summaryrefslogtreecommitdiff
path: root/sys/dist
AgeCommit message (Expand)Author
2007-10-02Bring some fixes from IPF 4.1.27 in order to fix kern/37037.martti
2007-09-17Fixed IPF bug #1767831martti
2007-09-17Fixed IPF bug #1779455martti
2007-09-17Returning from m_pulldown can leave the first mbut with no data (m_len = 0).martti
2007-09-14Fixed IPF bug #1774745martti
2007-09-14Fixed IPF bug #1794544martti
2007-09-10Revert to previous, it was not working for me correctly...martti
2007-09-10Fixed IPF bug #1767831martti
2007-09-10Fixed IPF bug #1785199martti
2007-09-10Fixed IPF bug #1791241 ("keep frag does not work with keep state for fragments")martti
2007-08-07reduce diff.yamt
2007-07-19Avoid casting to "i6addr_t *", because that type requires 64-bitgdt
2007-07-09Merge some of the less invasive changes from the vmlocking branch:ad
2007-06-24Avoid use of cached pointers that might be stale due to mbuf operations.mlelstv
2007-06-17(Re-)add a missing cast in an #if part not used in current, but neededmartin
2007-06-16Upgraded IPFilter to v4.1.23martin
2007-06-09Get rid of radix_node_head.rnh_walktree, because it is only everdyoung
2007-06-04s/iplattach/ipfattach/ and s/ipldetach/ipfdetach/martti
2007-05-31The wrong condition was being tested for when deciding which fields todarrenr
2007-05-30the call to ipf_freetoken() free's the structure pointed to by 't' so doingdarrenr
2007-05-25Fix problems with stateful filtering. Patch received from darrenr@.martti
2007-05-17Coverity CID 3157: remove bogus break.christos
2007-05-15Merge IP-Filter 4.1.22martin
2007-05-10pfctl: extend pf.conf(5) syntax. Let the operator supply an optionaldyoung
2007-05-04Use the system's offsetof() definition from sys/systm.h (in kernel)dyoung
2007-05-02Eliminate address family-specific route caches (struct route, structdyoung
2007-05-02Instead of manually multiplying out the magic numbers, use * 15 / 10 insteaddogcow
2007-05-02Sync with official IPFmartti
2007-05-02gcc is too clueless on some platforms to tell thatdogcow
2007-05-01Upgraded IPFilter to 4.1.20martti
2007-04-27Add a define for caddr_t to ip_compat.h and revert most of thejnemeth
2007-04-16fix build on arches with chars that're by default unsigned.dogcow
2007-04-15A few tweaks (no effect on NetBSD-current) to make syncing with upstreammartin
2007-04-14Update IPFilter to version 4.1.19martin
2007-03-12Pass an ipl argument to pool_init/POOL_INIT to be used when initializingad
2007-03-04Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.christos
2007-02-17KNF: de-__P, bzero -> memset, bcmp -> memcmp. Remove extraneousdyoung
2007-02-17In pf_rtlabel_match, use rtcache_free()/rtcache_init(). This isdyoung
2006-12-27CID-3809: move up the initialization of `fr' as we can jump to junkput: ifalc
2006-12-27CID-3802: don't leak `isc'alc
2006-12-24TCP window scaling was being recognised but the recorded settins were beingdarrenr
2006-12-15Introduce new helper functions to abstract the route caching.joerg
2006-12-13Don't apply a window scale to the window size in a SYN packet.matt
2006-12-09Here are various changes designed to protect against bad IPv4dyoung
2006-12-04Make code concise by removing uninformative #ifdef's.dyoung
2006-12-04Indent these macros for readability. People have to read thisdyoung
2006-12-04Lightly constify. Helps compile-time checking that we are notdyoung
2006-12-04No need for a struct route_in6 in pf_route6(). Replace it with adyoung
2006-11-25spell precede; from Zaferchristos
2006-11-24fix spelling of accommodate; from Zapher.christos