aboutsummaryrefslogtreecommitdiff
path: root/sys/netpfil
Commit message (Expand)AuthorAgeFilesLines
...
* pf: use correct address family in pfr_pool_get()Kristof Provost2026-04-171-1/+1
* pf: pf_frag_compare() should not be using subtraction to compare fragment IDsKristof Provost2026-04-171-4/+4
* pf: fix error handling in pf_sourcelim_add()Kristof Provost2026-04-171-1/+3
* pf: use hashalloc(9) for key, id, src-node and udp-endpoint hashesGleb Smirnoff2026-04-121-92/+54
* ipfw_nptv6: fix handling the ifaddr removal eventAndrey V. Elsukov2026-04-021-2/+2
* pf: include all elements when hashing rulesKristof Provost2026-03-241-9/+97
* pf: Fix hashing of IP address rangesMichael Gmelin2026-03-241-0/+1
* ipfw: add support for masked ip-address lookupsBoris Lytochkin2026-03-013-98/+191
* pf: avoid NULL deref on purged statesKristof Provost2026-02-181-1/+3
* ipfilter: Avoid negative array indiciesCy Schubert2026-02-173-4/+4
* pf: convert DIOCRTSTADDRS to netlinkKristof Provost2026-02-162-0/+42
* ipfilter: Interface name must not extend beyond end of bufferCy Schubert2026-02-101-2/+21
* ipfilter: Fix possible overrunCy Schubert2026-02-041-1/+1
* pf: fix use of uninitialised variableKristof Provost2026-02-031-22/+19
* ipfw: fix my stupid error in casting void * to enumGleb Smirnoff2026-01-271-4/+4
* ipfw: don't recurse on the upper half lock in ipfw_iface_ref()Gleb Smirnoff2026-01-271-11/+5
* pf: Pass v6 packets to the divert socketMark Johnston2026-01-271-5/+1
* ipfw: don't use the upper half lock to walk dynamic states bucketsGleb Smirnoff2026-01-261-14/+4
* pf: Rationalize the ip_divert_ptr testMark Johnston2026-01-261-5/+10
* netinet6: use in6_ifmtu() instead of IN6_LINKMTU() macroGleb Smirnoff2026-01-231-2/+2
* pfctl(8): change default limiter action from no-match to blockKristof Provost2026-01-191-0/+2
* ipfw: fix !VIMAGE buildGleb Smirnoff2026-01-181-1/+1
* netpfil/ipfw: Fix a typo in a source code commentGordon Bergling2026-01-171-1/+1
* ipfw: refactor how we store bpf tap pointsGleb Smirnoff2026-01-175-36/+49
* ipfw: in a vnet destructor use NET_EPOCH_WAIT()Gleb Smirnoff2026-01-171-5/+5
* ipfw: remove locking workarounds in the table codeGleb Smirnoff2026-01-173-373/+68
* ipfw: make the upper half lock sleepableGleb Smirnoff2026-01-178-153/+47
* pf: remove unused functionKristof Provost2026-01-141-6/+0
* pf: configurable action on limiter exceededKristof Provost2026-01-145-14/+72
* pf: avoid a shadowed variable in the pf_create_state() source limiter handlingKristof Provost2026-01-141-1/+1
* pf: state/source limiter finishing touchesKristof Provost2026-01-141-28/+25
* pf: remove redundant range checksKristof Provost2026-01-141-12/+0
* pf: convert state limiter interface to netlinkKristof Provost2026-01-143-152/+497
* pf: introduce source and state limitersKristof Provost2026-01-145-0/+1595
* ipfw: find_tentry method is defined for any table algorithmGleb Smirnoff2026-01-131-7/+1
* pf: handle nlattr_add_nested() failureKristof Provost2026-01-081-0/+45
* pf: remove redundant zeroingKristof Provost2026-01-081-54/+0
* ipfw: make create_objects_compat() staticGleb Smirnoff2026-01-052-3/+1
* ipfw: use sparse initializer for dynamic opcodesGleb Smirnoff2026-01-051-16/+32
* ipfw: remove extraneous argument from ipfw_add_protected_rule()Gleb Smirnoff2026-01-054-7/+5
* pf: sprinkle const over pf_addr_cmp()Kristof Provost2026-01-021-1/+1
* pf: convert DIOCRCLRASTATS to netlinkKristof Provost2025-12-302-0/+42
* pf: don't reject route-to'd too-large packetsKristof Provost2025-12-261-2/+4
* pf: Fix state handling when ICMP packets are divertedMark Johnston2025-12-221-4/+6
* ipfw: fix bpf tap point lookupGleb Smirnoff2025-12-221-2/+2
* net: add ifnet_rename_event EVENTHANDLER(9) for interface renamingGleb Smirnoff2025-12-223-18/+51
* pf: make eventhandler_tag's staticGleb Smirnoff2025-12-221-6/+6
* pf: fix pcounters array sizeKristof Provost2025-12-211-1/+1
* ipf: copy{in,out}ptr -> ipf_copy{in,out}_indirectBrooks Davis2025-12-195-12/+14
* pf: Avoid taking the pf rules write lock in a couple of ioctlsMark Johnston2025-12-193-50/+45