glebius 6ce9102001 Merge 1.127 from OpenBSD, that closes a regression from 1.125 (merged ...

as r242694):
  do better detection of when we have a better version of the tcp sequence
  windows than our peer.

  this resolves the last of the pfsync traffic storm issues ive been able to
  produce, and therefore makes it possible to do usable active-active
  statuful firewalls with pf.

2012-12-11 08:37:08 +00:00

..

if_pflog.c

Make the "struct if_clone" opaque to users of the cloning API. Users

2012-10-16 13:37:54 +00:00

if_pfsync.c

Merge 1.127 from OpenBSD, that closes a regression from 1.125 (merged

2012-12-11 08:37:08 +00:00

in4_cksum.c

…

pf_if.c

…

pf_ioctl.c

Revert previous commit...

2012-10-10 08:36:38 +00:00

pf_lb.c

Make ruleset anchors in pf(4) reentrant. We've got two problems here:

2012-09-18 10:54:56 +00:00

pf_norm.c

…

pf_osfp.c

…

pf_ruleset.c

…

pf_table.c

When connection rate hits and we overload a source to a table,

2012-09-22 10:14:47 +00:00

pf.c

Rule memory garbage collecting in new pf scans only states that are on

2012-12-06 08:38:14 +00:00