| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2001-08-21 | cut/pasto in rule flushing code (using wrong list); base on patch from Henk ↵ | Jason Wright | |
| van Lingen <henk@vanlingen.net> | |||
| 2001-08-12 | now, that kernel compiles, i can go get an ash tray somewhere | Michael Shalayeff | |
| 2001-07-27 | PF_IN/PF_OUT aren't defined if NPF <= 0, deal with it. | Jason Wright | |
| 2001-07-25 | Make sure pkthdr.rcvif is correct before calling pf_test() | Jason Wright | |
| 2001-07-25 | - unconditionalize call to bridge_input() (fewer #ifdef's and NPF>0 is ↵ | Jason Wright | |
| default case anyway). - add support for filtering on interface output (and call pf_test() appropriately) What all this means: nonstateful and stateful PF filtering now works with the bridge. | |||
| 2001-07-17 | split ip normalization out into a separate file, okay dhartmei@ | Niels Provos | |
| 2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos | |
| okay dhartmei@, dugsong@ | |||
| 2001-06-27 | IPFILTER->NPF | Angelos D. Keromytis | |
| 2001-06-27 | introduce the ALTQ queue macros into sys/net files. | Kenjiro Cho | |
| the new model removes direct references to the fields in ifp->if_snd, and defines the following macros to manipulate ifp->if_snd. IFQ_ENQUEUE(ifq, m, pktattr, err) IFQ_DEQUEUE(ifq, m) IFQ_POLL(ifq, m) IFQ_PURGE(ifq) IFQ_IS_EMPTY(ifq) the new model also enforces some rules regarding how to use these macros. details are descrined in http://www.csl.sony.co.jp/~kjc/software/altq-new-design.txt | |||
| 2001-06-26 | no longer pass around **m | Theo de Raadt | |
| 2001-06-25 | PACKETFILTER -> NPF | Kjell Wooding | |
| remove IPF cruft. ok jason | |||
| 2001-06-24 | Use ETHER_IS_MULTICAST macro; jason@ ok. | Federico G. Schwindt | |
| 2001-06-24 | pf mods for bridge; not yet tested | Jason Wright | |
| 2001-06-23 | UDP/IP/TCP packets that hit a bridge and need hardware checksumming | Angelos D. Keromytis | |
| are simply dropped. | |||
| 2001-06-23 | Remember to compute IP/TCP/UDP checksum if we're going to broadcast on | Angelos D. Keromytis | |
| bridge. | |||
| 2001-06-22 | KNF | Theo de Raadt | |
| 2001-06-15 | change the meaning of ifnet.if_lastchange to meet RFC1573 ifLastChange. | Jun-ichiro itojun Hagino | |
| follows BSD/OS practice and ucd-snmp code (FreeBSD does it for specific interfaces only). was: if_lastchange get updated on every packet transmission/receipt. now: if_lastchange get updated when IFF_UP is changed. | |||
| 2001-06-07 | use faster arc4random() instead of get_random_bytes(); jason@ ok | Michael Shalayeff | |
| 2001-06-06 | in bridge_filter(), pullup hlen, not sizeof(struct ip); ok jason@ | jasoni | |
| 2001-06-01 | Don't let packets that need IPsec crypto processing at the NIC be | Angelos D. Keromytis | |
| bridge-broadcast; rather, turn off offloading for now. The IPsec stack will do its own crypto for subsequent packets, which will be broadcast. Once the bridge knows which interface to send packets for that MAC to, if that interface supports IPsec offloading it'll turn it back on. | |||
| 2001-05-30 | Remove ipf. Darren Reed has interpreted his (old, new, whichever) | Theo de Raadt | |
| licence in a way that makes ipf not free according to the rules we established over 5 years ago, at www.openbsd.org/goals.html (and those same basic rules govern the other *BSD projects too). Specifically, Darren says that modified versions are not permitted. But software which OpenBSD uses and redistributes must be free to all (be they people or companies), for any purpose they wish to use it, including modification, use, peeing on, or even integration into baby mulching machines or atomic bombs to be dropped on Australia. Furthermore, we know of a number of companies using ipf with modification like us, who are now in the same situation, and we hope that some of them will work with us to fill this gap that now exists in OpenBSD (temporarily, we hope). | |||
| 2001-05-11 | check for 'fastroute' condition (like ip_input) in bridge_filter() and | Jason Wright | |
| deal with it. | |||
| 2001-03-22 | strlcpy instead of strncpy + \0 | Jason Wright | |
| 2001-03-19 | m_freem not m_free if we're dropping the packet because we're not in | Jason Wright | |
| the forwarding stp state | |||
| 2001-03-06 | Eeep, don't reset the checksum when checking it! Noticed by bugfix@123.net | Angelos D. Keromytis | |
| 2001-03-05 | Clear ip_sum before calculating IP checksum (closes PR 1667) | Angelos D. Keromytis | |
| 2001-02-06 | allow for configuring number of bridge ifaces in ukc; jason@ ok and help | Michael Shalayeff | |
| 2001-02-04 | For unicast packets destined for the bridge machine itself, learn from the | Jason Wright | |
| SRC address (not the DST). | |||
| 2001-02-02 | In the broadcast received on gif case, throw the packet up the stack if | Jason Wright | |
| we -found- an appropriate interface. | |||
| 2001-02-01 | packets received on gif's for local processing can't just fall down the | Jason Wright | |
| stack, they have to be pushed; when calling ether_input(): 1 - unicast packets have the ifp of the matching interface 2 - bcast/mcast packets have the ifp of the first IFT_ETHER bridge member based on discussion with angelos. | |||
| 2001-01-30 | change ip_compat.h to ip_fil_compat.h for clarity. Impending ipf merge | Kjell Wooding | |
| 2001-01-17 | IPF 3.4.15. (IPv6 not working yet). | Federico G. Schwindt | |
| Note: before building the userland part you need to do make includes. | |||
| 2000-12-30 | For bridged IPsec, use the gif* interfaces. | Angelos D. Keromytis | |
| 2000-12-12 | Add support for 802.1D spanning tree protocol. | Jason Wright | |
| NOTE: this requires recompiling brconfig with updated include files. | |||
| 2000-11-10 | it doesn't matter what kind of interface it is if the bridge_iflist allocation | Jason Wright | |
| fails.. it's still ENOMEM. | |||
| 2000-11-07 | - Since the actual frame processing takes place from softnet(), splhigh | Jason Wright | |
| is not needed (the only other two places that modify the state of the bridge are bridge_ioctl() and bridge_rtage(), both of which can easily be wrapped in splsoftnet). - compute a random hashkey each time the bridge is brought up | |||
| 2000-11-06 | use the macros from queue.h more consistently | Jason Wright | |
| update if_omcasts and call IF_DROP when necessary | |||
| 2000-10-18 | use IFT_BRIDGE | Jason Wright | |
| correctly update member interface obytes+lastchange; patch from camield@ | |||
| 2000-10-18 | revamped llc handling using if_llc.h | Jason Wright | |
| removed unused structure | |||
| 2000-10-18 | get the bounds checking right for the data used in copyout() in several | Jason Wright | |
| ioctl calls. | |||
| 2000-10-09 | uninitialized variable; spotted by Andrew Lunn <andrew.lunn@ascom.ch> | Jason Wright | |
| 2000-06-26 | timeout is in seconds, not ticks. | Artur Grabowski | |
| 2000-06-22 | Convert to new timeouts. | Artur Grabowski | |
| 2000-06-20 | knf | Jason Wright | |
| 2000-06-16 | use memcmp() instead of bcmp(), memcmp is <,=,> but bcmp is =,!= | Theo de Raadt | |
| 2000-06-02 | On input if the packet matches one of the member interface MAC addresses, | Jason Wright | |
| set the receiving interface to be that interface for further processing; thanks to dorcula@uncool.org for reporting and testing. | |||
| 2000-05-25 | on packets incoming to the bridge machine itself, respect the | Jason Wright | |
| LEARNING flag on the receiving interface (ie. don't learn when you're not supposed to). | |||
| 2000-04-10 | don't return directly from bridge_ioctl without splx() on invalid enc | Jason Wright | |
| interfaces; modified version of patch from Armin Wolfermann <armin@wolfermann.org>. | |||
| 2000-02-28 | remove unneeded variable and clean | Jason Wright | |
| 2000-02-21 | Rework bridge_filter() so that it does not require a full packet copy | Jason Wright | |
| Allow for reusing the current mbuf (rather than a copy) for the last interface in the list in bridge_output(). Replace some pointer derefs with on the stack copies of the data. | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |