summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2003-10-17Common Address Redundancy ProtocolRyan Thomas McBride
2003-10-10make sure pd is initialized before use (or byte counters may increaseDaniel Hartmeier
2003-10-08obviously i'm on drugs, revertHenning Brauer
2003-10-08missing DIOCX* in the securelevel > 1 caseHenning Brauer
2003-10-04bpf support for atm cards; from jason@ackley.netTheo de Raadt
2003-10-02do not try to send incomplete fragments on ENOBUFS caseJun-ichiro itojun Hagino
2003-10-02correct endian handling of ip->ip_off.Jun-ichiro itojun Hagino
2003-10-01Fix stack leak into pfloghdr (the pad field is not initialized),Can Erkin Acar
2003-10-01make ifindex2ifnet growing code more correct. (found by iij seil team)Jun-ichiro itojun Hagino
2003-09-28Correct off-by-ones with respect to PRC_NCMDS. Mostly from FreeBSD.Chad Loder
2003-09-26Rearchitecture of the userland/kernel IOCTL interface for transactions.Cedric Berger
2003-09-26Move statistics counters from individual pf_test_<proto>() andRyan Thomas McBride
2003-09-24Remove state setup no-ops.Ryan Thomas McBride
2003-09-23Replace select backends with poll backends. selscan() and pollscan()Todd C. Miller
2003-09-21sync with netbsd defines. no functional changes.Federico G. Schwindt
2003-09-18comment spelling, from jonathon grayTed Unangst
2003-09-01KNFHenning Brauer
2003-09-01Make nat rule update the table counters when no filtering rule is used.Cedric Berger
2003-08-29Fix three cases of potential accesses to free'd memory. At least one ofDaniel Hartmeier
2003-08-28fix "pfctl -vvsr" output for rules with tables inside anchors.Cedric Berger
2003-08-27fix inconsistency how we handle tcpopt EOL versus how p0f v2 handles itMike Frantzen
2003-08-27it is supprisingly common (>4%) for some NAT and DSL routers to tweak MSSMike Frantzen
2003-08-27RNF_IGNORE can corrupt the radix tree when an interface is down, itHenric Jungheim
2003-08-27cut-and-paste error; henricJun-ichiro itojun Hagino
2003-08-26mark cloned route with RTF_CLONED. remove RTF_CLONED route when clone parentJun-ichiro itojun Hagino
2003-08-25if_init support, required by ieee80211.Federico G. Schwindt
2003-08-25add DLT_IEEE802_11; deraadt@ ok.Federico G. Schwindt
2003-08-24defines and struct for the ieee80211 framework; deraadt@ ok.Federico G. Schwindt
2003-08-22pf spelling policeDavid Krause
2003-08-22KNFHenning Brauer
2003-08-22don't expose pf_osfp_fingerprint() to ! _KERNEL. tcpdump et al useMike Frantzen
2003-08-21Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF.Mike Frantzen
2003-08-18prevent looutput() feedback of broadcast/multicast packets if they areDaniel Hartmeier
2003-08-17Missing break, change NULL -> 0 for int parameter (no functionalDaniel Hartmeier
2003-08-15change arguments to suser. suser now takes the process, and a flagsTed Unangst
2003-08-14m_copyback()'s 4th arg is const void *, nuke (caddr_t) casts.Jason Wright
2003-08-11Fix DIOCCHANGEADDR, use the supplied ticket instead of 0.Daniel Hartmeier
2003-08-09This patch remove the restriction that tables cannot be used in routing orCedric Berger
2003-08-07make pf_match take u_int32_t instead of u_int16_tHenning Brauer
2003-07-31Make table tickets per-ruleset instead of global.Cedric Berger
2003-07-29avoid stack smash on FDDI case. found by kernel propolice.Jun-ichiro itojun Hagino
2003-07-29Set pf_state->rt_ifp when creating the state entry, instead of doing itDaniel Hartmeier
2003-07-29More aggressive and easier to understand skip steps for addresses.Cedric Berger
2003-07-28typo. from cedricJun-ichiro itojun Hagino
2003-07-25do not flip ip_len/ip_off. pechkin and henning okJun-ichiro itojun Hagino
2003-07-25%lu for u_long argJason Wright
2003-07-24conform to RFC2367 on SADB_xx naming (local name must be prefixed withJun-ichiro itojun Hagino
2003-07-24hmac-sha2-{256,384,512} support in AH/ESP auth. markus okJun-ichiro itojun Hagino
2003-07-23remove packets in queues (like ipintrq) with m->m_pkthdr.rcvif pointingJun-ichiro itojun Hagino
2003-07-19Simplify struct pf_pooladdr to include struct pf_addr_wrap directlyCedric Berger