summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2009-07-28do not leak pf_rule_item_pl items in pf_test_rule() whenHenning Brauer
2009-07-28check that pool_get actually gives us memory in pf_test_rule.Henning Brauer
2009-07-27tiemout_add -> timeout_add_secBret Lambert
2009-07-21pf_scrub_ip/ip6 prototypes are already in pfvar.hHenning Brauer
2009-07-19clalloc() can't fail, so there's no need to handle failure cases.Bret Lambert
2009-07-16Backout rev1.79 of if_vlan.c and rev1.66 of if_trunk.c;Thordur I. Bjornsson
2009-07-13Do the same rdomain checking in sppp as we do in the Ethernet case.Claudio Jeker
2009-07-13dont initialise ifp->if_snd.ifq_maxlen, and then follow it byDavid Gwynne
2009-07-13make the send queue one slot long. this forces packets off the virtualDavid Gwynne
2009-07-09unsigned -> unsigned intBret Lambert
2009-07-08Add the same routing domain assignments and checks into the not so usedClaudio Jeker
2009-07-07When adding or changing a MPLS route, add RTF_MPLS flag toMichele Marchetto
2009-06-26invert direction for inner icmp state lookups (e.g. traceroute with icmp)Markus Friedl
2009-06-26the pr_usrreq implementation for routing sockets shares exactly one lineBret Lambert
2009-06-25scrub_flags is a u_int8_t, but PFSTATE_SCRUB_TCP is 0x0100, so theStuart Henderson
2009-06-24move the "pf_map_addr: selected address" printf up to -xnoisy.Stuart Henderson
2009-06-22Remove unneeded sotorawpcb() call, as the PCB is unmolested betweenBret Lambert
2009-06-22Check that the address family is appropriate before processing ICMPv4 andJoel Sing
2009-06-22Always drop ICMPv6 in IPv4 datagrams, not only when compiled with INET6.Joel Sing
2009-06-22Fix scrub max-mss for IPv6 traffic.Joel Sing
2009-06-20Decrement routing socket count in MPLS detach caseBret Lambert
2009-06-17fix flow data values: first and last time, found by f-kons at yandex ruJoerg Goltermann
2009-06-17do better detection of when we have a better version of the tcp sequenceDavid Gwynne
2009-06-14enable support for deferring the packet that creates a state so that yourDavid Gwynne
2009-06-12rewrite the way states from pfsync are merged into the local state treeDavid Gwynne
2009-06-10jj reported a panic in bulk updates to me. this is my attempt to fix theDavid Gwynne
2009-06-08in pf_print_state_parts, do not use skw->proto to print the protocolHenning Brauer
2009-06-08bring back the fixed PF_AEQ/ANEQ/AZERO macros, the offending use has beenHenning Brauer
2009-06-08"do not call PF_ANEQ with af=0, dragons". fixes a problem with skipStuart Henderson
2009-06-08gah. something is not quite right, sthen sees strange behaviour fixedHenning Brauer
2009-06-08unfuck PF_AEQ PF_ANEQ PF_AZERO macos that got fucked when v6 supportHenning Brauer
2009-06-06when xflags got changed, tell the userland by routing socketsRainer Giedat
2009-06-05Add missing #ifdef INET6 ... #endifAlexander Hall
2009-06-05Initial support for routing domains. This allows to bind interfaces toClaudio Jeker
2009-06-04allow IPvShit to be turned off completely per-interface.Henning Brauer
2009-06-04Emulate a link state in tun(4). The link state goes up when the device isClaudio Jeker
2009-06-03make wireless interfaces priority 4 by default. other interfaces remainBob Beck
2009-06-02do the pf_pkt_addr_changed(m) magic just like gif etcHenning Brauer
2009-06-01There is no need to use a variable just for sizeof(). Garbage collect ifa.Claudio Jeker
2009-05-31Consolidate common code for interface attachment into single functionBret Lambert
2009-05-31make set loginterface, set hostid, set reassemble and set debugHenning Brauer
2009-05-31Hide RTP_DOWN in the kernel and don't expose it to userland. Userland isClaudio Jeker
2009-05-31Reenable interface state tracking now that I found and fixed the cause ofClaudio Jeker
2009-05-31Fix for the rtfree 2 panic seen by some people before the release. A missingClaudio Jeker
2009-05-26inherit the route label on cloned routesReyk Floeter
2009-05-18The routing table index rtableid has type unsigned int in the routingAlexander Bluhm
2009-05-13dont go splx(s) in the ioctl handler if we havent done splnet(). this addsDavid Gwynne
2009-05-13only keep track of the number of updates on tcp connections. state sync onDavid Gwynne
2009-04-30treat log as what it is, a flag variable. effectively a noop now but stopsHenning Brauer
2009-04-23print the type of the icmp message we're bitching about when debugging isDavid Gwynne