summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2007-06-26Fix a race condition during ruleset reload; make sure we don't walk offRyan Thomas McBride
2007-06-25crank ifq_maxlen from 50 to 256, so it is not smaller than most interfacesHenning Brauer
2007-06-25pretty mechanical change: now that the state tables use seperate stateHenning Brauer
2007-06-24Save some bytes and make code more readable by removing junk union andRyan Thomas McBride
2007-06-22export the flow/filter information attached to the SA, too; ok hshoexer@Markus Friedl
2007-06-21force logif to zero if no logging is asked forHenning Brauer
2007-06-21reimplement interface bound states in a non-retarded way.Henning Brauer
2007-06-20Allow "log" for nat rules without "pass".Marco Pfatschbacher
2007-06-17add back missing bcopy & break, got lost when removing arcnet.Henning Brauer
2007-06-15in pf_test_rule, before handling IPPROTO_ICMP / IPPROTO_ICMPV6, check thatHenning Brauer
2007-06-14Add a new "rtlabel" option to ifconfig. It allows to specify a route labelReyk Floeter
2007-06-14sprinkle some #ifdef IPSEC so that pfsync compiles w/o ipsecHenning Brauer
2007-06-11move definitions for the flags in the mbuf header used by pf to mbuf.hHenning Brauer
2007-06-09fix wrong argument passing to m_copyback for the log caseHenning Brauer
2007-06-09sizeof(ptr) is no good if you want sizeof(*ptr). icmp/icmpv6.Henning Brauer
2007-06-08kill arcnet leftovers, some pt out by Mike Belopuhov <mkb@crypt.org.ru>,Henning Brauer
2007-06-07PR 5502 From: Marc Huber <Marc.Huber@web.de>Henning Brauer
2007-06-06vlan interfaces do not allow the parent interface and the vlan number to beHenning Brauer
2007-06-06remove remaining IPX hooks. all inside #ifdef IPX, so no actual changeHenning Brauer
2007-06-02pf_set_rt_ifp accesses state key data, so must be called laterHenning Brauer
2007-06-01factor out duplicated code to allocate state key and cross-reference itHenning Brauer
2007-06-01fold pf_test_tcp(), pf_test_udp(), pf_test_icmp(), pf_test_other() intoHenning Brauer
2007-06-01apply the "skip ipsec if there are no flows" speedup diff to IPv6 too.Henning Brauer
2007-05-31Make sure that pf_state_key and pf_state_key_cmp are in sync.Ryan Thomas McBride
2007-05-31unlink the right state, ryan okHenning Brauer
2007-05-31Move the state id and creatorid (used mainly by pfsync) into struct pf_state.Ryan Thomas McBride
2007-05-31Unbreak pf.c compilation on gcc 2.95 architectures. Found by todd@Ryan Thomas McBride
2007-05-31First step of rearranging pf's state table internals...Ryan Thomas McBride
2007-05-29remove token ring leftovers, ok mcbride pvalHenning Brauer
2007-05-29It helps to commit removals from the tree that has the files cvs removedClaudio Jeker
2007-05-29now i get my hands dirty in here... from if_ethersubr.c:Henning Brauer
2007-05-29there was code insideHenning Brauer
2007-05-29Move tokenring support to the attic where it can join the cards that whereClaudio Jeker
2007-05-29Define IF_ENQUEUE() and friends as proper C statements using do ... whileUwe Stuehler
2007-05-29Use atomic operations to operate on netisr, instead of clearing it at splhigh.Miod Vallat
2007-05-29IMP is dead and nothing uses NETISR_IMP so remove it from the netisr list.Claudio Jeker
2007-05-29Spaces, no binary changes.Claudio Jeker
2007-05-29gain us another 10+% of performance.Henning Brauer
2007-05-29Add a name argument to the RWLOCK_INITIALIZER macro.Thordur I. Bjornsson
2007-05-28double pf performance.Henning Brauer
2007-05-28Only call add_net_randomness() once per interrupt instead of once per packet....Ryan Thomas McBride
2007-05-28Users of arc4random() should include dev/rndvar.h directly.Ryan Thomas McBride
2007-05-27get rid of static.David Gwynne
2007-05-27clarify things by passing kif->pfik_ifp around in pf_test{,6} insteadPierre-Yves Ritschard
2007-05-26add comments indicating why we do m = *m0; again after pf_normalize, ryan okHenning Brauer
2007-05-26one extern seems to be better than 20 for ifqmaxlen; ok krwJason Wright
2007-05-26More comment typos from Diego Casati. Including winners like funtion, allmost,Kenneth R Westerback
2007-05-23use the intr pool when allocating from interrupt context;Markus Friedl
2007-05-21make bridge(4) mark packets with M_PROTO1 if gif(4) needs to useMarkus Friedl
2007-05-20Handle IP address stuff in tls/tlf state messagesCan Erkin Acar