summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2009-02-16allocate the large structures instead of putting them on the stack, andTheo de Raadt
2009-02-16Allow username and password to be up to 255 characters in length.Can Erkin Acar
2009-02-16pfsync v5, mostly written at n2k9, but based on work done at n2k8.David Gwynne
2009-02-15Revert previous.Marc Balmer
2009-02-15Fix compilation of kernels that have pf, but not pfsync.Marc Balmer
2009-02-12revert pf.c r1.629 (which moved to this file) which was causingStuart Henderson
2009-02-06Remove bogus casts of integer constants SPPPIO[GS]DEFS to caddr_tAlexander Yurchenko
2009-02-03Use our own flags to set the operations and not RTF_PROTOX.Michele Marchetto
2009-01-31u_char is not compatible with default argument promotion type thusAlexander Yurchenko
2009-01-31No need to invent another _offset, just use the one from param.h.Alexander Yurchenko
2009-01-31unbreak ! INET6 case by sprinking #ifdef INET6Henning Brauer
2009-01-30sync the part copied from ip_output: always initialize IP checksumChristian Weisgerber
2009-01-30sprinkle splassert(IPL_SOFTNET) around the code that inserts, unlinks, andDavid Gwynne
2009-01-29Split the address selection from pools away from pf.c and put it inPierre-Yves Ritschard
2009-01-29move some code around in preparation for future work:Henning Brauer
2009-01-29Fix a crash found by bluhm@ in rn_mpath_reprio(). The rn_mklist handling wasClaudio Jeker
2009-01-28Get rid of the ugly rtentry hack.Michele Marchetto
2009-01-28Implement basic routing socket filtering. It is possible to give a list --Claudio Jeker
2009-01-27If a packet translation was a NOP, undo separate NAT key andMarco Pfatschbacher
2009-01-27handle HW VLAN tags being passed down; from BradChristian Weisgerber
2009-01-27include the VLAN priority for hardware tagging, too; ok claudio@Christian Weisgerber
2009-01-27make the hardware/no hardware tag stripping cases consistent and don'tChristian Weisgerber
2009-01-27make drivers tell the mclgeti allocator what their maximum ring size isDavid Gwynne
2009-01-16In pf_test_rule(), if we don't create a state, free any state keys thatDavid Krause
2009-01-09fix egress group matching for IPv6; ok claudio@David Krause
2009-01-08Fix sockaddr_mpls structure.Michele Marchetto
2009-01-06Always check rs_malloc() returns. Also add M_ZERO and M_CANFAILThordur I. Bjornsson
2009-01-06Change the way way rn_mklists work (especially the RNF_NORMAL ones).Claudio Jeker
2009-01-06Send broadcast and multicast traffic not only out on all bridge interfaces butClaudio Jeker
2009-01-03sync flow sequence ids on all used pflow interfaces.Joerg Goltermann
2009-01-03Write back the priority the kernel used. Fixes a problem seen in ospfd whenClaudio Jeker
2008-12-29At least try to make this code a bit easier to read. Don't fiddle with xClaudio Jeker
2008-12-29Use rn_mpath_next() in rtalloc_mpath() to figure out if the next routeClaudio Jeker
2008-12-22Change DLT_MPLS number.Michele Marchetto
2008-12-21split the pfsync input routine up so that each action has its own functionDavid Gwynne
2008-12-18Remove redundant function prototypes which are already in pfvar.hDavid Hill
2008-12-14Allow trunk_hashmbuf() to take HW VLAN tagging into consideration.Brad Smith
2008-12-14Since trunk_hashmbuf() and thus trunk_lb_gethdr() are no longer specificBrad Smith
2008-12-12Introduce a if_priority that will be added to RTP_STATIC when routes areClaudio Jeker
2008-12-12Make sure that incomming routing messages don't have RTP_DOWN set. MaskClaudio Jeker
2008-12-11export per-interface mbuf cluster pool use statistics out to userlandTheo de Raadt
2008-12-05add ethertype and tcpdump support for VLAN stacking (QinQ) withStuart Henderson
2008-12-01A bit more cleanup.Brad Smith
2008-11-30- Remove unused if_reset "bus reset routine" field in the ifnet struct.Brad Smith
2008-11-28Eliminate the redundant bits of code for MTU and multicast handlingBrad Smith
2008-11-26Avoid network livelock.Theo de Raadt
2008-11-26dont have bpf.h expose the kernel ticks variable wherever it is includeing.David Gwynne
2008-11-26provide m_clsetlwm, an interface for an interface to raise its lowDavid Gwynne
2008-11-25expect if_flags to have IFF_RUNNING rather than IFF_UP before modifyingDavid Gwynne
2008-11-25art says he doesnt suck anymore, so enable the really big clusterDavid Gwynne