summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2001-08-19Add new ioctls for adding/removing RDR and NAT rules to/from the activeDaniel Hartmeier
2001-08-19Quick optimization of pf_tree_key_compare (should half the instruction count)Mike Frantzen
2001-08-19Make more money for mickey (count entire IP packets for statistics, not justDaniel Hartmeier
2001-08-19Yet another batch of improvements and un-fuckups to the TCP state code.Mike Frantzen
2001-08-19Add per-rule byte counter, so mickey can do accounting. We're counting theDaniel Hartmeier
2001-08-19Add per-rule statistics (number of evaluations and number of packets).Daniel Hartmeier
2001-08-19Unfuck some TCP state stuff that would drop the SYN|ACK.Mike Frantzen
2001-08-19compile w/out INETJason Wright
2001-08-19Loosened TCP state code which should allow stupid stacks to shotgun theirMike Frantzen
2001-08-18Add new ioctl for adding/removing individual rules to/from the active rule set.Daniel Hartmeier
2001-08-18make pfctl -s state SCREAM; frantzen is now happyTheo de Raadt
2001-08-12now, that kernel compiles, i can go get an ash tray somewhereMichael Shalayeff
2001-08-11Add support for ICMP errors referring to ICMP queries/replies. FixesDaniel Hartmeier
2001-08-05Actually, move the check inside the switch.Angelos D. Keromytis
2001-08-05Only flush the policies if the message type is UNSPEC.Angelos D. Keromytis
2001-08-03Use IFCAP_VLAN_MTU and IFCAP_VLAN_HWTAGGING capabilities:Chris Cappuccio
2001-08-03simplify previous fix (0-length mbuf in mbuf chain). from freebsdJun-ichiro itojun Hagino
2001-08-02do not exit loop even if m_len == 0. it is legal to have an mbuf withJun-ichiro itojun Hagino
2001-08-02KNFTheo de Raadt
2001-08-01stateless tcp normalization along the lines of the normalization paper byNiels Provos
2001-07-30never before has a file so often deviated from KNFTheo de Raadt
2001-07-30use queue.h macrosJason Wright
2001-07-29Implement rule skipping. This is a transparent evaluation optimization,Daniel Hartmeier
2001-07-27PF_IN/PF_OUT aren't defined if NPF <= 0, deal with it.Jason Wright
2001-07-27variable name "gif" is way too generic - use "gif_softc". sync with kameJun-ichiro itojun Hagino
2001-07-25nat proxy port randomization by ben fleis.Daniel Hartmeier
2001-07-25Make sure pkthdr.rcvif is correct before calling pf_test()Jason Wright
2001-07-25- unconditionalize call to bridge_input() (fewer #ifdef's and NPF>0 is defaul...Jason Wright
2001-07-25Initialization of arpcom * based on ifp was too soon: ifp can change asJason Wright
2001-07-21print additional debugging information for 'insert invalid' messages. occurs ...Daniel Hartmeier
2001-07-21missing \n in a log() callJun-ichiro itojun Hagino
2001-07-21repair validation on RTAX_GENMASK insertion. has been broken since 44bsd.Jun-ichiro itojun Hagino
2001-07-20use a variable, not it's default value from constantMichael Shalayeff
2001-07-20make equal() macro to check sa_len match, otherwise we will touchJun-ichiro itojun Hagino
2001-07-19Fix/complete the handling of the binary ops >< and <> to behaveKenneth R Westerback
2001-07-18fix pf_get_rdr() for single port (dport2 == 0) rules. found by lebel@.Daniel Hartmeier
2001-07-17support min-ttl, okay dhartmei@Niels Provos
2001-07-17normalize ip_off, make IP_DF stripping optional, return rst is a flag now.Niels Provos
2001-07-17ip normalization codeNiels Provos
2001-07-17split ip normalization out into a separate file, okay dhartmei@Niels Provos
2001-07-15increase src->state to 1 when creating state from intermediate (non-SYN) pack...Daniel Hartmeier
2001-07-14use int instead of signed char. doesn't use more memory (padding occurs) and ...Daniel Hartmeier
2001-07-13indent.Federico G. Schwindt
2001-07-13everytime i clean in here, i get a 250 line diff...Theo de Raadt
2001-07-11Simplify pf_pull_hdr(), don't use inner IP header's ip_len or ip_offDaniel Hartmeier
2001-07-10Missing breaks.Marc Espie
2001-07-10another lame OpenBSD tag.Federico G. Schwindt
2001-07-09do compare in host order. found by millert@.Daniel Hartmeier
2001-07-09More lame OpenBSD tags.Federico G. Schwindt
2001-07-09Extend nat/rdr syntax. Add source/destination selection. MakeDaniel Hartmeier