summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2008-01-12Kill all timeouts and undo carp demotion on pfsync_clone_destroy.Marco Pfatschbacher
2008-01-10return with ENOTTY instead of EINVAL for unknown ioctl requests to trunkBrad Smith
2008-01-05make sure all callers of rtlabel_id2name check for a null return value.Henning Brauer
2008-01-05rtlabel_id2name() can return NULL if there is no route label..Theo de Raadt
2008-01-02Accept BPF_MUL as a valid instruction in bpf_validate() also improveCan Erkin Acar
2007-12-30In pf_normalize_tcpopt() call pf_pull_hdr() address family safe.Marcus Glocker
2007-12-30Make "scrub max-mss" rule work correctly;Marcus Glocker
2007-12-20increment the match/nomatch table counters when using a table/pool inReyk Floeter
2007-12-20return with ENOTTY instead of EINVAL for unknown ioctl requests.Brad Smith
2007-12-14add sysctl entry points into various network layers, in particular toTheo de Raadt
2007-12-05Revert change which seems to break things like dhclient. Requested byKenneth R Westerback
2007-12-041500 is a 'magic number' in the protocol that all implementationsClaudio Jeker
2007-12-04Always compare the nexthop if one is specified even if it is a non-multipathClaudio Jeker
2007-12-02DIOC{GET,ADD}STATE incorrectly use a user provided pointer without usingChristopher Pascoe
2007-12-02When pf_insert_state state succeeds, increase the state count on theChristopher Pascoe
2007-12-02initialize altq->altq_disc to NULL, from Max LaierDaniel Hartmeier
2007-12-02Don't put state key if pf_insert_state fails. pf_detach_state would haveChristopher Pascoe
2007-12-02Don't leak state if key allocation fails during add.Christopher Pascoe
2007-12-02Set expiry timestamp when importing a state, otherwise it expires on theChristopher Pascoe
2007-12-02DIOCADDSTATE would always dereference a NULL pointer during this copyChristopher Pascoe
2007-11-27typos; ok jmc@Martynas Venckus
2007-11-26typos; ok jmc@Martynas Venckus
2007-11-24some spelling fixes from Martynas VenckusJason McIntyre
2007-11-22pf_src_tree_remove_state() is called upon pf_insert_state() failures.Henning Brauer
2007-11-22Factor out the virtual host portion of carp into a separate structMarco Pfatschbacher
2007-11-21simplify sppp_chap_scr() now that we are using arc4random_bytes()Can Erkin Acar
2007-11-20Fix possible mbuf leak on error. ok reyk@Can Erkin Acar
2007-11-18backout 1.562 since it triggers the problem described in pr 5648Theo de Raadt
2007-11-18Sync struct ifaltq to match struct ifqueue.Marco Pfatschbacher
2007-11-16in pf_test_fragment(), ignore protocol-specific criteria for packets ofDaniel Hartmeier
2007-11-16use arc4random_bytes() instead of multiple arc4random() calls;Damien Miller
2007-11-11Don't leak pfstatekey upon insert conflict (most often caused via pfsync).Christopher Pascoe
2007-11-07Check for pfi_kif's that are neither groups nor have a real interface.Marco Pfatschbacher
2007-11-01correct fixTheo de Raadt
2007-11-01tsk tsk tsk, noone tested this; spotted by canacarTheo de Raadt
2007-10-31'block return' must not send anything on blocked icmp packets.Marco Pfatschbacher
2007-10-31Don't leak potentially secret authname through ioctl interface.Mike Belopuhov
2007-10-30fix a typo, LIST_FOREACH(bp2, ... and then using bp instead of bp2Henning Brauer
2007-10-25Fix probability rules w/ numbers (e.g probability 0.4).Marco Pfatschbacher
2007-10-22use the input mbuf for the first active port instead of copying it inReyk Floeter
2007-10-22Add a broadcast mode to trunk(4). This mode sends frames on allPierre-Yves Ritschard
2007-10-18There is no point for IP addresses on pflog(4)Marco Pfatschbacher
2007-10-14'syncronize' -> 'synchronize'. From Diego Casati.Kenneth R Westerback
2007-10-13remove unneeded declarations that shadows existing vars; ok by many.Federico G. Schwindt
2007-10-05add a 2.5 Gbps fiber media type.Brad Smith
2007-09-27Add loginterface support for groups.Marco Pfatschbacher
2007-09-25Handle incoming protocol reject packets now that we haveCan Erkin Acar
2007-09-19tidy up a little.Brad Smith
2007-09-19Use the proper baudrate for 10Gb hw now that it can fit into the buadrateBrad Smith
2007-09-18allow 4095 instead of 20 multicast group memberships per socket (you needMarkus Friedl