summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2002-03-26Change default logging level from none to urgent. Should never printDaniel Hartmeier
2002-03-25Ignore 'keep state' for ICMP errors whose inner headers mismatch stateDaniel Hartmeier
2002-03-25add ioctl DIOCKILLSTATES to shootdown a subset of the state table. allowsMike Frantzen
2002-03-24deref of NULL in out of mbuf situation, ok jason@Niklas Hallqvist
2002-03-18filter ipv6 on the bridge.jasoni
2002-03-15Kill #if __STDC__ used to do K&R vs. ANSI varargs/stdarg; just do thingsTodd C. Miller
2002-03-15Cosmetic changes only, primarily making comments line up nicely after theTodd C. Miller
2002-03-14Final __P removal plus some cosmetic fixupsTodd C. Miller
2002-03-14First round of __P removal in sysTodd C. Miller
2002-03-12sync with KAMEKenjiro Cho
2002-03-08Fix arc4random() usage; add more randomness to pf_get_sport().Mike Pechkin
2002-03-03Fix crashes associated with SADB_GET/SADB_DUMP --- memory was notAngelos D. Keromytis
2002-02-26Add optional pool memory hard limits, mainly as temporary solutionDaniel Hartmeier
2002-02-25Change timeouts from microtime() to time.tv_sec like in pf.c,Daniel Hartmeier
2002-02-23SRC prefix is not required for some operations.Angelos D. Keromytis
2002-02-23Pools that are only used in the ioctls can use the nointr allocator.Artur Grabowski
2002-02-22IEEE80211_NWKEY_* flags; from netbsdMichael Shalayeff
2002-02-21Correctly initialize the compression case.Angelos D. Keromytis
2002-02-17Calculate IP checksum and copyback modified headers before logging aDaniel Hartmeier
2002-02-15pf only uses seconds for time measuring. There is no need to call microtimeArtur Grabowski
2002-02-14Reorder struct pf_pdesc members, saves 8 bytes.Daniel Hartmeier
2002-02-14KNFTheo de Raadt
2002-02-14Add skip steps for rule action (pass/block vs. scrub) and directionDaniel Hartmeier
2002-02-14If helps to loop over the correct variable *sigh*Jason Wright
2002-02-13Be -really- careful not to modify the payload when replacing the ethernetJason Wright
2002-02-13sync with KAME.Kenjiro Cho
2002-02-11Remove unused function prototype, from Jason IshDaniel Hartmeier
2002-02-11Remove ancient comment regarding memcmp(), from Jason IshDaniel Hartmeier
2002-02-07bridge_output() needs a forcibly aligned copy just like bridge_broadcast()Jason Wright
2002-02-07Quiet down an annoying message in altq_etherclassify.Artur Grabowski
2002-01-23compatability -> compatibility.Federico G. Schwindt
2002-01-23Back out part of last commit, it causes memory to be freed prematurelyTodd C. Miller
2002-01-23It looks like there has been one crack smoking and a few cut and pastes.Artur Grabowski
2002-01-23Pool deals fairly well with physical memory shortage, but it doesn't dealArtur Grabowski
2002-01-18Fix some zlib memory leaks, originally from Mark AdlerTodd C. Miller
2002-01-12- Only apply fastroute and route-to if we are going in the samejasoni
2002-01-11pad the pf_state_{host,peer} to a 32bit quantity; dhartmei@ frantzen@ okMichael Shalayeff
2002-01-09Add labels to rules. These are arbitrary names (not to be confused withDaniel Hartmeier
2002-01-08Add "no nat/rdr/binat" to nat.conf. The first matching rule applies.Daniel Hartmeier
2002-01-02allow for setting of the loopback MTU, set IFF_RUNNING on address configurationDug Song
2002-01-02Don't forget to deallocate on failure.Jason Wright
2002-01-01This is ugly: make a specialized deep copy in bridge_broadcast() thatJason Wright
2001-12-31only require write mode for modifying ioctls; dhartmei@, frantzen@, deraadt@ okMichael Shalayeff
2001-12-27revision 1.12 lacks paren around && within || (gcc warns and compilation stops).Jun-ichiro itojun Hagino
2001-12-26misplaced (), causing tcp header be examined in non-tcp packetsMichael Shalayeff
2001-12-26cosmeticJun-ichiro itojun Hagino
2001-12-18NRL license cleaningTheo de Raadt
2001-12-18Update rt_ifp in DIOCCHANGERULE.jasoni
2001-12-15add support for creating span ports so that one can snoop a bridgeJason Wright
2001-12-13remove redundant #if NPF. ok jason@jasoni