summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2003-12-15Add initial support for pf state synchronization over the network.Ryan Thomas McBride
Implemented as an in-kernel multicast IP protocol. Turn it on like this: # ifconfig pfsync0 up syncif fxp0 There is not yet any authentication on this protocol, so the syncif must be on a trusted network. ie, a crossover cable between the two firewalls. NOTABLE CHANGES: - A new index based on a unique (creatorid, stateid) tuple has been added to the state tree. - Updates now appear on the pfsync(4) interface; multiple updates may be compressed into a single update. - Applications which use bpf on pfsync(4) will need modification; packets on pfsync no longer contains regular pf_state structs, but pfsync_state structs which contain no pointers. Much more to come. ok deraadt@
2003-12-15syncTheo de Raadt
2003-12-15Regression test for PR 2450.Otto Moerbeek
2003-12-15Unbreak parameter assignment when calling bourne style functions;Otto Moerbeek
resolves PR 2450. ok deraadt@ millert@
2003-12-15- end sentence with full stop, not commaJason McIntyre
- kill whitespace at EOL
2003-12-15- kill whitespace at EOLJason McIntyre
- new sentence, new line - kill blank line - missing .El - missing escape - ip -> IP - greate -> create
2003-12-15syncTheo de Raadt
2003-12-15shorten names a lotTheo de Raadt
2003-12-15Add support to track stateful connections by source ip. This allows usRyan Thomas McBride
to: - Ensure that clients get a consistent IP mapping with load-balanced translation/routing rules - Limit the number of simultaneous connections a client can make - Limit the number of clients which can connect through a rule ok dhartmei@ deraadt@
2003-12-15shorter function namesVincent Labrecque
2003-12-14the extended long (bracketed) cpu names are not useful to anyone -- they areTheo de Raadt
just trivia -- and they bloat the ramdisk kernels by a fair bit. remove them.
2003-12-14Replace pmap_testbit/pmap_changebit sequences with a tailor-made pmap_unsetbitMiod Vallat
routine, in order to speed up pmap_clear_modify() and pmap_clear_reference().
2003-12-14Remove unnecessary trunc_page() calls, and change pmap_enter() logic toMiod Vallat
match m68k.
2003-12-14similar changes to the rest of the radio pages:Jason McIntyre
- kill comma splices - escape dashes - s/tunning/tuning - some wording improvement
2003-12-14capability is RADIO_CARD_TYPE, not RADIO_CAPS_CARD_TYPE;Jason McIntyre
make the order more closely match the header; escape some dashes;
2003-12-14typo from Brian Chase, plus kill a comma splice;Jason McIntyre
2003-12-14In pmap_testbit, always update the attribute flags for the pv list hander.Miod Vallat
Fixes a regression introduced in the conversion from physseg to VM_PAGE_MD.
2003-12-14install awk USD;Jason McIntyre
i have replaced the out of date refer(1) stuff with man page references, and updated the doc slightly to sync with current awk; ok mickey@
2003-12-14Log the actual port for src and dst, don't assume it's always 500.Hakan Olsson
2003-12-14Make isakmpd work on big endian linux machines. From Sebastian Klemke.Hakan Olsson
Also, a few style nits and a better error message text.
2003-12-14we don't support GSS KEX; from Simon WilkinsonMarkus Friedl
2003-12-14alignment fixes (e.g sparc 64); from Daniel Lucq; ok millert, henningMarkus Friedl
2003-12-14Don't go into kerberosV/lib explicitely for now. Nothing to do there.Matthieu Herrb
Ok deraadt@, miod@.
2003-12-13sort options, and adjust -width of options' list;Jason McIntyre
2003-12-13sort options and typos for openssl {dsa,dsaparam};Jason McIntyre
2003-12-13initial support ifconfig destroy; ok deraadt@Markus Friedl
2003-12-12syncTheo de Raadt
2003-12-127954 will be a speed-bin 7955Theo de Raadt
2003-12-12another small compiler warning cleanup (#error instead of bailing out)Hans-Joerg Hoexer
ok henning@
2003-12-12typo; ok jmc@Christian Weisgerber
2003-12-12Provide a better delay() resolution on 188.Miod Vallat
2003-12-12Move PF interface code to new net/pf_if.cCedric Berger
Expect improvements in this area soon. ok dhartmei@ mcbride@
2003-12-12- update SYNOPSISJason McIntyre
- standard options list - document -V and -d[n] - -mr and -mf no longer supported - some formatting issues - descriptions of examples before examples and indent examples - update SEE ALSO ok millert@
2003-12-12knfTheo de Raadt
2003-12-12typoTheo de Raadt
2003-12-12Document RLIM_SAVED_CUR and RLIM_SAVED_MAX; jmc@ OKTodd C. Miller
2003-12-12Add a check for absolute pathnames; from cvs 1.11.10; deraadt@ OKTodd C. Miller
2003-12-12Support for 2 new acard ata133 chips.Alexander Yurchenko
2003-12-12nforce chip doesn't have cable check bit; noticed by hugh@ a longAlexander Yurchenko
time ago.
2003-12-12small compiler warning cleanup (#error instead of bailing out)Hans-Joerg Hoexer
ok henning@ grange@
2003-12-12initialze -> initializes; from Eric Borsboom;Jason McIntyre
2003-12-12Update, mostly from FreeBSD:Otto Moerbeek
o Realloc cleanup. o Some long vs int cleanup. o Implement the Posix defined 0 as -o field value, meaning the join field. o Allow both -a 1 and -a1, and warn if the backward compatibility "-a without a number" is used. ok millert@ deraadt@
2003-12-12sync with <sys/mbuf.h>, as pointed out by Dragos Ruiu;Jason McIntyre
ok deraadt@ itojun@
2003-12-12missing parameter to printf; erick@bonzai.space-ei.nlTheo de Raadt
2003-12-12niels kindly dropped clause 3/4 from the license. tnx!Jun-ichiro itojun Hagino
2003-12-12term 3 cleanup, ok from brezakTheo de Raadt
2003-12-12we can skip arc4random() call here. markusJun-ichiro itojun Hagino
2003-12-12previous commit included bad hunk. sorryJun-ichiro itojun Hagino
2003-12-12Remove unused and incorrect generic interface ioctl defines SIOCSIFGENERICRyan Thomas McBride
and SIOCGIFGENERIC. ok mickey@
2003-12-12reomve some junkTheo de Raadt