Page MenuHomeFreeBSD

kp (Kristof Provost)
Troubleshooter

Projects (6)

User Details

User Since
Sep 28 2014, 7:22 PM (605 w, 4 d)

Recent Activity

Yesterday

kp committed rG726ff260ecfa: pfctl: optionally print the rule in the state overview.
Thu, May 7, 4:24 PM
kp committed rG4e7c1ff95a51: pfctl: relax interface name requirement.
Thu, May 7, 4:24 PM

Tue, May 5

kp committed rGc24b1d9359b8: pfctl: handle errors from PFNL_CMD_GETSTATES.
Tue, May 5, 9:26 PM
kp committed rGa0e4c65f1814: pf: do not reject rules with colliding hashes.
Tue, May 5, 9:26 PM
kp committed rG730fb48f1387: pf: improve ASCONF chunk validation.
Tue, May 5, 4:26 PM
kp committed rG9fe189c79a81: pf: improve ASCONF chunk validation.
Tue, May 5, 4:26 PM
kp committed rGbf6d00afdb61: pfsync: reject invalid SCTP states.
Tue, May 5, 8:35 AM

Fri, May 1

kp committed R11:a1f2cc4491c3: net/libpfctl: add 15.1, remove 13.5.
Fri, May 1, 9:12 PM

Wed, Apr 29

kp committed rGbf1529d83918: netlink: fix LINT-NOVIMAGE build.
Wed, Apr 29, 7:58 AM

Tue, Apr 28

kp committed rGff141ea17cb7: pf: do not allow flags to be changed with securelevel set.
Tue, Apr 28, 4:05 PM
kp committed rGafbda5806304: pf: do not allow flags to be changed with securelevel set.
Tue, Apr 28, 4:05 PM
kp committed rGbea1c2fcd783: pf: improve ASCONF chunk validation.
Tue, Apr 28, 1:31 PM

Sun, Apr 26

kp committed rG4fc1503f8617: pf: fix duplicate rule detection for automatic tables.
Sun, Apr 26, 10:12 AM
kp committed rGfdcc60f52841: pf: fix duplicate rule detection for automatic tables.
Sun, Apr 26, 10:12 AM

Sat, Apr 25

kp committed rG4001613878fe: pfsync: rename unused variable.
Sat, Apr 25, 12:48 PM

Thu, Apr 23

kp committed rGfb8383527517: pf: fix duplicate rule detection for automatic tables.
Thu, Apr 23, 11:47 AM
kp committed rG3103d39cd99f: netlink: fix LINT-NOVIMAGE build.
Thu, Apr 23, 7:38 AM

Tue, Apr 21

kp committed rGd5ca00f2d874: pf: do not allow flags to be changed with securelevel set.
Tue, Apr 21, 11:33 AM
kp committed rG07a3501e6c85: loopback: fix use-after-free.
Tue, Apr 21, 11:33 AM

Mon, Apr 20

kp committed rG18de44e7b442: pfctl: fix man page and error message for -S option (authored by ross_ross-williams.net).
Mon, Apr 20, 2:25 PM
kp committed rG19eecf94fa16: pfctl: clarify usage of load option flags (authored by ross_ross-williams.net).
Mon, Apr 20, 2:25 PM
kp committed rGff76ec3e9b28: pf: be more robust against interface name conflicts.
Mon, Apr 20, 2:24 PM

Fri, Apr 17

kp committed rG05ac1013984c: pf: fix error handling in pf_sourcelim_add().
Fri, Apr 17, 11:56 AM
kp committed rG5b7192230a15: pf: pf_frag_compare() should not be using subtraction to compare fragment IDs.
Fri, Apr 17, 11:56 AM
kp committed rG3c9cd6e4dc59: pf: use correct address family in pfr_pool_get().
Fri, Apr 17, 11:56 AM
kp committed rG13b4a14c719a: libpfctl: fix add state/source limiter.
Fri, Apr 17, 11:56 AM
kp committed rG6f8ea66cbcf2: pfctl: fix how source and state limiters are wired into rbtrees.
Fri, Apr 17, 11:56 AM
kp committed rG95fe1ba5579d: pf tests: test having multiple state limiters.
Fri, Apr 17, 11:56 AM

Apr 7 2026

kp committed rG6642ba36f186: pf tests: explicitly test zeroing counters within an anchor.
Apr 7 2026, 3:26 PM

Apr 3 2026

kp committed rG8ef0093f297a: truss: add support for decoding Netlink messages (authored by Ishan Agrawal <iagrawal9990@gmail.com>).
Apr 3 2026, 6:55 AM

Mar 30 2026

kp committed rG5b8ab97b3e4a: pfctl: parser must not ignore error from pfctl_optimize_ruleset().
Mar 30 2026, 3:09 PM
kp committed rGc5e1dde24dac: pfctl: parser must not ignore error from pfctl_optimize_ruleset().
Mar 30 2026, 3:09 PM

