summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2005-05-15typoHenning Brauer
2005-05-15ANSI, mostly from Toni Mueller <openbsd-tech@oeko.net>Henning Brauer
2005-05-14- Add IPv6 over GRE.Brad Smith
- u_short -> u_int16_t - Change default MTU to 1476 (same value that Cisco and other *BSD's use). - Mark gre(4) interfaces as IFT_TUNNEL (Encapsulation interface). From NetBSD - Support setting the MTU Be very careful when upgrading, the change in default MTU might cause problems with an existing OpenBSD <-> OpenBSD setup. Thanks to Stephen Marley <stephen dot marley at catwoman dot cl-is dot com> for some testing.
2005-05-13Fix for a panic experienced when authenticating a pppoe session on an amd64 ↵Brad Smith
system. From: i4b project via FreeBSD via Jason Ackley Fixes PR 4190 & 4196 ok canacar@
2005-05-10support NULL encryption for ESP; ok hshoexer, hoMarkus Friedl
2005-05-10In DIOCKILLSTATES: take into account the direction of the state whenJoel Knight
matching source and destination addresses/ports. ok henning@ dhartmei@ mpf@
2005-05-09ansify. no binary change.Marco Pfatschbacher
OK henning, krw, brad, moritz
2005-05-04set RUNNING on open; from Alexey E. Suslikov; ok henning, claudioMarkus Friedl
2005-05-03typo, automaticaly -> automaticallyBrad Smith
2005-04-28Don't detach interface from pf's perspective until after IPv6 is done with it.Christopher Pascoe
ok dlg@ henning@
2005-04-25csum -> csum_flagsBrad Smith
ok krw@ canacar@
2005-04-25Use ETHERTYPE_VLAN.Brad Smith
2005-04-24Fix cisco-mode check in lcp up/down.Can Erkin Acar
2005-04-24Use the IANA assignment IFT_L2VLAN.Brad Smith
From FreeBSD/NetBSD Tested by camield@ and Alexey E. Suslikov <cruel at texnika dot com dot ua> ok camield@
2005-04-22When synproxy completes the replayed handshake and modifies the stateDaniel Hartmeier
into a normal one, it sets both peers' sequence windows. Fix a bug where the previously advertised windows are applied to the wrong side (i.e. peer A's seqhi is peer A's seqlo plus peer B's, not A's, window). This went undetected because mostly the windows are similar and/or re- advertised soon. But there are (rare) cases where a synproxy'd connection would stall right after handshake. Found by Gleb Smirnoff.
2005-04-21Catch failed hook_establish call immediately, rather than misbehaving andChristopher Pascoe
panicing at detach time. ok dhartmei@ henning@
2005-04-20Make vlan(4) aware of its physical interface link state.Marco Pfatschbacher
Changes are reported to userland and to other interfaces sitting on top of us. OK henning@, camield@ Tested by camield@ and Alexey E. Suslikov
2005-04-20Introduce if_linkstatehooks.Marco Pfatschbacher
This converts if_link_state_change() to a generic usable callback with dohooks(). OK henning@, camield@ Tested by camield@ and Alexey E. Suslikov
2005-04-20send raw 802.11 frames with bpf(4) using the IEEE802_11 orReyk Floeter
IEEE802_11_RADIO data link types. ok canacar@ damien@
2005-04-20the linktype (DLT) should always be of type u_int.Reyk Floeter
fine deraadt@
2005-04-18If the parent interface is not IFF_RUNNING, do not call its start function.Brad Smith
This prevent a variety of fun panics. From NetBSD
2005-04-18revert a change in the previous commit to appease henning@ for the timeBrad Smith
being.. - Set the interface speed back to zero after ether_ifattach(). RFC 2863 says: "For a sub-layer which has no concept of bandwidth, [ifSpeed] should be zero."
