User Details
User Details
- User Since
- Sep 28 2014, 7:22 PM (551 w, 2 d)
Yesterday
Yesterday
kp committed rG461b79d8ee58: pfctl: also remove incorrect counter print for rule anchors (authored by kp).
pfctl: also remove incorrect counter print for rule anchors
pfctl: fix crash on "pfctl -a '*' -vvsr"
pf: explicitly NULL state key pointers
pf: don't use state keys after pf_state_insert()
pf: improve pf_state_key_attach() error handling
kp committed rG5b182c68c0f5: pfctl: also remove incorrect counter print for rule anchors (authored by kp).
pfctl: also remove incorrect counter print for rule anchors
pfctl: fix crash on "pfctl -a '*' -vvsr"
pf: don't use state keys after pf_state_insert()
pf: improve pf_state_key_attach() error handling
pf: explicitly NULL state key pointers
pf: add extra unhandled_af() assertions
pf: use struct pf_pdesc for pf_change_ap()
pf: pull icmp-nested headers into struct pf_pdesc
pf: fix ICMP pcksum pointers
kp added a comment to D49936: link_addr: only accept '.' and ':' as separators.
in this case ifconfig(8) defaults to the 'link' address family instead of the 'inet' address family.
Fri, Apr 18
Fri, Apr 18
Wed, Apr 16
Wed, Apr 16
kp committed rG435e9214478c: pf: remove _unaligned from pf_patch_(16|32)_unaligned() (authored by kp).
pf: remove _unaligned from pf_patch_(16|32)_unaligned()
pf: simplify pf_patch* arguments
pf: remove unused macros
kp committed rG3f39713e4e34: pf: log reused states in addition to failed state insertions (authored by kp).
pf: log reused states in addition to failed state insertions
pf: allow pf_get_sport() to work on in rules
pf tests: test includes inside anchors
pfctl: allow include in inline anchors
pf: Don't convert arc4random() to host byte order
pfctl: Remove NULL-checks before free(). ok tb@
kp committed rGcfdc4f6d0647: pf: g/c unneeded af (address family) params to pf_change_ap (authored by kp).
pf: g/c unneeded af (address family) params to pf_change_ap
pfctl: fix recursive printing of NAT rules
pfctl: fix recursive printing of NAT rules
Tue, Apr 15
Tue, Apr 15
sys/net: add DOT1Q_VID_{MIN,MAX}
sys/net: add a new ether_vlanid_t type
kp committed rG0fc3c29fb3dd: pfctl: also remove incorrect counter print for rule anchors (authored by kp).
pfctl: also remove incorrect counter print for rule anchors
pf: add SDT on REASON_SET()
pf: pass struct pf_pdesc to pf_change_ap()
kp committed rG9c68e37d96b9: pf: share reason between pf_test() and pf_test_rule() (authored by kp).
pf: share reason between pf_test() and pf_test_rule()
if_ovpn: fix use-after-free of mbuf
pfctl: fix crash on "pfctl -a '*' -vvsr"
Sat, Apr 12
Sat, Apr 12
kp added inline comments to D28530: Widen ifnet_detach_sxlock coverage.
Thu, Apr 10
Thu, Apr 10
bridge: define VLANTAGOF correctly
net/if_bridgevar.h: add include guard
pf: fix pf_ioctl_add_addr() validation
Wed, Apr 9
Wed, Apr 9
pf: rename pf_unlink_state() to pf_remove_state()
pf.conf.5: remove incorrect performance comparison
pf.conf.5: improve indentation in list block.
kp committed rG0a376f7e7e03: pfctl: route-to, dup-to, reply-to should not override the block action (authored by kp).
pfctl: route-to, dup-to, reply-to should not override the block action
kp committed rGa4bd4e4b5632: pf tests: verify that we generate an ICMP6 packet too big error on route-to (authored by kp).
pf tests: verify that we generate an ICMP6 packet too big error on route-to
pf: emit ICMPv6 packet too big for route-to
kp committed rGf132e8b4c7d9: net tests: enable if_lagg_test:lacp_linkstate_destroy_stress (authored by K Rin <rin@sandb0x.tw>).
