summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2006-05-09Remove unnecessary check for the parent interface when settingMarco Pfatschbacher
the vlan priority. Relaxes the order of the vlanprio parameter in ifconfig. OK claudio, brad, norby
2006-05-06The SPI in a TDB is actually stored in network order. Make sa synchronisationRyan Thomas McBride
work between little-endian and big-endian machines, and compare the spi against SPI_RESERVED_MAX correctly. Fix from Nathanael <list-openbsd-tech at polymorpheus dot com>
2006-05-06Fix bracketing messed up in KNF commit 1.86, allows sasyncd to reliablyRyan Thomas McBride
set up pfkey promiscuous mode. Diff from Nathanael <list-openbsd-tech at polymorpheus dot com>
2006-05-02fix creation of sub-anchors, e.g. if you create an anchor /foo/bar, createDaniel Hartmeier
only bar under foo, not /bar as well. secondly, when using "load anchor from" from a sub-anchor, the loading point should be relative to the sub-anchor doing the load (unless absolute paths are used, of course). from Boris Polevoy. probably a -stable candidate.
2006-04-26Missed the goto in the error path. This resulted in an access to a NULLClaudio Jeker
pointer and a panic later on. Be more careful Claudio! OK henning@
2006-04-22Routes announced via rt_missmsg() do not have rtm_index set. While in mostClaudio Jeker
cases harmless it is used by the IPv6 code. The result is that bgpd is unable to assigning link local addresses to the correct interface. OK henning@ Fix for PR 5063.
2006-04-16After fragment reassembly/trimming, pf must revalidate the mbuf tag of theChristopher Pascoe
altered chain. The cached tag may have already been freed via m_cat.
2006-04-11on link state changes, copy baudrate (negotiated link speed) from parentHenning Brauer
device. previously this was only done at config time, so vlan if's baudrate could easily get out of sync with parent's. ok camield brad
2006-03-31Add sysctl to retrieve the routing table statisitcs. Will be used by netstatClaudio Jeker
instead of kvm access. OK henning@
2006-03-30In sysctl_dumpentry() pass the rt_refcnt by overloading rmx_rttvar.Claudio Jeker
This new rmx_refcnt can be used by route(8) to produce the same output as netstat(1). OK henning@
2006-03-30Spelling in comment.Claudio Jeker
2006-03-25allow bpf(4) to ignore packets based on their direction (inbound orDamien Miller
outbound), using a new BIOCSDIRFILT ioctl; guidance, feedback and ok canacar@
2006-03-25fixup IP checksum when modifying IP header fields, based on a patch inDaniel Hartmeier
fbsd PR 93849 from Max Laier, ok claudio@
2006-03-22prevent anything outside rote.c from accessing the routing table headsHenning Brauer
directly. rather provide a rt_lookup function for regular lookups, and a rt_gettable for those that need access to the head for some reason. the latter cases should be revisted later probably so that nothing outside the routing core code accesses the heads at all... tested claudio jolan me, ok claudio markus
2006-03-20introduce rt_if_remove which takes care of routing table updates for anHenning Brauer
interface that is removed. use that from if.c and if_tun.c instead of re-implementing in the latter case. ok claudio
2006-03-16Switch tun(4) from encapsualting packets into a long mbuf chain over to useClaudio Jeker
mbuf clusters if the packet is big enough. This should speed up tun(4) and may help in other cases where long mbuf chains hurt. Additionally switch the default tun(4) MTU to a more sane 1500 bytes. TUNMTU is kept because it is used in userland. Input and OK from brad@ and djm@
2006-03-14implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4)Damien Miller
which optionally verifies that a packet is received on the interface that holds the route back to the packet's source address. This makes it an automatic ingress filter, but only when routing is fully symmetric. bugfix feedback claudio@; ok claudio@ and dhartmei@
2006-03-12remove BPF filter support if the bpfilter device is removed.Brad Smith
2006-03-11splimp -> spltty/splnetBrad Smith
ok miod@
2006-03-11Check against GIF_MTU_MIN/GIF_MTU_MAX for the min/max MTU size.Brad Smith
2006-03-11splimp -> splnetBrad Smith
2006-03-07use the cu_bridge_id rather than the cu_rootid for the bridge address.Brad Smith
From: Onno Molenkamp via Andrew Thompson <thompsa at freebsd dot org> ok jason@
2006-03-06get rid of questionable macro gore.Henning Brauer
a 200+ lines diff, but no binary change.
2006-03-06change a questionable multi-level foo ? a : b construct into readableHenning Brauer
code. no binary change.
2006-03-06more cleanup, again no binary change.Henning Brauer
as the previous changes from a train ride to frankfurt a bit over a week ago
2006-03-06cvhange a KASSERT into a if() .. panic() construct so the binary doesn'tHenning Brauer
change every time a line is added or removed. no functional change.
