Page MenuHomeFreeBSD
People kp

kp (Kristof Provost)
Troubleshooter

Projects (6)
View All

User Details

User Since
Sep 28 2014, 7:22 PM (599 w, 4 d)

Recent Activity
View All

Wed, Mar 25

kp committed rGac6bb58a715e: pf: Fix hashing of IP address ranges (authored by grembo).
Wed, Mar 25, 10:54 AM
kp committed rGe3b801edded9: pf: include all elements when hashing rules.
Wed, Mar 25, 10:54 AM
kp committed rG958dbc87e9c5: pf tests: verify that we handle address range rules correctly.
Wed, Mar 25, 10:54 AM
kp committed rG38f8ac568273: pf: Fix hashing of IP address ranges (authored by grembo).
Wed, Mar 25, 10:54 AM
kp committed rGe79818ec36ef: pfctl: always warn if a duplicate rule was detected.
Wed, Mar 25, 10:54 AM
kp committed rGd107424a44b3: pf: Fix hashing of IP address ranges (authored by grembo).
Wed, Mar 25, 10:54 AM
kp committed rGe224b9b867f4: pfctl: always warn if a duplicate rule was detected.
Wed, Mar 25, 10:54 AM
kp committed rG4311217a039c: pf: include all elements when hashing rules.
Wed, Mar 25, 10:54 AM
kp committed rG6666b2a0e7c2: pf tests: verify that we handle address range rules correctly.
Wed, Mar 25, 10:54 AM
kp committed rG4e007734ff8e: pf tests: verify that we handle address range rules correctly.
Wed, Mar 25, 10:54 AM
kp committed rG536751cb4e15: pf: include all elements when hashing rules.
Wed, Mar 25, 10:54 AM

Tue, Mar 24

kp committed rG1fa873c93c8b: pf: Fix hashing of IP address ranges (authored by grembo).
Tue, Mar 24, 6:05 AM
kp committed rG66d66dd0f6f8: pfctl: always warn if a duplicate rule was detected.
Tue, Mar 24, 6:05 AM
kp committed rGc6bcf6e6fd50: pf: include all elements when hashing rules.
Tue, Mar 24, 6:05 AM
kp committed rGab74151e8d09: pf tests: verify that we handle address range rules correctly.
Tue, Mar 24, 6:05 AM

Sun, Mar 22

kp committed rG434e1c3d8413: pfctl tests: test rdr-to and nat-to in one rule.
Sun, Mar 22, 7:24 AM
kp committed rG0b0d34fd2f40: pf tests: verify first-match-wins for nat rules.
Sun, Mar 22, 6:03 AM
kp committed rG343ace42f82a: pfctl: parser must not ignore error from pfctl_optimize_ruleset().
Sun, Mar 22, 6:03 AM

Thu, Mar 12

kp committed R11:d4dad47577db: net/libpfctl: add 14.4 version.
Thu, Mar 12, 10:40 AM

Feb 25 2026

kp committed rGb642867c2cc7: pf: avoid NULL deref on purged states.
Feb 25 2026, 1:42 PM

Feb 19 2026

kp committed rG4d0186cd12a7: libpfctl: Sort order of snl attribute parser (authored by eborisch_gmail.com).
Feb 19 2026, 4:01 PM
kp committed rGdc7eb96ba945: pf tests: verify blocked count on log interface.
Feb 19 2026, 4:01 PM

Feb 18 2026

kp committed rGd60082f16e4c: pf: avoid NULL deref on purged states.
Feb 18 2026, 10:27 PM

Feb 17 2026

kp committed rGf3a0e54656cc: pf: fix use of uninitialised variable.
Feb 17 2026, 2:30 PM

Feb 16 2026

kp committed rG281282e9357b: pf: convert DIOCRTSTADDRS to netlink.
Feb 16 2026, 12:47 PM

Feb 12 2026

kp committed rG363b57d579ba: libpfctl: Sort order of snl attribute parser (authored by eborisch_gmail.com).
Feb 12 2026, 9:40 PM
kp committed rGd03b6bb766f8: pf tests: verify blocked count on log interface.
Feb 12 2026, 9:39 PM
kp committed rG1e7665e36860: libpfctl: verify all parsers.
Feb 12 2026, 9:39 PM
kp committed rGff2f3a6cc1b7: pf: fix pcounters array size.
Feb 12 2026, 2:16 PM

Feb 10 2026

kp committed rG950dedcd87af: pf: remove unused variable from pf_test_ctx.
Feb 10 2026, 5:11 PM

Feb 9 2026

kp committed R11:7f4afbdfcf93: net/libpfctl: add 14.4 version.
Feb 9 2026, 5:04 PM

Feb 3 2026

kp committed rGfe9e4eb6f38a: pf: fix use of uninitialised variable.
Feb 3 2026, 10:52 PM

