summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2009-02-26bulk updates are sent from a timeout which walks over the state tree andDavid Gwynne
2009-02-24restore the parsing of incoming tdb update messages. this was disabledDavid Gwynne
2009-02-24Disable rt_if_track() for now. This causes the rtfree panic seen in PR6043Claudio Jeker
2009-02-24request a bulk update when the pfsync if configuration is changed via anDavid Gwynne
2009-02-23dont put pfsync packets on the wire if no syncdev is specified. issuesDavid Gwynne
2009-02-20Ensure that bpf_mtap() is always called at the same interrupt priorityJoel Sing
2009-02-18bring back the NAT NOP fix, but this time right.Henning Brauer
2009-02-18if a peer requests a state that is marked as NOSYNC, then skip it.David Gwynne
2009-02-18Free authentication data when detaching sppp from interface.Can Erkin Acar
2009-02-17// style comments shouldnt be in the tree.David Gwynne
2009-02-17assert copyright over the changes i made.David Gwynne
2009-02-17init the tdb tailq. hopefully this fixes sthens crash.David Gwynne
2009-02-17fix uninitialized variable.Charles Longeau
2009-02-16allocate the large structures instead of putting them on the stack, andTheo de Raadt
2009-02-16Allow username and password to be up to 255 characters in length.Can Erkin Acar
2009-02-16pfsync v5, mostly written at n2k9, but based on work done at n2k8.David Gwynne
2009-02-15Revert previous.Marc Balmer
2009-02-15Fix compilation of kernels that have pf, but not pfsync.Marc Balmer
2009-02-12revert pf.c r1.629 (which moved to this file) which was causingStuart Henderson
2009-02-06Remove bogus casts of integer constants SPPPIO[GS]DEFS to caddr_tAlexander Yurchenko
2009-02-03Use our own flags to set the operations and not RTF_PROTOX.Michele Marchetto
2009-01-31u_char is not compatible with default argument promotion type thusAlexander Yurchenko
2009-01-31No need to invent another _offset, just use the one from param.h.Alexander Yurchenko
2009-01-31unbreak ! INET6 case by sprinking #ifdef INET6Henning Brauer
2009-01-30sync the part copied from ip_output: always initialize IP checksumChristian Weisgerber
2009-01-30sprinkle splassert(IPL_SOFTNET) around the code that inserts, unlinks, andDavid Gwynne
2009-01-29Split the address selection from pools away from pf.c and put it inPierre-Yves Ritschard
2009-01-29move some code around in preparation for future work:Henning Brauer
2009-01-29Fix a crash found by bluhm@ in rn_mpath_reprio(). The rn_mklist handling wasClaudio Jeker
2009-01-28Get rid of the ugly rtentry hack.Michele Marchetto
2009-01-28Implement basic routing socket filtering. It is possible to give a list --Claudio Jeker
2009-01-27If a packet translation was a NOP, undo separate NAT key andMarco Pfatschbacher
2009-01-27handle HW VLAN tags being passed down; from BradChristian Weisgerber
2009-01-27include the VLAN priority for hardware tagging, too; ok claudio@Christian Weisgerber
2009-01-27make the hardware/no hardware tag stripping cases consistent and don'tChristian Weisgerber
2009-01-27make drivers tell the mclgeti allocator what their maximum ring size isDavid Gwynne
2009-01-16In pf_test_rule(), if we don't create a state, free any state keys thatDavid Krause
2009-01-09fix egress group matching for IPv6; ok claudio@David Krause
2009-01-08Fix sockaddr_mpls structure.Michele Marchetto
2009-01-06Always check rs_malloc() returns. Also add M_ZERO and M_CANFAILThordur I. Bjornsson
2009-01-06Change the way way rn_mklists work (especially the RNF_NORMAL ones).Claudio Jeker
2009-01-06Send broadcast and multicast traffic not only out on all bridge interfaces butClaudio Jeker
2009-01-03sync flow sequence ids on all used pflow interfaces.Joerg Goltermann
2009-01-03Write back the priority the kernel used. Fixes a problem seen in ospfd whenClaudio Jeker
2008-12-29At least try to make this code a bit easier to read. Don't fiddle with xClaudio Jeker
2008-12-29Use rn_mpath_next() in rtalloc_mpath() to figure out if the next routeClaudio Jeker
2008-12-22Change DLT_MPLS number.Michele Marchetto
2008-12-21split the pfsync input routine up so that each action has its own functionDavid Gwynne
2008-12-18Remove redundant function prototypes which are already in pfvar.hDavid Hill
2008-12-14Allow trunk_hashmbuf() to take HW VLAN tagging into consideration.Brad Smith