aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
...
* pf: Rationalize the ip_divert_ptr testMark Johnston2026-01-261-5/+10
* netinet6: use in6_ifmtu() instead of IN6_LINKMTU() macroGleb Smirnoff2026-01-231-2/+2
* pfctl(8): change default limiter action from no-match to blockKristof Provost2026-01-191-0/+2
* ipfw: fix !VIMAGE buildGleb Smirnoff2026-01-181-1/+1
* netpfil/ipfw: Fix a typo in a source code commentGordon Bergling2026-01-171-1/+1
* ipfw: refactor how we store bpf tap pointsGleb Smirnoff2026-01-175-36/+49
* ipfw: in a vnet destructor use NET_EPOCH_WAIT()Gleb Smirnoff2026-01-171-5/+5
* ipfw: remove locking workarounds in the table codeGleb Smirnoff2026-01-173-373/+68
* ipfw: make the upper half lock sleepableGleb Smirnoff2026-01-178-153/+47
* pf: remove unused functionKristof Provost2026-01-141-6/+0
* pf: configurable action on limiter exceededKristof Provost2026-01-145-14/+72
* pf: avoid a shadowed variable in the pf_create_state() source limiter handlingKristof Provost2026-01-141-1/+1
* pf: state/source limiter finishing touchesKristof Provost2026-01-141-28/+25
* pf: remove redundant range checksKristof Provost2026-01-141-12/+0
* pf: convert state limiter interface to netlinkKristof Provost2026-01-143-152/+497
* pf: introduce source and state limitersKristof Provost2026-01-145-0/+1595
* ipfw: find_tentry method is defined for any table algorithmGleb Smirnoff2026-01-131-7/+1
* pf: handle nlattr_add_nested() failureKristof Provost2026-01-081-0/+45
* pf: remove redundant zeroingKristof Provost2026-01-081-54/+0
* ipfw: make create_objects_compat() staticGleb Smirnoff2026-01-052-3/+1
* ipfw: use sparse initializer for dynamic opcodesGleb Smirnoff2026-01-051-16/+32
* ipfw: remove extraneous argument from ipfw_add_protected_rule()Gleb Smirnoff2026-01-054-7/+5
* pf: sprinkle const over pf_addr_cmp()Kristof Provost2026-01-021-1/+1
* pf: convert DIOCRCLRASTATS to netlinkKristof Provost2025-12-302-0/+42
* pf: don't reject route-to'd too-large packetsKristof Provost2025-12-261-2/+4
* pf: Fix state handling when ICMP packets are divertedMark Johnston2025-12-221-4/+6
* ipfw: fix bpf tap point lookupGleb Smirnoff2025-12-221-2/+2
* net: add ifnet_rename_event EVENTHANDLER(9) for interface renamingGleb Smirnoff2025-12-223-18/+51
* pf: make eventhandler_tag's staticGleb Smirnoff2025-12-221-6/+6
* pf: fix pcounters array sizeKristof Provost2025-12-211-1/+1
* ipf: copy{in,out}ptr -> ipf_copy{in,out}_indirectBrooks Davis2025-12-195-12/+14
* pf: Avoid taking the pf rules write lock in a couple of ioctlsMark Johnston2025-12-193-50/+45
* pf: Fix the reply command in a couple of placesMark Johnston2025-12-181-2/+2
* ipfilter: Add missing kenv fetchCy Schubert2025-12-161-0/+2
* ipfilter: Prevent stack buffer overflowDag-Erling Smørgrav2025-12-161-14/+37
* ipfw: create a bpf tap point for every log ruleGleb Smirnoff2025-12-158-60/+109
* ipfw: create "ipfw0" and "ipfwlog0" bpf tapping points without ifnet(9)Gleb Smirnoff2025-12-151-120/+26
* pf: fix min-ttl and set-tos for nat64Kristof Provost2025-12-151-2/+4
* pfsync: Avoid zeroing the state export unionMark Johnston2025-12-142-12/+36
* pf: handle TTL expired during nat64Kristof Provost2025-12-111-5/+20
* ipfilter: Disable ipfs(8) by defaultCy Schubert2025-12-082-1/+8
* ipfilter: Restrict ipfilter within a jailCy Schubert2025-12-084-0/+18
* pf: Fix error handling in pf_handle_get_tstats()Mark Johnston2025-12-081-0/+10
* pf: Fix an off-by-one in pf_handle_getcreators()Mark Johnston2025-12-081-1/+1
* pf: convert DIOCRGETASTATS to netlinkKristof Provost2025-12-052-1/+123
* pf: make unhandled_af() inlineGleb Smirnoff2025-12-041-6/+0
* pfsync: fix incorrect unlock during destroyKristof Provost2025-12-011-2/+2
* pf: use correct sized variables in pf_change_icmp()Kristof Provost2025-12-011-2/+2
* ipfilter: fix broken buildWarner Losh2025-11-272-6/+1
* ipfilter: Restore used variableCy Schubert2025-11-261-1/+1