pf: Fix interface binding for af-to with route-toKajetan Staszkiewicz2025-09-231-36/+28
* pf: fix rules_counter:keepcounters testKristof Provost2025-09-172-6/+11
* pf: allows TCP RST packets in the backwards window if ACK matchesKristof Provost2025-09-171-1/+5
* pf: Count m_gethdr() failures in PFRES_MEMORY counterKristof Provost2025-09-172-23/+34
* ipfw: Teach ipfw that EtherIP is an upper layer protocolZhenlei Huang2025-09-161-0/+7
* pf: Show pf fragment reassembly counters.Kristof Provost2025-09-155-0/+29
* pf: Remove dead code in pf_pull_hdr().Kristof Provost2025-09-103-47/+41
* pf: fix possible pd->pcksum NULL derefKristof Provost2025-09-051-0/+14
* pf: map checksum offloading flags for NAT64Timo Völker2025-09-041-0/+24