Mar 25 2026

kp committed rGac6bb58a715e: pf: Fix hashing of IP address ranges (authored by grembo).
Mar 25 2026, 10:54 AM
kp committed rGe3b801edded9: pf: include all elements when hashing rules.
Mar 25 2026, 10:54 AM
kp committed rG958dbc87e9c5: pf tests: verify that we handle address range rules correctly.
Mar 25 2026, 10:54 AM
kp committed rG38f8ac568273: pf: Fix hashing of IP address ranges (authored by grembo).
Mar 25 2026, 10:54 AM
kp committed rGe79818ec36ef: pfctl: always warn if a duplicate rule was detected.
Mar 25 2026, 10:54 AM
kp committed rGd107424a44b3: pf: Fix hashing of IP address ranges (authored by grembo).
Mar 25 2026, 10:54 AM
kp committed rGe224b9b867f4: pfctl: always warn if a duplicate rule was detected.
Mar 25 2026, 10:54 AM
kp committed rG4311217a039c: pf: include all elements when hashing rules.
Mar 25 2026, 10:54 AM
kp committed rG6666b2a0e7c2: pf tests: verify that we handle address range rules correctly.
Mar 25 2026, 10:54 AM
kp committed rG4e007734ff8e: pf tests: verify that we handle address range rules correctly.
Mar 25 2026, 10:54 AM
kp committed rG536751cb4e15: pf: include all elements when hashing rules.
Mar 25 2026, 10:54 AM

Mar 24 2026

kp committed rG1fa873c93c8b: pf: Fix hashing of IP address ranges (authored by grembo).
Mar 24 2026, 6:05 AM
kp committed rG66d66dd0f6f8: pfctl: always warn if a duplicate rule was detected.
Mar 24 2026, 6:05 AM
kp committed rGc6bcf6e6fd50: pf: include all elements when hashing rules.
Mar 24 2026, 6:05 AM
kp committed rGab74151e8d09: pf tests: verify that we handle address range rules correctly.
Mar 24 2026, 6:05 AM

Mar 22 2026

kp committed rG434e1c3d8413: pfctl tests: test rdr-to and nat-to in one rule.
Mar 22 2026, 7:24 AM
kp committed rG0b0d34fd2f40: pf tests: verify first-match-wins for nat rules.
Mar 22 2026, 6:03 AM
kp committed rG343ace42f82a: pfctl: parser must not ignore error from pfctl_optimize_ruleset().
Mar 22 2026, 6:03 AM

Mar 12 2026

kp committed R11:d4dad47577db: net/libpfctl: add 14.4 version.
Mar 12 2026, 10:40 AM

Feb 25 2026

kp committed rGb642867c2cc7: pf: avoid NULL deref on purged states.
Feb 25 2026, 1:42 PM

Feb 19 2026

kp committed rG4d0186cd12a7: libpfctl: Sort order of snl attribute parser (authored by eborisch_gmail.com).
Feb 19 2026, 4:01 PM
kp committed rGdc7eb96ba945: pf tests: verify blocked count on log interface.
Feb 19 2026, 4:01 PM

Feb 18 2026

kp committed rGd60082f16e4c: pf: avoid NULL deref on purged states.
Feb 18 2026, 10:27 PM

Feb 17 2026

kp committed rGf3a0e54656cc: pf: fix use of uninitialised variable.
Feb 17 2026, 2:30 PM

Feb 16 2026

kp committed rG281282e9357b: pf: convert DIOCRTSTADDRS to netlink.
Feb 16 2026, 12:47 PM

Feb 12 2026

kp committed rG363b57d579ba: libpfctl: Sort order of snl attribute parser (authored by eborisch_gmail.com).
Feb 12 2026, 9:40 PM
kp committed rGd03b6bb766f8: pf tests: verify blocked count on log interface.
Feb 12 2026, 9:39 PM
kp committed rG1e7665e36860: libpfctl: verify all parsers.
Feb 12 2026, 9:39 PM
kp committed rGff2f3a6cc1b7: pf: fix pcounters array size.
Feb 12 2026, 2:16 PM

Feb 10 2026

kp committed rG950dedcd87af: pf: remove unused variable from pf_test_ctx.
Feb 10 2026, 5:11 PM

Feb 9 2026

kp committed R11:7f4afbdfcf93: net/libpfctl: add 14.4 version.
Feb 9 2026, 5:04 PM

Feb 3 2026

kp committed rGfe9e4eb6f38a: pf: fix use of uninitialised variable.
Feb 3 2026, 10:52 PM

