summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2001-12-09Use queue.h TAILQ macros instead of accessing members directly.Jason Wright
2001-12-09Don't access the tq members directly, use the queue.h macros. Also,Jason Wright
2001-12-08mflags and len were uninitialized in bridge_broadcast (source of someJason Wright
2001-12-06Use hzto() to handle overflow of (hz * timeout) cases --- when usingAngelos D. Keromytis
2001-12-03reason int -> u_short. From Mike Pechkin.Daniel Hartmeier
2001-12-03Don't reset pf_status.debug and .since on DIOCCLRSTATUS.Daniel Hartmeier
2001-12-01217 lines of diff for KNF, dhartmei, you are evilTheo de Raadt
2001-11-30only make a copy of the mbuf if the route rule is dup-tojasoni
2001-11-30unifdef OLDIP6OUTPUTJun-ichiro itojun Hagino
2001-11-27typo - use correct mbufjasoni
2001-11-27do pf_route() before logging in case the logging created a bogus ruleMike Frantzen
2001-11-26add fastroute options similar to what is found in ipfjasoni
2001-11-21Use pf_pull_hdr() instead of manual mbuf traversal. Fixes potential crashesDaniel Hartmeier
2001-11-20don't allow CHANGEBINAT ioctl in securelevel > 1Mike Pechkin
2001-11-16yes, signed substraction does not work because of underflows, revert the prev...Michael Shalayeff
2001-11-14use substract when comparing keys, for ip addrs as well.Michael Shalayeff
2001-11-13fix pf from going off into the weeds on an ipv6 icmp packet with certain optionMike Frantzen
2001-11-08fix the endif commentMichael Shalayeff
2001-11-07enc and pflog were using iana space, move and update w/ iana current list; ni...Michael Shalayeff
2001-11-06Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary.Miod Vallat
2001-11-06Use #defines for skip step values. From dgregor@net.ohio-state.edu.Daniel Hartmeier
2001-10-24Reset states counter when clearing states.Daniel Hartmeier
2001-10-17make sure we use same key for removal (AF_INET was missing), ok deraadt@, dha...Markus Friedl
2001-10-15Add 'allow-opts' to rules. Packets with IP options will be blocked byDaniel Hartmeier
2001-10-13Patch from Ryan McBride, fixes IPv6 return-rst problem, found byDaniel Hartmeier
2001-10-07fixes pr/2105Niels Provos
2001-10-05Fix bug in if_vlan which could cause crashes in timeouts and 'ifconfig -a'Dale Rahn
2001-10-03M_WAIT in ether_output is wrong. Fix APPLETALK stuff.Artur Grabowski
2001-10-02change timeval to bpf_timeval; 32 bit in size, permitting much greater portab...Theo de Raadt
2001-10-02Convert ip_off of the inner IP header to host order in pf_test_state_icmp().Daniel Hartmeier
2001-10-01Make number of vlan interfaces configurable from UKC.Niklas Hallqvist
2001-09-30Tune TCP fsm (99.7% - 99.9% accuracy over 1e6 connections)Mike Frantzen
2001-09-27The skip steps array was one element short (since adding steps for af).Daniel Hartmeier
2001-09-27switch without break. This caused the 'ICMP too short' messages, sinceDaniel Hartmeier
2001-09-27Fix th_ack calculation in pf_send_reset(). return-rst didn't work sinceDaniel Hartmeier
2001-09-23ipxintr was missingMichael Shalayeff
2001-09-23Bump up the tcp half closed timeout (single FIN) to an hourMike Frantzen
2001-09-21Fix natlook (broke ftp-proxy) and a memory leak.Daniel Hartmeier
2001-09-20document why we use random()Theo de Raadt
2001-09-20occured->occurredMike Pechkin
2001-09-20the use of arc4random() in ether_ifattach() is wrong as randomattach()Peter Galbavy
2001-09-19Patch from Ryan McBride. Compile without INET6, remove unnecessaryDaniel Hartmeier
2001-09-17icmpv6 nat fix, from Ryan McBrideDaniel Hartmeier
2001-09-16Add some missing lengths checks when passing data from userland toTodd C. Miller
2001-09-15The inner protocol of IPv4 ICMP error messages was ignored, leading toDaniel Hartmeier
2001-09-15Revert the sleep priority to something more saneMike Frantzen
2001-09-15Don't use m_pkthdr.rcvif in pflog_packet(), it doesn't work for outgoingDaniel Hartmeier
2001-09-15IPv6 support from Ryan McBride (mcbride@countersiege.com)Mike Frantzen
2001-09-14binat non icmp/udp/tcp protocols as well; ok dhartmei@jasoni
2001-09-11Undo BINAT translation when blocking with return-rst/-icmp.Daniel Hartmeier