2005-04-17- In vlan_input()/vlan_input_tag(), always mask off all but the VLIDBrad Smith
bits from tags extracted from received frames. (Some drivers may already do this masking internally, but doing it here doesn't hurt and insures consistency.) - In vlan_ioctl(), don't let the user set a VLAN ID value with anything besides the VLID bits set, otherwise we will have trouble matching an interface in vlan_input() later. - Set the interface speed back to zero after ether_ifattach(). RFC 2863 says: "For a sub-layer which has no concept of bandwidth, [ifSpeed] should be zero." - Do not call if_down() on a parent interface if it's already down. From FreeBSD Tested by camield@ and Alexey E. Suslikov <cruel at texnika dot com dot ua> ok camield@
2005-04-15Try this again.Joel Knight
When synproxy sends packets to the destination host, make sure to copy the 'tag' from the original state entry into the outgoing mbuf. ok dhartmei@ deraadt@
2005-04-14back out last, some breakage crept inHenning Brauer
2005-04-14When synproxy sends packets to the destination host, make sure to copyJoel Knight
the 'tag' from the original state entry into the outgoing mbuf. ok henning@ dhartmei@
2005-04-11Ignore lcp up/down events in cisco modeCan Erkin Acar
2005-04-05Return EINVAL in SIOCSIFLLADDR if new lladdr is a multicast address.Claudio Jeker
OK derradt@ tedu@
2005-04-04Add sysctl for dumping the SPDHans-Joerg Hoexer
ok deraadt, ok markus some time ago
2005-04-01do not mess with lcp if we are in cisco modeCan Erkin Acar
2005-03-30add lladdr command to ifconfig to set MAC address. diffs from freebsd viaTed Unangst
Kyunghwan KIM (prs 2117 and 2118) and Fredrik Widlund. ok deraadt
2005-03-25increment the right counter on error.Brad Smith
2005-03-24Unbreak tree, mono_time may no longer be used because of timecounters.Claudio Jeker
Use getmicrouptime() instead. Found by grange@ and henning@. OK henning@
2005-03-23Merge some sppp improvements from NetBSD:Can Erkin Acar
1. better timeout and keepalive handling 2. fix some memory leaks on error paths. 3. use arc4random instead of random 4. always send keepalives in cHDLC mode, from claudio@ Tested by Greg Mortensen (san) and jmc@ (pppoe), ok claudio@
2005-03-23Follow RFC and do not reset timeouts everytime sppp_cp_change_state()Can Erkin Acar
is called. Makes two sppp instances to handshake against each other. Tested by Greg Mortensen, ok claudio@
2005-03-15byte order of mss, only affects synproxy code path, from John L. ScarfoneDaniel Hartmeier
2005-03-04add state's tag for IPv6, too. spotted by markus@Daniel Hartmeier
2005-03-03when tagging, apply the same tag to all packets matching a state entryDaniel Hartmeier
(not just to the initial packet). note: kernel/userland abi change (rebuild pfctl). ok henning@
2005-02-27support 'tagged' in translation rules, non-delayed tag lookupDaniel Hartmeier
ok henning@, deraadt@
2005-02-20Avoid use after free when purging states.Ryan Thomas McBride
ok henning@ dhartmei@ claudio@
2005-02-20ifmedia_set() should not panic, nor can it really fail. So if there isBrad Smith
some problem setting the media to the requested value (usually IFM_AUTO), we now force the media selection to IFM_NONE. From NetBSD
2005-02-15rev 1.19Brad Smith
Avoid DoS attack by setting ifm->ifm_media to a high number and running the kernel out of memory. From NetBSD Fixes panic mentioned in PR 4088. ok krw@ mcbride@ dhartmei@
2005-02-15Fix scoping error which could cause some states with an empty ifname to beAaron Campbell
purged errneously. mpf@ ok
2005-02-07Add new function if_link_state_change() to take care of sending messagesRyan Thomas McBride
on the routing socket and notifying carp() of link changes. ok brad@ mpf@
2005-01-30Add some more reason counters and use them instead of overloading theDaniel Hartmeier
'memory' one, which helps debugging. Alters the kernel/userland ABI, rebuild pfctl and tcpdump. ok henning@
2005-01-20Use the packet's address family instead of the rule's when selecting aDaniel Hartmeier
replacement address for an rdr rule. Some rdr rules have no address family (when the replacement is a table and no other criterion implies one AF). In this case, pf would fail to select a replacement address and drop the packet due to translation failure. Found by Gustavo A. Baratto. ok mcbride@, henning@, markus@
2005-01-20sc->sc_sync_ifp = NULL if we fail to attach the multicast group.Ryan Thomas McBride
ok mpf@
2005-01-20Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreqRyan Thomas McBride
in kernel code to match. Brings pfsync in line with carp, vlan and pppoe devices. Old syncif and -syncif options still work, will be removed later. ok markus@
2005-01-18Rewriting the lladdr can now be done without using mbuf tags.Marco Pfatschbacher
Advertisements run through the carp interface first. So we just take the address from ifp0. While we're there, also remove carp_macmatch6, which isn't used anymore. Proposed by mcbride@ ok mcbride@, pascoe@
2005-01-18If there is no match in ifaof_ifpforaddr() return the first match -- mainClaudio Jeker
interface address -- and not the last one -- some alias. Also handle point to point networks a bit more special. With some input from markus@ OK markus@ henning@ fgsch@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-13 18:02:18 +0000