summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2005-11-01Always sure that we have memory for the 'dst' scrub information, which mayChristopher Pascoe
2005-10-28s/rmatch/chksum_flag/ to clarify what's going on. Pointed out by dhartmei@Ryan Thomas McBride
2005-10-27Basic support for attaching states from pfsync to the correct rules.Ryan Thomas McBride
2005-10-26Instead of using arc4random() to modulate the TCP isn, call tcp_rndiss_next()Ryan Thomas McBride
2005-10-25mtag in pf_route is now only used for IPSEC, so #ifdef itHenning Brauer
2005-10-23Rework of multicast deletion code for vlan(4) and trunk(4).Marco Pfatschbacher
2005-10-17make pf use one mbuf tag instead of 6 distinct ones. use a little structHenning Brauer
2005-10-12no need to call mfree() since m is always NULL; from Andrey MatveevMarkus Friedl
2005-10-09if the wireless hostap interface belongs to a bridge, learn the node'sReyk Floeter
2005-10-09use labelReyk Floeter
2005-10-08Prevent information leak by using a random hunique value instead ofCan Erkin Acar
2005-10-07Report interface link state changes in sppp layerCan Erkin Acar
2005-10-03add a simple active "failover" trunk mode. port priorities will beReyk Floeter
2005-09-30remove old unused NRL IPv6 code.Brad Smith
2005-09-28No part of the code defines UNALIGNED_ACCESS, use reverted tests forMiod Vallat
2005-09-28Improve the safety of pf IOCTLs, taking into account that some paths can sleep.Christopher Pascoe
2005-09-14correctly set IFF_RUNNING flag after device state changes.Reyk Floeter
2005-09-11when adding any IP addresses make sure to UP the interface.Brad Smith
2005-09-10update the trunk(4) driverReyk Floeter
2005-09-05in DIOCCHANGERULE, properly initialize table, if used in NAT rule.Daniel Hartmeier
2005-08-22when nat'ing icmp 'connections', replace icmp id with proxy valuesDaniel Hartmeier
2005-08-22fix rdr to bitmask replacement address pool. patch from Max Laier,Daniel Hartmeier
2005-08-18Malloc temporary buffers in pfioctl rather than having several largeChristopher Pascoe
2005-08-18Rearrange pf_state and pfi_kif so that the parts of the structure neededChristopher Pascoe
2005-08-16Only send the PFSS_TIMESTAMP timestamp bit across the wire, in case weChristopher Pascoe
2005-08-16Synchronise timestamp modulation and scrubbing min ttl information.Christopher Pascoe
2005-08-14don't require a valid route when configuring the tunnel;Markus Friedl
2005-08-13Partial backout of previous revision, reinstates the ability to propagateChristopher Pascoe
2005-08-12Use actual packet contents when sending protocol rejects. Fixes PR 4305.Can Erkin Acar
2005-08-12Fill out interface name and state creation time correctly inChristopher Pascoe
2005-08-11Remove bogus debug printf().Ryan Thomas McBride
2005-08-11Only decrement the max-src-conn counter for tcp connections that reachedJoel Knight
2005-08-10kill spaces OK deraadt@Claudio Jeker
2005-08-10Add an additional media subtype IFM_TDM_E1_G704_CRC4 for TDM interfaces.Claudio Jeker
2005-08-07Do not blindly reset the state count to zero after a clear, as we may notChristopher Pascoe
2005-08-07verify ticket in DIOCADDADDR, from Boris Polevoy, ok deraadt@Daniel Hartmeier
2005-08-07Reset kif->pfik_ifp to NULL before calling pfi_kif_unref(), similar changeChristopher Pascoe
2005-08-06correct some spellosChristopher Pascoe
2005-08-05make three functions non-static (namespace is no issue, they might getDaniel Hartmeier
2005-08-04instead of static locals, malloc/free. the goal is to reduce stack usage,Daniel Hartmeier
2005-08-03prevent unaligned memory access when processing LCP echo packets,Can Erkin Acar
2005-08-03Do not send "deletion" messages for states created by other pfsync peers whenChristopher Pascoe
2005-08-03Eliminate another case where pool routines are called without process context.Christopher Pascoe
2005-08-03use flag macro instead of constantChristopher Pascoe
2005-08-02pass the AF in network byte order to bpfMarkus Friedl
2005-08-02Instead of copying a table structure so we can mask off a bit beforeChristopher Pascoe
2005-08-01Minor whitespace cleanup.Christopher Pascoe
2005-08-01Use a string directly rather than making a copy, save on stack space.Christopher Pascoe
2005-07-31Perform pf state/rule/table expiry in a kernel thread instead of runningChristopher Pascoe
2005-07-31Missed argument in previous commit, applied separately to ease merges.Christopher Pascoe