Jan 28 2026

kp committed rG03094f3700be: if_ovpn: add interface counters.
Jan 28 2026, 7:21 PM
kp committed rG1b7a44fbc553: if_ovpn: add interface counters.
Jan 28 2026, 7:21 PM
kp committed rGd2d25d8fde2e: pfctl: allow new page character (^L) in pf.conf.
Jan 28 2026, 7:20 PM
kp committed rG19709a0cd866: pfctl: allow new page character (^L) in pf.conf.
Jan 28 2026, 7:20 PM

Jan 20 2026

kp committed rG2c42d62fd3a1: pf: fix min-ttl and set-tos for nat64.
Jan 20 2026, 9:55 PM

Jan 19 2026

kp committed rG2e0e45a516b9: pfctl(8): change default limiter action from no-match to block.
Jan 19 2026, 10:58 PM

Jan 15 2026

kp committed rG21d666a19331: if_ovpn: add interface counters.
Jan 15 2026, 5:15 PM

Jan 14 2026

kp committed rGfc353e5e61fa: pfctl: allow new page character (^L) in pf.conf.
Jan 14 2026, 11:33 AM
kp added a comment to D54695: pf: tests: Introduce wait_for_process().

I'm not sure this is sufficient. It is still possible for tcpdump to have started, but not gotten to the point of actually opening the pflog device.

Jan 14 2026, 8:22 AM
kp committed rG3a609881c8c8: pf: remove unused function.
Jan 14 2026, 8:07 AM
kp committed rG098febfcc155: pf tests: test block/no-match limiters.
Jan 14 2026, 8:07 AM
kp committed rGe28dfd6b5557: pfctl: make the source limiter output match the input.
Jan 14 2026, 8:07 AM
kp committed rG8716d8c7d97e: pf: configurable action on limiter exceeded.
Jan 14 2026, 8:07 AM
kp committed rG1ee4405a00d7: pf: avoid a shadowed variable in the pf_create_state() source limiter handling.
Jan 14 2026, 8:07 AM
kp committed rG393243a38d74: pfctl: ifa_load() in pfctl_parser.c may attempt to read beyond the buffer..
Jan 14 2026, 8:07 AM
kp committed rG1550fcf802e3: pf.conf.5: s/State Limiter/&s/ in .Ss.
Jan 14 2026, 8:07 AM
kp committed rG7af7d6d61d41: pfctl: distinguish broadcast and PPP peer addresses.
Jan 14 2026, 8:07 AM
kp committed rG95ee802f410f: pf: state/source limiter finishing touches.
Jan 14 2026, 8:07 AM
kp committed rGf2d2d6f010e4: pf: remove redundant range checks.
Jan 14 2026, 8:07 AM
kp committed rG02126f8cb35c: pf.conf.5: spelling.
Jan 14 2026, 8:06 AM
kp committed rGa10e8e78c8d0: pf tests: basic state limiters test case.
Jan 14 2026, 8:06 AM
kp committed rGe3319f91900b: pf tests: extend the source limiter test.
Jan 14 2026, 8:06 AM
kp committed rG086a3cb4b850: pf tests: basic source limiters test case.
Jan 14 2026, 8:06 AM
kp committed rGcb7a5d9401d8: pf tests: state limiter rate test.
Jan 14 2026, 8:06 AM
kp committed rG445a3c86e674: pfctl tests: basic source and state limiter tests.
Jan 14 2026, 8:06 AM
kp committed rG398ca30cb6d6: pfctl.8: mention -k source -k <IP>.
Jan 14 2026, 8:06 AM
kp committed rG63d5d1b0b37e: pfctl: improve limiters printing.
Jan 14 2026, 8:06 AM
kp committed rGaafa123641be: pfctl: resolve '-s' ambiguity.
Jan 14 2026, 8:06 AM
kp committed rGc72fb110e47f: pf: convert state limiter interface to netlink.
Jan 14 2026, 8:06 AM
kp committed rG461648121230: pf: introduce source and state limiters.
Jan 14 2026, 8:06 AM

Jan 10 2026

kp committed rG71f4eb518cd9: pf: don't reject route-to'd too-large packets.
Jan 10 2026, 10:23 AM

Jan 8 2026

kp committed rG0df9054bc116: pf: handle nlattr_add_nested() failure.
Jan 8 2026, 12:28 PM
kp committed rGbf19253516ec: pf: remove redundant zeroing.
Jan 8 2026, 12:28 PM

Jan 6 2026

kp accepted D54549: pf: tests: Require python3.
Jan 6 2026, 10:42 AM

Jan 3 2026

kp added a comment to D54382: MFC sys/netinet6: Implement RFC 7217 (private stable addresses).
In D54382#1242817, @madpilot wrote:

Forgot to add references:

[1] 9e792f7ef7298080c058fbc2d36a4e60e596dae9

Jan 3 2026, 12:04 PM

Jan 2 2026

kp committed rGfb476c703117: pf: sprinkle const over pf_addr_cmp().
Jan 2 2026, 4:19 PM