net tests: enable if_lagg_test:lacp_linkstate_destroy_stress
kp committed rG747483038e6f: netinet6 tests: fix typo in the test (authored by K Rin <rin@sandb0x.tw>).
netinet6 tests: fix typo in the test
kp committed rG8e7d333f9207: pf: added /* FALLTHROUGH */ comments, typecasts (u_int32_t)-1, ... (authored by kp).
pf: added /* FALLTHROUGH */ comments, typecasts (u_int32_t)-1, ...
pf: unused arguments at pf_normalize_tcp_init()
pf: add unhandled_af() to pf_socket_lookup()
kp committed rGabda72f3a1f6: pf: INET/INET6 address family check should be unified in PF (authored by kp).
pf: INET/INET6 address family check should be unified in PF
pfctl: fix no nat / no rdr rules
bridge: store a bridge_iflist pointer in ifnet
bpf: avoid panic on multiple readers
Tue, Apr 8
Tue, Apr 8
kp committed rG50725e585de7: netinet6 tests: add a test for SIOCAIFADDRing an invalid IPv6 address (authored by ivy).
netinet6 tests: add a test for SIOCAIFADDRing an invalid IPv6 address
Mon, Apr 7
Mon, Apr 7
kp committed rG1408670c90ae: in6_control_ioctl: correctly report errors from SIOCAIFADDR_IN6 (authored by ivy).
in6_control_ioctl: correctly report errors from SIOCAIFADDR_IN6
kp added inline comments to D49665: pfctl: fix no nat / no rdr rules.
kp added inline comments to D49665: pfctl: fix no nat / no rdr rules.
Fri, Apr 4
Fri, Apr 4
kp requested review of D49665: pfctl: fix no nat / no rdr rules.
Thu, Apr 3
Thu, Apr 3
pf: allow 'allow-opts' to be used on match rules
pf tests: test table information export via snmp_pf
pf tests: add a basic snmp_pf test case
snmp_pf: fix pfInterfacesIfRefsState
pf tests: add a basic snmp_pf test case
pf tests: test table information export via snmp_pf
snmp_pf: fix pfInterfacesIfRefsState
Wed, Apr 2
Wed, Apr 2
pfctl: fix recursive printing of NAT rules
Tue, Apr 1
Tue, Apr 1
if_ovpn: fix use-after-free of mbuf
Mon, Mar 31
Mon, Mar 31
pf: factor out duplicate code to undo nat
pf: inline pf_addrcpy()
pf: explicitly NULL state key pointers
pf: simplify action resolution in pf_test_rule()
pf: don't use state keys after pf_state_insert()
pf: improve pf_state_key_attach() error handling
kp added inline comments to D49582: pf: factor out duplicate code to undo nat.
kp committed rG6091e2aa9236: pfctl.8: fix typo in reference to rc.conf variable (authored by quentin.thebault_defenso.fr).
pfctl.8: fix typo in reference to rc.conf variable
Sun, Mar 30
Sun, Mar 30
kp requested review of D49582: pf: factor out duplicate code to undo nat.
kp requested review of D49581: pf: inline pf_addrcpy().
kp updated the diff for D49550: pf: improve pf_state_key_attach() error handling.
Move free operations outside the lock
Sat, Mar 29
Sat, Mar 29
kp added inline comments to D49551: pf: don't use state keys after pf_state_insert().
Fri, Mar 28
Fri, Mar 28
kp requested review of D49553: pf: explicitly NULL state key pointers.
kp requested review of D49552: pf: simplify action resolution in pf_test_rule().
kp requested review of D49551: pf: don't use state keys after pf_state_insert().
kp requested review of D49550: pf: improve pf_state_key_attach() error handling.
kp added a comment to D49221: pfctl: Add modern NAT syntax.
Looks good. It does still need the man page updates. We can probably stea^W borrow those from OpenBSD.
kp added a comment to D49520: pf: Clear state key pointers after freeing them.
I've added this as well: