| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2002-06-07 | Move all duplicated enqueueing code into one function, | jasoni | |
| bridge_ifenqueu(). - ok jason@, dhartmei@ | |||
| 2002-05-31 | respect rmx_mtu (cached PMTUD result) on outbound. deraadt/angelos ok | Jun-ichiro itojun Hagino | |
| 2002-05-28 | refragment ip packets if too large for the outgoing interface | jasoni | |
| - ok jason@, dhartmei@ | |||
| 2002-04-08 | Credit DARPA/USAF appropriately. | Jason Wright | |
| 2002-03-18 | filter ipv6 on the bridge. | jasoni | |
| - ok jason@ | |||
| 2002-03-14 | First round of __P removal in sys | Todd C. Miller | |
| 2002-02-14 | If helps to loop over the correct variable *sigh* | Jason Wright | |
| 2002-02-07 | bridge_output() needs a forcibly aligned copy just like bridge_broadcast() | Jason Wright | |
| because of calls it makes to altq; thanks to art for testing and kjc for pointing that I forgot this case. | |||
| 2002-01-02 | Don't forget to deallocate on failure. | Jason Wright | |
| 2002-01-01 | This is ugly: make a specialized deep copy in bridge_broadcast() that | Jason Wright | |
| ensures that the payload after the ethernet header is nicely aligned (basically this is two copies, one for the ethernet header and one for the payload) and glue the two copies together. bridge_filter() assumes it has been handed a nicely aligned packet. This should address pr#2248. | |||
| 2001-12-15 | add support for creating span ports so that one can snoop a bridge | Jason Wright | |
| from another interface/machine/network. | |||
| 2001-12-13 | remove redundant #if NPF. ok jason@ | jasoni | |
| 2001-12-10 | update ip stats when dropping an ip packet | jasoni | |
| ok jason@ | |||
| 2001-12-08 | mflags and len were uninitialized in bridge_broadcast (source of some | Jason Wright | |
| accounting errors me thinks). | |||
| 2001-11-26 | add fastroute options similar to what is found in ipf | jasoni | |
| ok dhartmei@, frantzen@ | |||
| 2001-08-21 | cut/pasto in rule flushing code (using wrong list); base on patch from Henk ↵ | Jason Wright | |
| van Lingen <henk@vanlingen.net> | |||
| 2001-08-12 | now, that kernel compiles, i can go get an ash tray somewhere | Michael Shalayeff | |
| 2001-07-27 | PF_IN/PF_OUT aren't defined if NPF <= 0, deal with it. | Jason Wright | |
| 2001-07-25 | Make sure pkthdr.rcvif is correct before calling pf_test() | Jason Wright | |
| 2001-07-25 | - unconditionalize call to bridge_input() (fewer #ifdef's and NPF>0 is ↵ | Jason Wright | |
| default case anyway). - add support for filtering on interface output (and call pf_test() appropriately) What all this means: nonstateful and stateful PF filtering now works with the bridge. | |||
| 2001-07-17 | split ip normalization out into a separate file, okay dhartmei@ | Niels Provos | |
| 2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos | |
| okay dhartmei@, dugsong@ | |||
| 2001-06-27 | IPFILTER->NPF | Angelos D. Keromytis | |
| 2001-06-27 | introduce the ALTQ queue macros into sys/net files. | Kenjiro Cho | |
| the new model removes direct references to the fields in ifp->if_snd, and defines the following macros to manipulate ifp->if_snd. IFQ_ENQUEUE(ifq, m, pktattr, err) IFQ_DEQUEUE(ifq, m) IFQ_POLL(ifq, m) IFQ_PURGE(ifq) IFQ_IS_EMPTY(ifq) the new model also enforces some rules regarding how to use these macros. details are descrined in http://www.csl.sony.co.jp/~kjc/software/altq-new-design.txt | |||
| 2001-06-26 | no longer pass around **m | Theo de Raadt | |
| 2001-06-25 | PACKETFILTER -> NPF | Kjell Wooding | |
| remove IPF cruft. ok jason | |||
| 2001-06-24 | Use ETHER_IS_MULTICAST macro; jason@ ok. | Federico G. Schwindt | |
| 2001-06-24 | pf mods for bridge; not yet tested | Jason Wright | |
| 2001-06-23 | UDP/IP/TCP packets that hit a bridge and need hardware checksumming | Angelos D. Keromytis | |
| are simply dropped. | |||
| 2001-06-23 | Remember to compute IP/TCP/UDP checksum if we're going to broadcast on | Angelos D. Keromytis | |
| bridge. | |||
| 2001-06-22 | KNF | Theo de Raadt | |
| 2001-06-15 | change the meaning of ifnet.if_lastchange to meet RFC1573 ifLastChange. | Jun-ichiro itojun Hagino | |
| follows BSD/OS practice and ucd-snmp code (FreeBSD does it for specific interfaces only). was: if_lastchange get updated on every packet transmission/receipt. now: if_lastchange get updated when IFF_UP is changed. | |||
| 2001-06-07 | use faster arc4random() instead of get_random_bytes(); jason@ ok | Michael Shalayeff | |
| 2001-06-06 | in bridge_filter(), pullup hlen, not sizeof(struct ip); ok jason@ | jasoni | |
| 2001-06-01 | Don't let packets that need IPsec crypto processing at the NIC be | Angelos D. Keromytis | |
| bridge-broadcast; rather, turn off offloading for now. The IPsec stack will do its own crypto for subsequent packets, which will be broadcast. Once the bridge knows which interface to send packets for that MAC to, if that interface supports IPsec offloading it'll turn it back on. | |||
| 2001-05-30 | Remove ipf. Darren Reed has interpreted his (old, new, whichever) | Theo de Raadt | |
| licence in a way that makes ipf not free according to the rules we established over 5 years ago, at www.openbsd.org/goals.html (and those same basic rules govern the other *BSD projects too). Specifically, Darren says that modified versions are not permitted. But software which OpenBSD uses and redistributes must be free to all (be they people or companies), for any purpose they wish to use it, including modification, use, peeing on, or even integration into baby mulching machines or atomic bombs to be dropped on Australia. Furthermore, we know of a number of companies using ipf with modification like us, who are now in the same situation, and we hope that some of them will work with us to fill this gap that now exists in OpenBSD (temporarily, we hope). | |||
| 2001-05-11 | check for 'fastroute' condition (like ip_input) in bridge_filter() and | Jason Wright | |
| deal with it. | |||
| 2001-03-22 | strlcpy instead of strncpy + \0 | Jason Wright | |
| 2001-03-19 | m_freem not m_free if we're dropping the packet because we're not in | Jason Wright | |
| the forwarding stp state | |||
| 2001-03-06 | Eeep, don't reset the checksum when checking it! Noticed by bugfix@123.net | Angelos D. Keromytis | |
| 2001-03-05 | Clear ip_sum before calculating IP checksum (closes PR 1667) | Angelos D. Keromytis | |
| 2001-02-06 | allow for configuring number of bridge ifaces in ukc; jason@ ok and help | Michael Shalayeff | |
| 2001-02-04 | For unicast packets destined for the bridge machine itself, learn from the | Jason Wright | |
| SRC address (not the DST). | |||
| 2001-02-02 | In the broadcast received on gif case, throw the packet up the stack if | Jason Wright | |
| we -found- an appropriate interface. | |||
| 2001-02-01 | packets received on gif's for local processing can't just fall down the | Jason Wright | |
| stack, they have to be pushed; when calling ether_input(): 1 - unicast packets have the ifp of the matching interface 2 - bcast/mcast packets have the ifp of the first IFT_ETHER bridge member based on discussion with angelos. | |||
| 2001-01-30 | change ip_compat.h to ip_fil_compat.h for clarity. Impending ipf merge | Kjell Wooding | |
| 2001-01-17 | IPF 3.4.15. (IPv6 not working yet). | Federico G. Schwindt | |
| Note: before building the userland part you need to do make includes. | |||
| 2000-12-30 | For bridged IPsec, use the gif* interfaces. | Angelos D. Keromytis | |
| 2000-12-12 | Add support for 802.1D spanning tree protocol. | Jason Wright | |
| NOTE: this requires recompiling brconfig with updated include files. | |||
| 2000-11-10 | it doesn't matter what kind of interface it is if the bridge_iflist allocation | Jason Wright | |
| fails.. it's still ENOMEM. | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |