BSD Commit Log Search

   use pf_states to link mbufs/inpcbs and forwarded connections together

   this replaces the links between pf_state_keys and mbufs/inpcbs.

   pf_states represent the actual connection tracked by pf, while
   pf_state_keys are more general since they only contain the network
   addresses. the fact that pf_state_keys exist is an implementation
   detail in pf rather than a fundamentally useful artifact to the
   rest of the system. the preference would have been to link things
   to pf_states rather than pf_state_keys in the first place, but there
   wasn't enough machinery (eg, refcounts and immutable links to
   pf_state_keys) on pf_states to link to them directly. this means
   pf still had to iterate over the states hanging off the pf_state_keys
   to get to the actual pf_state it needed anyway.

   discussed with henning@
   ok sashan@ jmatthew@

   avoid work in pf_state_insert if pf_state_key_unref didnt swap keys.

   ok sashan@ jmatthew@

   Update to tailscale-1.92.5

   From Adriano Barbosa (maintainer)

   have state and source limiter state cleanup assert on the right lock.

   state and source limiters and they pf state links they're wired up
   with are protected by the pf lock, not the pf state lock. this is
   asserted correctly when setting up source and state limiters, but
   i copy and pasted the wrong assert for the cleanup code.

   this should fix the spurious "splassert: pf_create_state: want 1 have 0"
   messages i get on my firewalls.

   In semctl(2), set pointers to NULL after free().  Avoids false positive
   warnings with a simple use-after-free checker.

   ok bluhm@

   devel/sbt: update to 1.12.1

   hook up openvox-server

   Initial revision

   mention databases/openvoxdb as _puppetdb user

   suggested by kn@

   hook up openvoxdb

   import OpenVoxDB

   OpenVoxDB is a fork of Open Source PuppetDB.

   OpenVoxDB is the fast, scalable, and reliable data warehouse for OpenVox.
   It caches data generated by OpenVox, and gives you advanced features at
   awesome speed with a powerful API.

   lots of valuable feedback and final OK kn@

   hook up ruby-openvoxserver-ca

   import ruby-openvoxserver-ca

   This gem provides the functionality behind the OpenVox Server CA
   interactions. The actual CLI executable lives within the OpenVox Server
   project.

   feedback and OK kn@

   fix string in IKE decode; it's ecp521, not ecp512
   ok tb@ dlg@

   mention MODPY_BUILD_DIR

   update to notmuch-0.40
   install python bindings

   add MODPY_BUILD_DIR, allowing running pybuild steps in a dir other than
   WRKSRC, mostly useful when building/installing some python component that
   doesn't build (or doesn't build properly) as part of the main build

   update to fetchmail-6.6.2

   update to zonemaster-8.0.1

   Update Spleen kernel fonts to version 2.2.0, bringing the following
   improvements:

   - Fix less-than sign alignment in the 12x24 version
   - Fix right curly bracket alignment in the 12x24 version
   - Fix right parenthesis alignment in the 32x64 version

   Add man pages for the low-level FUSE API.

   OK schwarze@

   bump dependent ports after libobjc2 update, while there, straighten
   some WANTLIB as well

   update to 2.3

   this allows to build the blocks runtime against libdispatch, and with that,
   it's possible to finally use GCD.

   while there, add test target.

   update to gnuwatch-4.0.6

   misc/llama.cpp: update to b7883

   OK: volker@

   devel/libggml: update to 20260130

   OK: volker@

   net/ejabberd: update to 26.01

   Changes: https://www.process-one.net/blog/ejabberd-26-01/

   OK: volker@

   erlang.port.mk: support not published on hex.pm dependency

   Notable example is following update of net/ejabberd which uses forgotten
   to publish erlydtl from github.

   OK: volker@

   Update spleen to 2.2.0.

   Update dbip to 2026.02.