summaryrefslogtreecommitdiff
path: root/sys/net/pf_norm.c
AgeCommit message (Expand)Author
2016-06-15Kill nd6_output(), it doesn't do anything since the resolution logicMartin Pieuchot
2016-06-15There's no need to convert values returned by arc4random to the networkMike Belopuhov
2016-05-31Do not call nd6_output() without route entry argument.Martin Pieuchot
2016-05-28Backout pf.c r1.972, pf_norm.c r1.184, ok claudioStuart Henderson
2016-05-24Do not call nd6_output() without route entry argument.Martin Pieuchot
2015-11-24No need for <net/if_types.h>Martin Pieuchot
2015-09-10Kill two simple in6_ifstat_inc().Martin Pieuchot
2015-08-19PF must keep IPv6 fragment size as chosen by sender also for packets,Alexandr Nedvedicky
2015-07-19unused arguments at pf_normalize_tcp_init() and pf_refragment6()sashan
2015-07-18INET/INET6 address family check should be unified in PFsashan
2015-05-05Eliminate rabid semicolonChris Cappuccio
2015-04-29In most cases, IP fragments do not have an Ethernet padding. SoAlexander Bluhm
2015-04-17On Ethernet packets have a minimal length, so very short packetsAlexander Bluhm
2015-03-14Remove some includes include-what-you-use claims don'tJonathan Gray
2015-02-08pf normalization code was in dire need of style normalization.Henning Brauer
2015-01-24Userland (base & ports) was adapted to always include <netinet/in.h>Theo de Raadt
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-05Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>.Martin Pieuchot
2014-11-18move arc4random prototype to systm.h. more appropriate for most codeTed Unangst
2014-10-10s/lenght/length/ in commentsStuart Henderson
2014-09-08remove uneeded route.h includesJonathan Gray
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-13When reassembled IPv6 fragments are NATed or RDRed by pf, theAlexander Bluhm
2014-03-27When enforcing TOS (Traffic Class), preserve the ECN bits, just as we doJeremie Courreges-Anglas
2014-01-22one more absolutely obvious bcopy -> memcpyHenning Brauer
2013-11-16Remove dead assignments and now unused variables.Charles Longeau
2013-10-17The header file netinet/in_var.h included netinet6/in6_var.h. ThisAlexander Bluhm
2013-10-01Format string fixes: Cast time_t to long longStefan Fritsch
2013-07-23Do not reset the fragment timeout each time a fragment arrives.Alexander Bluhm
2013-06-26put the cksum diff back, of course with the bug fixed where we couldHenning Brauer
2013-06-17Before pulling the TCP options from the mbuf onto the stack, do anAlexander Bluhm
2012-11-06backout csum diff for the moment, requested by theoHenning Brauer
2012-11-01redo most of the protocol (tcp/udp/...) checksum handlingHenning Brauer
2012-10-30Use time_uptime for expiration values as time_second can be skewed atFlorian Obser
2012-05-12Ignore/preserve ECN bits on ToS matching and scrubbing.Marco Pfatschbacher
2012-02-03The kernel did not compile without INET6. Put some #ifdefs intoAlexander Bluhm
2012-01-26Clean up the pf normalization code:Alexander Bluhm
2012-01-23Do not keep state when dropping overlapping IPv6 fragments in pfAlexander Bluhm
2012-01-15Calling pf_normalize_ip() from pf_setup_pdesc() was bad as theAlexander Bluhm
2012-01-13Drop IPv6 packets built from overlapping fragments in pf reassembly.Alexander Bluhm
2012-01-03Instead of having two functions pf_free_fragment() and pf_remove_fragment()Alexander Bluhm
2011-11-25use time_uptime to set state creation values as time_second can beDavid Gwynne
2011-09-28As requested by henning, move the mbuf pointer into struct pf_pdesc.Alexander Bluhm
2011-09-22As I have touched half of pf lines anyway, fix whitespaces now.Alexander Bluhm
2011-09-21Check the protocol header length for tcp, udp, icmp, icmp6 inAlexander Bluhm
2011-09-20Put kif and dir into pdesc an use this instead of passing the valuesAlexander Bluhm
2011-09-19Consolidate pf function parameters. Move off and hdrlen into pdescAlexander Bluhm
2011-09-18Fix various format string types to as a minimum match the width of theMiod Vallat
2011-07-18unbreak set-tos for ipv6; reported by babut at yandex dot ru,Mike Belopuhov
2011-07-07There were two loops in pf_setup_pdesc() and pf_normalize_ip6()Alexander Bluhm