summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2009-04-30treat log as what it is, a flag variable. effectively a noop now but stopsHenning Brauer
2009-04-23print the type of the icmp message we're bitching about when debugging isDavid Gwynne
2009-04-18Make "route(8) change" aware of MPLS.Michele Marchetto
2009-04-17move the lastr = r assignment behind the anchor rule check so we don'tHenning Brauer
2009-04-16Really turn fragment reassembly on by default. pfctl must handle thisDavid Krause
2009-04-15little dose of scrubbing after the monster changes:Henning Brauer
2009-04-15move OK ICMP to NOISY level, makes it easier to run at MISC level; ok henning@David Krause
2009-04-15move pfsync stale update messages to NOISY level; ok dlg@ henning@David Krause
2009-04-14Correctly handle the case when state might be NULL in pf_test likeAlexander Yurchenko
2009-04-11Avoid dereferencing a null pointer when pf attempts to translate aJoel Sing
2009-04-07after i took everything in this fiule apart and reassembled with a lot ofHenning Brauer
2009-04-07turn fragment reassembly on by default. the is little to no reason toHenning Brauer
2009-04-061) scrub rules are completely gone.Henning Brauer
2009-04-04use time_uptime instead of time_second internally. time_uptime isntDavid Gwynne
2009-03-31claudio has spent too much time with the mbuf macros.David Gwynne
2009-03-31do not include space in the end of the from for a hmac. after discussionDavid Gwynne
2009-03-23wait an appropriate amount of time before giving up on a bulk update,David Gwynne
2009-03-17we do know how to handle iack. in the rx path at least.David Gwynne
2009-03-15Introduce splsoftassert(), similar to splassert() but for soft interruptMiod Vallat
2009-03-14Some ICMP types that also have icmp_id, pointed out by markus@Ryan Thomas McBride
2009-03-09Make the DIOCSETIFFLAG, DIOCSETLIMIT, and DIOCSETTIMEOUT ioctlsRyan Thomas McBride
2009-03-07Make sure pd2 has a pointer to the icmp header in the payload; fixesRyan Thomas McBride
2009-03-05Fix a panic in ether_output() when attempting to send multicast traffic onMichele Marchetto
2009-03-05Stricter state checking for ICMP and ICMPv6 packets: include the ICMP typeRyan Thomas McBride
2009-03-02Make sure rt_gateway is not NULL in rt_mpath_matchgate(). It is possible toClaudio Jeker
2009-03-01rework serialisation of messages slightly.David Gwynne
2009-03-01check pfsyncs IFF_RUNNING flag before doing stuff. should save time forDavid Gwynne
2009-03-01i can't see a reason that we'd need to go to splnet to call ip_output.David Gwynne
2009-02-27Do not check the link state when installing a route. This bit was missing inClaudio Jeker
2009-02-27fix quick reuse of tcp states.Henning Brauer
2009-02-27fix mbuf problems and simplify code, well spotted and input byJoerg Goltermann
2009-02-26bulk updates are sent from a timeout which walks over the state tree andDavid Gwynne
2009-02-24restore the parsing of incoming tdb update messages. this was disabledDavid Gwynne
2009-02-24Disable rt_if_track() for now. This causes the rtfree panic seen in PR6043Claudio Jeker
2009-02-24request a bulk update when the pfsync if configuration is changed via anDavid Gwynne
2009-02-23dont put pfsync packets on the wire if no syncdev is specified. issuesDavid Gwynne
2009-02-20Ensure that bpf_mtap() is always called at the same interrupt priorityJoel Sing
2009-02-18bring back the NAT NOP fix, but this time right.Henning Brauer
2009-02-18if a peer requests a state that is marked as NOSYNC, then skip it.David Gwynne
2009-02-18Free authentication data when detaching sppp from interface.Can Erkin Acar
2009-02-17// style comments shouldnt be in the tree.David Gwynne
2009-02-17assert copyright over the changes i made.David Gwynne
2009-02-17init the tdb tailq. hopefully this fixes sthens crash.David Gwynne
2009-02-17fix uninitialized variable.Charles Longeau
2009-02-16allocate the large structures instead of putting them on the stack, andTheo de Raadt
2009-02-16Allow username and password to be up to 255 characters in length.Can Erkin Acar
2009-02-16pfsync v5, mostly written at n2k9, but based on work done at n2k8.David Gwynne
2009-02-15Revert previous.Marc Balmer
2009-02-15Fix compilation of kernels that have pf, but not pfsync.Marc Balmer
2009-02-12revert pf.c r1.629 (which moved to this file) which was causingStuart Henderson