summaryrefslogtreecommitdiff
path: root/sys/dist/pf
AgeCommit message (Expand)Author
2013-10-20fix compiler warningschristos
2013-07-01PFIL_HOOKS is dead.skrll
2013-06-30Fix pf module build. Adjust pfil_remove_hook 3rd arguments.njoly
2013-06-30Update pf to pfil(9) changes. Missed in previous commit.rmind
2012-03-22remove KAME IPSEC, replaced by FAST_IPSECdrochner
2012-01-11protect "union sockaddr_union" from being defined twice by a CPP symboldrochner
2011-12-19do missing ipsec->kame_ipsec renamesdrochner
2011-12-17Separate /dev/random pseudodevice implemenation from kernel entropy pooltls
2011-11-28Remove arc4random() and arc4randbytes() from the kernel API. Replacetls
2011-11-19First step of random number subsystem rework described intls
2011-08-30fix -Wshadow warnings when ALTQ is enabledjmcneill
2011-08-29build pf module with WARNS=3, and remove the need for -Wno-shadowjmcneill
2011-07-01fix an uninitialised variable problem. large-ish function, but imrg
2011-05-18remove unused expressiondrochner
2011-05-11Commit the patch fromhauke
2011-05-03Reduces the resources demanded by TCP sessions in TIME_WAIT-state usingdyoung
2011-01-19make sure the "overload_tbl" member of "struct pf_rule" copied indrochner
2010-11-05ip_randomid: make mechanism MP-safe and more modular.rmind
2010-05-07Add support for pfs(8)degroote
2010-04-13Do not unload pf when enabled, not even manually.ahoka
2010-04-13change module class to driver.ahoka
2010-04-13Do not auto unload pf if it's enabled.ahoka
2010-04-12- Make the pf and pflog driver able to detach.ahoka
2010-04-12Spello in comment.skrll
2010-04-05Push the bpf_ops usage back into bpf.h. Push the common ifp->if_bpfjoerg
2010-01-23Fix a typo introduced by the bpf linkage change.minskim
2010-01-19Redefine bpf linkage through an always present op vector, i.e.pooka
2009-12-30Replace uidinfo.h with kauth.h, should fix problems observed by tron@.elad
2009-12-30Use the right member to store gid in the non-NetBSD case.elad
2009-12-30Get uid/gid from the socket's credentials.elad
2009-12-06If pfi_address_add() has to extend the buffer, copy the data in thedsl
2009-10-03Move firewall/NAT policy back to respective subsystems (pf, ipf).elad
2009-09-14Import pfsync support from OpenBSD 4.2degroote
2009-07-28Remove LKM code from pf.minskim
2009-06-16Reduce diff with OpenBSD. No functional change.minskim
2009-04-13Fix http://www.securityfocus.com/archive/1/502634, from OpenBSD.christos
2009-01-11make this compilecegger
2008-12-19use M_ZERO on malloc() and remove subsequent bzero().cegger
2008-12-19pass M_NOWAIT instead of M_DONTWAIT to malloc.cegger
2008-11-07*** Summary ***dyoung
2008-10-11Move uidinfo to its own module in kern_uidinfo.c and include in rump.pooka
2008-06-22Wrap definition of pfil6_wrapper in #ifdef INET6.peter
2008-06-19remove pf42 branch's todo.yamt
2008-06-18merge yamt-pf42 branch.yamt
2008-04-15Make ip6 and icmp6 stats per-cpu.thorpej
2008-04-12Make IP, TCP, UDP, and ICMP statistics per-CPU. The stats are collatedthorpej
2008-04-08Change ICMP6 stats from a structure to an array of uint64_t's.thorpej
2008-04-08Change TCP stats from a structure to an array of uint64_t's.thorpej
2008-04-07Change IP stats from a structure to an array of uint64_t's.thorpej
2008-04-06Change UDP stats from a structure to an array of uint64_t's.thorpej