Age | Commit message (Collapse) | Author |
|
|
|
but pf_insert_state does fiddle with the state's state_key pointer - it
has too -, and can leave it at NULL. pf_src_tree_remove_state()
tried to grab the protocol from it. fortunately that is superfluous here,
since tcp_est will never be set in the non-tcp case - it is only touched
in pf_src_connlimit which in turn is only ever called from pf_test_tcp().
ok mcbride + identical diff from pascoe, but he was a few minutes late :)
|
|
that is kept in a list per carp interface. This is the huge first
step necessary to make carp load balancing nice and easy. One carp
interface can now contain up to 32 virtual host instances.
This doesn't do anything useful yet, but here is how an ifconfig
for multiple entries now looks like:
# ifconfig carp2 carpnodes 5:0,6:100 192.168.5.88
carp2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:00:5e:00:01:05
carp: carpdev sis0 advbase 1
state MASTER vhid 5 advskew 0
state BACKUP vhid 6 advskew 100
groups: carp
inet 192.168.5.88 netmask 0xffffff00 broadcast 192.168.5.255
OK mcbride@
|
|
|
|
|
|
please close the pr after another solution is found for both problems
|
|
I wonder why 64-bit archs have not been bitten by this.
OK mcbride@, henning@
|
|
different protocols. from Max Laier. ok markus@, henning@
|
|
ok deraadt@ dlg@ henric@ mcbride@
|
|
tested david@, ok dhartmei@
|
|
This prevents a null-deref when empty groups are used in set loginterface.
Fixes PR 5628 as reported by Andreas Bihlmaier.
Bad mpf :(
OK henning@
|
|
|
|
|
|
Noticed by Kai_Doernemann_at_genua.de
OK henning@, deraadt@
|
|
Suggestions from mpf@ and canacar@
ok deraadt mpf canacar
|
|
inside that loop doesn't yield the expected results.
from freebsd r1.37 Andrew Thompson <thompsa@freebsd.org>
|
|
Add support for probablities of 0% and 100%.
With and OK deraadt@
|
|
the broadcast start routing.
ok pyr@
|
|
ports and receives frame on any port. This allows interaction with
some L2 configurations.
with input and ok reyk@
|
|
OK dhartmei@, henning@
|
|
|
|
|
|
From FreeBSD
ok claudio@ dlg@
|
|
Using a group sums up the statistics of all members.
Modify pfctl(1) slightly to allow a groupname "all",
which gives us an overall pf(4) statistic.
OK henning@, markus@
|
|
more than one protocol. From FreeBSD, reported and tested by jmc@
|
|
ok claudio@ dlg@
|
|
field.
ok claudio@ dlg@
|
|
one entry for each multicast group and interface combination). this allows
you to run OSPF with more than 10 interfaces.
adapted from freebsd; ok claudio, henning, mpf
|
|
arrives; ok dhartmei, henning, feedback aaron
|
|
return a 64-bit int for ifmedia_baudrate().
- Fix consumers of ifmedia_baudrate() to deal with the change.
ok claudio@ dlg@
|
|
net/if_enc.h instead.
ok todd@ and probably claudio who's in the train.
|
|
|
|
-remove useless casts
-MALLOC/FREE -> malloc/free
-use M_ZERO where appropriate instead of seperate bzero
feedback & ok krw, hshoexer
|
|
ok krw@
|
|
unbreaks RTM_GET. Problem reported by fkr@
|
|
By doing so we ensure that all the memory is initialised and we no longer
have to ensure that none of the structure elements is forgotten in
sysctl_iflist() and sysctl_dumpentry().
This solves the route flush issues seen by aanriot@
OK henning@
|
|
if.c.
|
|
been cached in pd->p_len.
ok henning@ markus@
|
|
to access uninitialised memory.
Set dst to 0 on error, the error path tries to access dst but dst is inited
later down the code. This fixes a kernel panic seen by aanriot@
OK henning@
|
|
|
|
|
|
will show input errors for packets received from any of the ports that
are part of a fail over interface but are not the "master" port at the
time. This fixes the problem by checking the error condition
correctly.
From brad at comstyle dot com
|
|
ok claudio@
|
|
Changes include 64bit counters instead of u_long, routing table id in the header
of most messages, reserved routing priority field, added a hdrlen field to skip
over the header so that binary compatibility becomes easier.
A minimal backward support for old binaries is included to ease upgrades but
don't expect anything more than ifconfig, route and dhclient to correctly work.
OK henning@ mglocker@
|
|
'badstate' everywhere.
ok henning@
|
|
MGET* macros were changed to function calls, there wasn't any
need for the pool declarations and the inclusion of pool.h
From: tbert <bret.lambert@gmail.com>
|
|
version for i386
more architectures and ctob() replacement is being worked on
prodded by and ok miod
|
|
ok henning@
|
|
there is a 1:1 mapping between direction and the tree the states get
attached to. there is no need to have anything outside the state insertion/
deletion/lookup routinbes know about these internals. so just pass the
direction to the lookup functions and let them pick the right tree.
ok dhartmei markus
|
|
|