summaryrefslogtreecommitdiff
path: root/sys/netpfil
AgeCommit message (Expand)Author
29 hoursipfw: fix !VIMAGE buildGleb Smirnoff
41 hoursnetpfil/ipfw: Fix a typo in a source code commentGordon Bergling
2 daysipfw: refactor how we store bpf tap pointsGleb Smirnoff
2 daysipfw: in a vnet destructor use NET_EPOCH_WAIT()Gleb Smirnoff
2 daysipfw: remove locking workarounds in the table codeGleb Smirnoff
2 daysipfw: make the upper half lock sleepableGleb Smirnoff
5 dayspf: remove unused functionKristof Provost
5 dayspf: configurable action on limiter exceededKristof Provost
5 dayspf: avoid a shadowed variable in the pf_create_state() source limiter handlingKristof Provost
5 dayspf: state/source limiter finishing touchesKristof Provost
5 dayspf: remove redundant range checksKristof Provost
5 dayspf: convert state limiter interface to netlinkKristof Provost
5 dayspf: introduce source and state limitersKristof Provost
6 daysipfw: find_tentry method is defined for any table algorithmGleb Smirnoff
11 dayspf: handle nlattr_add_nested() failureKristof Provost
11 dayspf: remove redundant zeroingKristof Provost
14 daysipfw: make create_objects_compat() staticGleb Smirnoff
14 daysipfw: use sparse initializer for dynamic opcodesGleb Smirnoff
14 daysipfw: remove extraneous argument from ipfw_add_protected_rule()Gleb Smirnoff
2026-01-02pf: sprinkle const over pf_addr_cmp()Kristof Provost
2025-12-30pf: convert DIOCRCLRASTATS to netlinkKristof Provost
2025-12-26pf: don't reject route-to'd too-large packetsKristof Provost
2025-12-22pf: Fix state handling when ICMP packets are divertedMark Johnston
2025-12-21ipfw: fix bpf tap point lookupGleb Smirnoff
2025-12-21net: add ifnet_rename_event EVENTHANDLER(9) for interface renamingGleb Smirnoff
2025-12-21pf: make eventhandler_tag's staticGleb Smirnoff
2025-12-21pf: fix pcounters array sizeKristof Provost
2025-12-19ipf: copy{in,out}ptr -> ipf_copy{in,out}_indirectBrooks Davis
2025-12-19pf: Avoid taking the pf rules write lock in a couple of ioctlsMark Johnston
2025-12-18pf: Fix the reply command in a couple of placesMark Johnston
2025-12-16ipfilter: Add missing kenv fetchCy Schubert
2025-12-16ipfilter: Prevent stack buffer overflowDag-Erling Smørgrav
2025-12-15ipfw: create a bpf tap point for every log ruleGleb Smirnoff
2025-12-15ipfw: create "ipfw0" and "ipfwlog0" bpf tapping points without ifnet(9)Gleb Smirnoff
2025-12-15pf: fix min-ttl and set-tos for nat64Kristof Provost
2025-12-14pfsync: Avoid zeroing the state export unionMark Johnston
2025-12-11pf: handle TTL expired during nat64Kristof Provost
2025-12-08ipfilter: Disable ipfs(8) by defaultCy Schubert
2025-12-08ipfilter: Restrict ipfilter within a jailCy Schubert
2025-12-08pf: Fix error handling in pf_handle_get_tstats()Mark Johnston
2025-12-08pf: Fix an off-by-one in pf_handle_getcreators()Mark Johnston
2025-12-05pf: convert DIOCRGETASTATS to netlinkKristof Provost
2025-12-04pf: make unhandled_af() inlineGleb Smirnoff
2025-12-01pfsync: fix incorrect unlock during destroyKristof Provost
2025-12-01pf: use correct sized variables in pf_change_icmp()Kristof Provost
2025-11-26ipfilter: fix broken buildWarner Losh
2025-11-26ipfilter: Restore used variableCy Schubert
2025-11-26ipfilter: Remove unused variableCy Schubert
2025-11-26ipfilter: Verify ipnat on entry into kernelCy Schubert
2025-11-26ipfilter: Verify frentry on entry into kernelCy Schubert