summaryrefslogtreecommitdiff
path: root/sys/dist
AgeCommit message (Expand)Author
2007-06-17(Re-)add a missing cast in an #if part not used in current, but neededmartin
2007-06-16Upgraded IPFilter to v4.1.23martin
2007-06-09Get rid of radix_node_head.rnh_walktree, because it is only everdyoung
2007-06-04s/iplattach/ipfattach/ and s/ipldetach/ipfdetach/martti
2007-05-31The wrong condition was being tested for when deciding which fields todarrenr
2007-05-30the call to ipf_freetoken() free's the structure pointed to by 't' so doingdarrenr
2007-05-25Fix problems with stateful filtering. Patch received from darrenr@.martti
2007-05-17Coverity CID 3157: remove bogus break.christos
2007-05-15Merge IP-Filter 4.1.22martin
2007-05-10pfctl: extend pf.conf(5) syntax. Let the operator supply an optionaldyoung
2007-05-04Use the system's offsetof() definition from sys/systm.h (in kernel)dyoung
2007-05-02Eliminate address family-specific route caches (struct route, structdyoung
2007-05-02Instead of manually multiplying out the magic numbers, use * 15 / 10 insteaddogcow
2007-05-02Sync with official IPFmartti
2007-05-02gcc is too clueless on some platforms to tell thatdogcow
2007-05-01Upgraded IPFilter to 4.1.20martti
2007-04-27Add a define for caddr_t to ip_compat.h and revert most of thejnemeth
2007-04-16fix build on arches with chars that're by default unsigned.dogcow
2007-04-15A few tweaks (no effect on NetBSD-current) to make syncing with upstreammartin
2007-04-14Update IPFilter to version 4.1.19martin
2007-03-12Pass an ipl argument to pool_init/POOL_INIT to be used when initializingad
2007-03-04Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.christos
2007-02-17KNF: de-__P, bzero -> memset, bcmp -> memcmp. Remove extraneousdyoung
2007-02-17In pf_rtlabel_match, use rtcache_free()/rtcache_init(). This isdyoung
2006-12-27CID-3809: move up the initialization of `fr' as we can jump to junkput: ifalc
2006-12-27CID-3802: don't leak `isc'alc
2006-12-24TCP window scaling was being recognised but the recorded settins were beingdarrenr
2006-12-15Introduce new helper functions to abstract the route caching.joerg
2006-12-13Don't apply a window scale to the window size in a SYN packet.matt
2006-12-09Here are various changes designed to protect against bad IPv4dyoung
2006-12-04Make code concise by removing uninformative #ifdef's.dyoung
2006-12-04Indent these macros for readability. People have to read thisdyoung
2006-12-04Lightly constify. Helps compile-time checking that we are notdyoung
2006-12-04No need for a struct route_in6 in pf_route6(). Replace it with adyoung
2006-11-25spell precede; from Zaferchristos
2006-11-24fix spelling of accommodate; from Zapher.christos
2006-11-16__unused removal on arguments; approved by core.christos
2006-10-17now that we have -Wno-unused-parameter, back out all the tremendously uglydogcow
2006-10-13More -Wunused fallout. sprinkle __unused when possible; otherwise, use thedogcow
2006-10-12Merge the peter-altq branch.peter
2006-10-12- sprinkle __unused on function decls.christos
2006-10-07PR/34746: Nino Dehne: pf(4)'s synproxy state breaks when used with tagspeter
2006-10-01In pf, there are lots of #ifdef ALTQ, but our ALTQ is not what pf expects,pavel
2006-09-19Remove ugly (void *) casts from network scope authorization wrapper andelad
2006-09-17defflag IPFILTER_LOOKUP.yamt
2006-09-13Don't use KAUTH_RESULT_* where it's not applicable.elad
2006-09-08First take at security model abstraction.elad
2006-09-03add missing initializerchristos
2006-09-01fix the previous: don't replace a NULL with a "" in an initialiser.mrg
2006-08-30off by one element.christos