Dec 30 2025

kp committed rG4fecc8e3fe94: pfctl: remove duplicate "va" entry.
Dec 30 2025, 11:29 PM
kp committed rG2eec2bcca297: pf tests: avoid cleanup failures on skipped tests.
Dec 30 2025, 1:17 PM
kp committed rG96c7e70c18a4: pf: convert DIOCRCLRASTATS to netlink.
Dec 30 2025, 1:17 PM
kp committed rGc2e7a52374b3: pf: move DIOCRCLRASTATS into libpfctl.
Dec 30 2025, 1:17 PM
kp committed rG190c1f3d9326: pfctl: allow network programs select DSCP_VA for network ToS.
Dec 30 2025, 1:17 PM

Dec 29 2025

kp committed rG261642478c8e: pf: handle TTL expired during nat64.
Dec 29 2025, 10:14 AM

Dec 26 2025

kp accepted D54363: kyua: Make "debug -p" skip writing stdout/stderr to tmp files.
Dec 26 2025, 3:08 PM
kp committed rGeaa424e3bde8: snmp_pf: remove errno usage after pfctl_get_status_h change (authored by rootnode_freebsd_wollwage.com).
Dec 26 2025, 12:45 PM
kp committed rG2e7699355f08: pf: don't reject route-to'd too-large packets.
Dec 26 2025, 10:49 AM

Dec 22 2025

kp committed rG4f35a84b3241: atf_python: support setting interface mtu.
Dec 22 2025, 4:29 PM
kp closed D54333: atf_python: support setting interface mtu.
Dec 22 2025, 4:29 PM

Dec 21 2025

kp requested review of D54333: atf_python: support setting interface mtu.
Dec 21 2025, 5:35 PM
kp committed rG622d7fa18d33: pf: fix pcounters array size.
Dec 21 2025, 5:34 PM
kp committed rG823ebd7c4f89: libpfctl: export a get states variant that takes a pfctl_handle.
Dec 21 2025, 5:34 PM

Dec 20 2025

kp accepted D54321: pf: Fix state handling when ICMP packets are diverted.
Dec 20 2025, 3:17 PM

Dec 19 2025

kp accepted D54292: pf: Avoid taking the pf rules write lock in a couple of ioctls.

DIOCGETRULENV takes the write lock as well but I believe this is only
required when clearing rule counters. (It might not be required even
then, on platforms where counter increment is done atomically.) Acquire
the read lock if that is not the case.

Dec 19 2025, 1:18 PM

Dec 18 2025

kp committed rGa862e4b5a27c: snmp_pf: fix refresh.
Dec 18 2025, 1:45 PM
kp committed rGad7f49f98b1a: libpfctl: fix tstats address count.
Dec 18 2025, 1:45 PM

Dec 17 2025

kp committed rG394d701c41ec: if_ovpn: use epoch to free peers.
Dec 17 2025, 10:06 AM
kp committed rGd19083e833d7: if_ovpn: use epoch to free peers.
Dec 17 2025, 10:06 AM

Dec 15 2025

kp added inline comments to D54105: kyua: Add flaky metadata.
Dec 15 2025, 9:19 PM
kp committed rGcdbc9b76ff49: pf: fix min-ttl and set-tos for nat64.
Dec 15 2025, 4:26 PM
kp accepted D54199: pf: Fix the reply command in a couple of places.
Dec 15 2025, 9:47 AM

Dec 13 2025

kp committed rG1dee2336ab44: pfctl: report ICMP states consistently for IPv4/IPv6.
Dec 13 2025, 9:51 PM

Dec 11 2025

kp added a comment to D54175: if_ovpn: fix memory leak in VNET.

I believe that was accidentally broken by 96b29c7f0cffd377a757ad8ccc0cdd8fcb96d0dd, which fixed the issue of jails being unable to go away while they still had ovpn interfaces in them. It fixed that, but also removed the VNET_SYSUNINIT that prevented this leak.

Dec 11 2025, 3:10 PM
kp accepted D54163: pfsync: Avoid zeroing the state export union.
Dec 11 2025, 11:09 AM
kp committed rGac4fb06d096d: pf: handle TTL expired during nat64.
Dec 11 2025, 10:36 AM
kp closed D54166: pf: handle TTL expired during nat64.
Dec 11 2025, 10:36 AM
kp committed rG7b4482f3834a: pf: relax sctp v_tag verification.
Dec 11 2025, 9:27 AM
kp committed rGcc638b24d56a: pf: relax sctp v_tag verification.
Dec 11 2025, 9:27 AM
kp committed rGf629ee03fa78: libpfctl: improve error handling.
Dec 11 2025, 9:26 AM
kp committed rGa717a40f8449: pf: relax sctp v_tag verification.
Dec 11 2025, 9:26 AM