aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
* ipfilter: remove unused variableSiva Mahadevan7 days1-4/+3
* pf: Prevent pf dropping TCP state with crafted reset packet.Kristof Provost10 days1-2/+3
* pf: allow unspecified addressed for certain MLD messagesKristof Provost10 days1-1/+9
* pf: Fix uninitialised action when dropping bad TTL ND packetsKajetan Staszkiewicz13 days1-0/+1
* pf: Send syncookies from the receiving threadBojan Novković2026-08-283-32/+76
* pf: Fix fallout from the STATE_LOOKUP macro removalMark Johnston2026-08-271-11/+6
* pf: Re-optimize state key handlingMark Johnston2026-08-252-11/+25
* pf: fix crash on low memoryKristof Provost2026-08-241-1/+1
* ipfilter: Fix checksum update for NAT_DIVERTOUTCy Schubert2026-08-181-1/+1
* ipfw(4): Fix a typo in a source code commentGordon Bergling2026-08-171-1/+1
* ipfilter(4): Fix a typo in a source code commentGordon Bergling2026-08-101-1/+1
* pfsync: handle large MTU pfsync interfacesKristof Provost2026-08-081-1/+1
* pf: attempt to handle overlapping group and interface namesKristof Provost2026-08-031-6/+13
* pf: fix securelevel off-by-oneKristof Provost2026-08-031-47/+47
* pf(4) fix NULL pointer dereference in outbound packet path.Kristof Provost2026-07-231-2/+11
* pf: include direction in fragment keyKristof Provost2026-07-231-8/+14
* pf: fix a crash on sendfile()KUROSAWA Takahiro2026-07-081-0/+35
* pf: revert netlink commands back to enumGleb Smirnoff2026-07-061-51/+52
* pflog: run VNET_SYSUNINIT in SI_SUB_PROTO_FIREWALLKristof Provost2026-06-301-1/+1
* pflog: create bpf tapping points without ifnet(9)Kristof Provost2026-06-281-126/+80
* pflog: remove unused argument from pflogattach()Kristof Provost2026-06-251-3/+3
* ipfw/nat64: Fix type confusion panic when using wrong NAT64 instance typeTeddy Engel2026-06-222-2/+4
* pf: free match rules after exiting critical sectionSiva Mahadevan2026-06-101-4/+4
* ipfw nat: Add assertion that mbuf is not a chainEd Maste2026-06-081-2/+3
* ipfilter: Fix ip_pptp_pxy (PPTP proxy) length underflowCy Schubert2026-06-081-2/+6
* pfsync: remove invalid panicKristof Provost2026-06-081-1/+5
* netpfil: add PF netlink command decoding supportIshan Agrawal2026-06-031-52/+51
* nat64lsn: Fix type confusion panic when using wrong NAT64 instance typeTeddy Engel2026-06-021-1/+2
* divert: Define semantics for SO_REUSEPORT_LB on divert socketsMark Johnston2026-05-262-2/+2
* pf: fix incorrect table decoding in netlinkKristof Provost2026-05-211-1/+8
* ipfw: fix checksum after NATTimo Völker2026-05-211-8/+7
* ipfilter: Fix NULL dereferences in ipf_checkicmp6matchingstate()Teddy Engel2026-05-201-1/+9
* ipfilter: Add NULL check for fin_m in ipf_pr_icmp6()Teddy Engel2026-05-201-0/+3
* ipfilter: Add NULL check for fin_dp in ICMP packet handlersTeddy Engel2026-05-201-0/+4
* ipfilter: Validate length before checksumCy Schubert2026-05-201-4/+13
* ipfw: fix IPv6 flow label matchingBoris Lytochkin2026-05-121-1/+3
* pfctl: optionally print the rule in the state overviewKristof Provost2026-05-072-76/+115
* pf: do not reject rules with colliding hashesKristof Provost2026-05-051-16/+8
* pfsync: reject invalid SCTP statesKristof Provost2026-05-051-0/+7
* pf: improve SCTP validationKristof Provost2026-04-291-5/+11
* pf: improve ASCONF chunk validationKristof Provost2026-04-281-0/+7
* pf: fix duplicate rule detection for automatic tablesKristof Provost2026-04-231-3/+1
* pf: only allow a subset of netlink calls when securelevel is setKristof Provost2026-04-211-0/+47
* pf: do not allow flags to be changed with securelevel setKristof Provost2026-04-211-2/+0
* pf: Use MTX_DUPOK to initialize hash chain mutexesMark Johnston2026-04-201-0/+1
* pf: be more robust against interface name conflictsKristof Provost2026-04-201-0/+7
* pf: use correct address family in pfr_pool_get()Kristof Provost2026-04-171-1/+1
* pf: pf_frag_compare() should not be using subtraction to compare fragment IDsKristof Provost2026-04-171-4/+4
* pf: fix error handling in pf_sourcelim_add()Kristof Provost2026-04-171-1/+3
* pf: use hashalloc(9) for key, id, src-node and udp-endpoint hashesGleb Smirnoff2026-04-121-92/+54
generated by cgit v1.3 (git 2.53.0) at 2026-09-17 07:38:54 +0000