| Commit message (Expand) | Author | Age | Files | Lines |
| ... | |
| * | pf: use correct address family in pfr_pool_get() | Kristof Provost | 2026-04-17 | 1 | -1/+1 |
| * | pf: pf_frag_compare() should not be using subtraction to compare fragment IDs | Kristof Provost | 2026-04-17 | 1 | -4/+4 |
| * | pf: fix error handling in pf_sourcelim_add() | Kristof Provost | 2026-04-17 | 1 | -1/+3 |
| * | pf: use hashalloc(9) for key, id, src-node and udp-endpoint hashes | Gleb Smirnoff | 2026-04-12 | 1 | -92/+54 |
| * | ipfw_nptv6: fix handling the ifaddr removal event | Andrey V. Elsukov | 2026-04-02 | 1 | -2/+2 |
| * | pf: include all elements when hashing rules | Kristof Provost | 2026-03-24 | 1 | -9/+97 |
| * | pf: Fix hashing of IP address ranges | Michael Gmelin | 2026-03-24 | 1 | -0/+1 |
| * | ipfw: add support for masked ip-address lookups | Boris Lytochkin | 2026-03-01 | 3 | -98/+191 |
| * | pf: avoid NULL deref on purged states | Kristof Provost | 2026-02-18 | 1 | -1/+3 |
| * | ipfilter: Avoid negative array indicies | Cy Schubert | 2026-02-17 | 3 | -4/+4 |
| * | pf: convert DIOCRTSTADDRS to netlink | Kristof Provost | 2026-02-16 | 2 | -0/+42 |
| * | ipfilter: Interface name must not extend beyond end of buffer | Cy Schubert | 2026-02-10 | 1 | -2/+21 |
| * | ipfilter: Fix possible overrun | Cy Schubert | 2026-02-04 | 1 | -1/+1 |
| * | pf: fix use of uninitialised variable | Kristof Provost | 2026-02-03 | 1 | -22/+19 |
| * | ipfw: fix my stupid error in casting void * to enum | Gleb Smirnoff | 2026-01-27 | 1 | -4/+4 |
| * | ipfw: don't recurse on the upper half lock in ipfw_iface_ref() | Gleb Smirnoff | 2026-01-27 | 1 | -11/+5 |
| * | pf: Pass v6 packets to the divert socket | Mark Johnston | 2026-01-27 | 1 | -5/+1 |
| * | ipfw: don't use the upper half lock to walk dynamic states buckets | Gleb Smirnoff | 2026-01-26 | 1 | -14/+4 |
| * | pf: Rationalize the ip_divert_ptr test | Mark Johnston | 2026-01-26 | 1 | -5/+10 |
| * | netinet6: use in6_ifmtu() instead of IN6_LINKMTU() macro | Gleb Smirnoff | 2026-01-23 | 1 | -2/+2 |
| * | pfctl(8): change default limiter action from no-match to block | Kristof Provost | 2026-01-19 | 1 | -0/+2 |
| * | ipfw: fix !VIMAGE build | Gleb Smirnoff | 2026-01-18 | 1 | -1/+1 |
| * | netpfil/ipfw: Fix a typo in a source code comment | Gordon Bergling | 2026-01-17 | 1 | -1/+1 |
| * | ipfw: refactor how we store bpf tap points | Gleb Smirnoff | 2026-01-17 | 5 | -36/+49 |
| * | ipfw: in a vnet destructor use NET_EPOCH_WAIT() | Gleb Smirnoff | 2026-01-17 | 1 | -5/+5 |
| * | ipfw: remove locking workarounds in the table code | Gleb Smirnoff | 2026-01-17 | 3 | -373/+68 |
| * | ipfw: make the upper half lock sleepable | Gleb Smirnoff | 2026-01-17 | 8 | -153/+47 |
| * | pf: remove unused function | Kristof Provost | 2026-01-14 | 1 | -6/+0 |
| * | pf: configurable action on limiter exceeded | Kristof Provost | 2026-01-14 | 5 | -14/+72 |
| * | pf: avoid a shadowed variable in the pf_create_state() source limiter handling | Kristof Provost | 2026-01-14 | 1 | -1/+1 |
| * | pf: state/source limiter finishing touches | Kristof Provost | 2026-01-14 | 1 | -28/+25 |
| * | pf: remove redundant range checks | Kristof Provost | 2026-01-14 | 1 | -12/+0 |
| * | pf: convert state limiter interface to netlink | Kristof Provost | 2026-01-14 | 3 | -152/+497 |
| * | pf: introduce source and state limiters | Kristof Provost | 2026-01-14 | 5 | -0/+1595 |
| * | ipfw: find_tentry method is defined for any table algorithm | Gleb Smirnoff | 2026-01-13 | 1 | -7/+1 |
| * | pf: handle nlattr_add_nested() failure | Kristof Provost | 2026-01-08 | 1 | -0/+45 |
| * | pf: remove redundant zeroing | Kristof Provost | 2026-01-08 | 1 | -54/+0 |
| * | ipfw: make create_objects_compat() static | Gleb Smirnoff | 2026-01-05 | 2 | -3/+1 |
| * | ipfw: use sparse initializer for dynamic opcodes | Gleb Smirnoff | 2026-01-05 | 1 | -16/+32 |
| * | ipfw: remove extraneous argument from ipfw_add_protected_rule() | Gleb Smirnoff | 2026-01-05 | 4 | -7/+5 |
| * | pf: sprinkle const over pf_addr_cmp() | Kristof Provost | 2026-01-02 | 1 | -1/+1 |
| * | pf: convert DIOCRCLRASTATS to netlink | Kristof Provost | 2025-12-30 | 2 | -0/+42 |
| * | pf: don't reject route-to'd too-large packets | Kristof Provost | 2025-12-26 | 1 | -2/+4 |
| * | pf: Fix state handling when ICMP packets are diverted | Mark Johnston | 2025-12-22 | 1 | -4/+6 |
| * | ipfw: fix bpf tap point lookup | Gleb Smirnoff | 2025-12-22 | 1 | -2/+2 |
| * | net: add ifnet_rename_event EVENTHANDLER(9) for interface renaming | Gleb Smirnoff | 2025-12-22 | 3 | -18/+51 |
| * | pf: make eventhandler_tag's static | Gleb Smirnoff | 2025-12-22 | 1 | -6/+6 |
| * | pf: fix pcounters array size | Kristof Provost | 2025-12-21 | 1 | -1/+1 |
| * | ipf: copy{in,out}ptr -> ipf_copy{in,out}_indirect | Brooks Davis | 2025-12-19 | 5 | -12/+14 |
| * | pf: Avoid taking the pf rules write lock in a couple of ioctls | Mark Johnston | 2025-12-19 | 3 | -50/+45 |