2006-03-06KNF, cleanup etc, no binary changeHenning Brauer
2006-03-05change the interface type from IFF_POINTOPOINT to the more correctBrad Smith
type of IFF_TUNNEL (Encapsulation interface). ok djm@
2006-03-04With the exception of two other small uncommited diffs this movesBrad Smith
the remainder of the network stack from splimp to splnet. ok miod@
2006-02-27add missing break; now filters containing a division can passOtto Moerbeek
validation; from NetBSD; ok deraadt@
2006-02-24Another gem from the the-world-runs-on-i386 departement. Using u_long inClaudio Jeker
a packet format causes some troubles on 64bit archs. This fixes a sppp(4) panic I got on alpha and makes cisco HDLC mode actually work. More cleanup needs to be done post 3.9. OK brad@ looks good canacar@
2006-02-23Until now it was only possible to unset the RTF_JUMBO flag on a RTM_CHANGEClaudio Jeker
request. Extend the "hack" to include more flags (RTF_PROTO[123] flags, RTF_BLACKHOLE, RTF_REJECT and RTF_STATIC). Because rtm_use is "abused" -- rtm_use was replaced long time ago with rtm_rmx->rmx_pksent -- it is now forced to 0 in RTM_GET requests and sysctl_dumpentry(). This is done to prevent false changes because of a reused RTM_GET message. OK henning@, mcbride@, makes sense markus@
2006-02-20Fix kernel builds without bpfilter. Linking is still broken.Damien Bergamini
"Please commit this diff ASAP" brad@
2006-02-09remove trailing ',' in enum declarationReyk Floeter
2006-02-09add an interface detach hook and use it with the vlan(4) driver. thisReyk Floeter
fixes a possible crash if the parent interface has been destroyed (like vlan on trunk) before destroying the vlan interface. ok brad@
2006-02-07mention source of pf_modulate_sack() in comment, no code change,Daniel Hartmeier
ok frantzen@
2006-02-06typos from alexey dobriyan;Jason McIntyre
2006-02-02Set rtm_index to the correct interface index for RTM_ADD and RTM_CHANGE.Claudio Jeker
bgpd and ospfd use this information to track the availability of a route. Discussed with dlg@, OK henning@
2006-02-01Initialize rmx_expire in rt_timer_add() so that dynamic routes (e.g. PMTU)Claudio Jeker
show a correct expire time in route(8). OK and idea mpf@ looks good henning@
2006-01-31the TCP SACK option needs sequence number modulationMike Frantzen
ok dhartmei@ and beck@. help + testing from kpfaff AT palloys.com.pl
2006-01-30fix updating of tables associated with interface groups used inHenning Brauer
pass to (ifgroup) style notation. instead of walking the list of associated dynaddrs with a pf-abstracted interface which might not be present when there is no reference to them in the rulset, and checking their pointer back to the interface for group memberships, walk the groups an interface is member of directly. even makes the code easier. tests & ok bob ryan markus + tested moritz
2006-01-23support PMTU-Discovery for link2 ipsec bridges; ok claudioMarkus Friedl
2006-01-18fix a bug in the fragment cache (used for 'scrub fragment crop/drop-ovl',Daniel Hartmeier
but not 'fragment reassemble'), which can cause some fragments to get inserted into the cache twice, thereby violating an invariant, and panic- ing the system subsequently. ok deraadt@
2006-01-11Do not use m_adj() on empty mbufs (m->m_len is uninitialised), instead bumpClaudio Jeker
m->m_data directly. This fixes the tun(4) / bridge(4) crash reported in PR4963. OK djm@ mpf@ markus@
2006-01-06DIOCNATLOOK was forgotten in the second access control switch. it's aDaniel Hartmeier
read-only operation (looking up one state entry), so allow it when /dev/pf is opened read-only (allows squid to work read-only). from Andrey Matveev.
2006-01-06for DIOCCLRSTATUS (pfctl -Fi), reset 'Enabled for x' time, too. simplifiesDaniel Hartmeier
computations of change rates. unfortunately, I don't remember who suggested this.
2006-01-05Make it possible to set a default vlan priority for vlan interfaces.Esben Norby
ok claudio@ brad@
2006-01-05bzero buffers after malloc, or clear string buffer before strlcpy'ingTheo de Raadt
into them, if you are gonna copy it out to userland some ok dhartmei, some ok tedu
2006-01-05bzero after malloc; ok dhartmeiTheo de Raadt
2006-01-04Move bpf_mtap_hdr() after trunk_*_input() so that we hopefully see only oneBrad Smith
copy of the packet with bpf. From mcbride@ some testing by todd@, ok reyk@