| c428292c | 31-Jan-2022 |
Kristof Provost <[email protected]> |
libpfctl: fix pfctl_kill_states()
735748f30a changed the output of the states so that the creator id endianness would be consistent. This means that we need to convert the host endianness creatorid
libpfctl: fix pfctl_kill_states()
735748f30a changed the output of the states so that the creator id endianness would be consistent. This means that we need to convert the host endianness creatorid back to big-endian before we give it to the kernel.
MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit 6f47a72d8ebf444641bda192b33eb217c9013811)
show more ...
|
| 10199101 | 08-Nov-2021 |
Kristof Provost <[email protected]> |
pf tests: Test PR259689
We didn't populate dyncnt/tblcnt, so `pfctl -sr -vv` might not have the table element count.
PR: 259689 MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netga
pf tests: Test PR259689
We didn't populate dyncnt/tblcnt, so `pfctl -sr -vv` might not have the table element count.
PR: 259689 MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D32893
(cherry picked from commit 2de49deeca0b1377664dee2cd0a43ee7cf6b4bc4)
show more ...
|
| 9aa63a8d | 05-Nov-2021 |
Kristof Provost <[email protected]> |
libpfct: be consistent with u_int vs. uint
Always use uint64_t over u_int64_t, for the sake of consistency.
No functional change.
MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Net
libpfct: be consistent with u_int vs. uint
Always use uint64_t over u_int64_t, for the sake of consistency.
No functional change.
MFC after: 3 weeks Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit 7bb3c927f7d9c48b356b4d20907b813f9b83273b)
show more ...
|
| d1d99d75 | 26-Aug-2021 |
Kristof Provost <[email protected]> |
libpfctl: Implement DIOCGETSTATUS wrappers
MFC after: 1 week Sponsored by: Modirum MDPay Differential Revision: https://reviews.freebsd.org/D31696
(cherry picked from commit 46fb68b1de49c8d23502437
libpfctl: Implement DIOCGETSTATUS wrappers
MFC after: 1 week Sponsored by: Modirum MDPay Differential Revision: https://reviews.freebsd.org/D31696
(cherry picked from commit 46fb68b1de49c8d235024374b71c1249af9e62ef)
show more ...
|
| 4debb6a3 | 30-Jun-2021 |
Kristof Provost <[email protected]> |
libpfctl: memory leak fix
We must remember to free the nvlist we create from the kernel's response to DIOCGETSTATESNV, on every iteration.
Reviewed by: donner MFC after: 1 week Sponsored by: Rubico
libpfctl: memory leak fix
We must remember to free the nvlist we create from the kernel's response to DIOCGETSTATESNV, on every iteration.
Reviewed by: donner MFC after: 1 week Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D30957
(cherry picked from commit 0e9f1892ec739d7fbd854af699507167a0a5dde2)
show more ...
|
| dec754f0 | 27-May-2021 |
Kristof Provost <[email protected]> |
libpfctl: Improve error handling in pfctl_get_states()
Ensure that we always free nvlists and other allocated memory.
Reviewed by: scottl MFC after: 3 days Sponsored by: Rubicon Communications, LLC
libpfctl: Improve error handling in pfctl_get_states()
Ensure that we always free nvlists and other allocated memory.
Reviewed by: scottl MFC after: 3 days Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D30493
(cherry picked from commit 27c77f42ae7402c313deec47aa67a8a8e0889410)
show more ...
|
| 48d771e5 | 12-May-2021 |
Kristof Provost <[email protected]> |
pf: Track the original kif for floating states
Track (and display) the interface that created a state, even if it's a floating state (and thus uses virtual interface 'all').
MFC after: 1 week Spons
pf: Track the original kif for floating states
Track (and display) the interface that created a state, even if it's a floating state (and thus uses virtual interface 'all').
MFC after: 1 week Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D30245
(cherry picked from commit d0fdf2b28f9b981d2cb98e9da8a715e046ef1e92)
show more ...
|
| a9620e7c | 30-Apr-2021 |
Kristof Provost <[email protected]> |
pf: Allow states to by killed per 'gateway'
This allows us to kill states created from a rule with route-to/reply-to set. This is particularly useful in multi-wan setups, where one of the WAN links
pf: Allow states to by killed per 'gateway'
This allows us to kill states created from a rule with route-to/reply-to set. This is particularly useful in multi-wan setups, where one of the WAN links goes down.
Submitted by: Steven Brown Obtained from: https://github.com/pfsense/FreeBSD-src/pull/11/ MFC after: 1 week Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D30058
(cherry picked from commit abbcba9cf5b1c26e837f00e0fbc205652cb05e51)
show more ...
|
| 327310fc | 29-Apr-2021 |
Kristof Provost <[email protected]> |
pfctl: Start using DIOCKILLSTATESNV
MFC after: 1 week Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D30055
(cherry picked from commit 2a00
pfctl: Start using DIOCKILLSTATESNV
MFC after: 1 week Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D30055
(cherry picked from commit 2a00c4db93b8db0c326a57363ca8a690ef6ab082)
show more ...
|
| c93907df | 20-Apr-2021 |
Kristof Provost <[email protected]> |
pf: Allow multiple labels to be set on a rule
Allow up to 5 labels to be set on each rule. This offers more flexibility in using labels. For example, it replaces the customer 'schedule' keyword used
pf: Allow multiple labels to be set on a rule
Allow up to 5 labels to be set on each rule. This offers more flexibility in using labels. For example, it replaces the customer 'schedule' keyword used by pfSense to terminate states according to a schedule.
Reviewed by: glebius MFC after: 2 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D29936
(cherry picked from commit 6fcc8e042ac480f9276177339f7de1ad0f95c1b0)
show more ...
|