Jan 28 2026

kp committed rG03094f3700be: if_ovpn: add interface counters.
Jan 28 2026, 7:21 PM
kp committed rG1b7a44fbc553: if_ovpn: add interface counters.
Jan 28 2026, 7:21 PM
kp committed rGd2d25d8fde2e: pfctl: allow new page character (^L) in pf.conf.
Jan 28 2026, 7:20 PM
kp committed rG19709a0cd866: pfctl: allow new page character (^L) in pf.conf.
Jan 28 2026, 7:20 PM

Jan 20 2026

kp committed rG2c42d62fd3a1: pf: fix min-ttl and set-tos for nat64.
Jan 20 2026, 9:55 PM

Jan 19 2026

kp committed rG2e0e45a516b9: pfctl(8): change default limiter action from no-match to block.
Jan 19 2026, 10:58 PM

Jan 15 2026

kp committed rG21d666a19331: if_ovpn: add interface counters.
Jan 15 2026, 5:15 PM

Jan 14 2026

kp committed rGfc353e5e61fa: pfctl: allow new page character (^L) in pf.conf.
Jan 14 2026, 11:33 AM
kp added a comment to D54695: pf: tests: Introduce wait_for_process().

I'm not sure this is sufficient. It is still possible for tcpdump to have started, but not gotten to the point of actually opening the pflog device.

Jan 14 2026, 8:22 AM
kp committed rG3a609881c8c8: pf: remove unused function.
Jan 14 2026, 8:07 AM
kp committed rG098febfcc155: pf tests: test block/no-match limiters.
Jan 14 2026, 8:07 AM
kp committed rGe28dfd6b5557: pfctl: make the source limiter output match the input.
Jan 14 2026, 8:07 AM
kp committed rG8716d8c7d97e: pf: configurable action on limiter exceeded.
Jan 14 2026, 8:07 AM
kp committed rG1ee4405a00d7: pf: avoid a shadowed variable in the pf_create_state() source limiter handling.
Jan 14 2026, 8:07 AM
kp committed rG393243a38d74: pfctl: ifa_load() in pfctl_parser.c may attempt to read beyond the buffer..
Jan 14 2026, 8:07 AM
kp committed rG1550fcf802e3: pf.conf.5: s/State Limiter/&s/ in .Ss.
Jan 14 2026, 8:07 AM
kp committed rG7af7d6d61d41: pfctl: distinguish broadcast and PPP peer addresses.
Jan 14 2026, 8:07 AM
kp committed rG95ee802f410f: pf: state/source limiter finishing touches.
Jan 14 2026, 8:07 AM
kp committed rGf2d2d6f010e4: pf: remove redundant range checks.
Jan 14 2026, 8:07 AM
kp committed rG02126f8cb35c: pf.conf.5: spelling.
Jan 14 2026, 8:06 AM
kp committed rGa10e8e78c8d0: pf tests: basic state limiters test case.
Jan 14 2026, 8:06 AM
kp committed rGe3319f91900b: pf tests: extend the source limiter test.
Jan 14 2026, 8:06 AM
kp committed rG086a3cb4b850: pf tests: basic source limiters test case.
Jan 14 2026, 8:06 AM
kp committed rGcb7a5d9401d8: pf tests: state limiter rate test.
Jan 14 2026, 8:06 AM
kp committed rG445a3c86e674: pfctl tests: basic source and state limiter tests.
Jan 14 2026, 8:06 AM
kp committed rG398ca30cb6d6: pfctl.8: mention -k source -k <IP>.
Jan 14 2026, 8:06 AM
kp committed rG63d5d1b0b37e: pfctl: improve limiters printing.
Jan 14 2026, 8:06 AM
kp committed rGaafa123641be: pfctl: resolve '-s' ambiguity.
Jan 14 2026, 8:06 AM
kp committed rGc72fb110e47f: pf: convert state limiter interface to netlink.
Jan 14 2026, 8:06 AM
kp committed rG461648121230: pf: introduce source and state limiters.
Jan 14 2026, 8:06 AM

Jan 10 2026

kp committed rG71f4eb518cd9: pf: don't reject route-to'd too-large packets.
Jan 10 2026, 10:23 AM

Jan 8 2026

kp committed rG0df9054bc116: pf: handle nlattr_add_nested() failure.
Jan 8 2026, 12:28 PM
kp committed rGbf19253516ec: pf: remove redundant zeroing.
Jan 8 2026, 12:28 PM

Jan 6 2026

kp accepted D54549: pf: tests: Require python3.
Jan 6 2026, 10:42 AM

Jan 3 2026

kp added a comment to D54382: MFC sys/netinet6: Implement RFC 7217 (private stable addresses).

Forgot to add references:

[1] 9e792f7ef7298080c058fbc2d36a4e60e596dae9

Jan 3 2026, 12:04 PM

Jan 2 2026

kp committed rGfb476c703117: pf: sprinkle const over pf_addr_cmp().
Jan 2 2026, 4:19 PM