summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2008-06-11when we establish the mapping from a state key, do it both ways, akaHenning Brauer
2008-06-11factor out state creation code for readability; make it static inlineHenning Brauer
2008-06-11superfluous to check for m != NULL in pf_find_state, it is plainHenning Brauer
2008-06-11after finding a state in the outbound path clear the statekey pointerHenning Brauer
2008-06-11extra paranoia:Henning Brauer
2008-06-11yuck, fix a last minute collisionHenning Brauer
2008-06-11store a pointer to the stack side state key in the mbuf packetHenning Brauer
2008-06-10Handle the closing of half connections where we don't see the fullReyk Floeter
2008-06-10Simplify code slightly; use PR_ZERO with pool_get() rather than bzero().Ryan Thomas McBride
2008-06-10Free the counters struct when we free the table entry.Ryan Thomas McBride
2008-06-10Handle a special sloppy case where we only see one half of theReyk Floeter
2008-06-10Make counters on table addresses optional and disabled by default.Ryan Thomas McBride
2008-06-10when walking the entire state table it makes much more sense to walkHenning Brauer
2008-06-10remove a debug check& printf that should not have gone in in the firstHenning Brauer
2008-06-10save somespace in the state by collapsing two 8 bit ints used as booleansHenning Brauer
2008-06-10in pf_test_state_icmp when trying tomatch icmp errors to tcp sessionsHenning Brauer
2008-06-10implement a sloppy tcpstate tracker which does not look at sequenceHenning Brauer
2008-06-09rename arc4random_bytes => arc4random_buf to match libc's nicer name;Damien Miller
2008-06-08factor out the tcp sequence number tracking from pf_test_state_tcpHenning Brauer
2008-06-08The default route is 0.0.0.0/0 so it is necessary to check the mask as well.Claudio Jeker
2008-06-08First minimal cleanup of routing code, kill rtrequest() it got replaced withClaudio Jeker
2008-06-08Use m_freem() instead of m_free() in trunk_start() to ensure that theBrad Smith
2008-06-08null pointer check before derefHenning Brauer
2008-06-08Don't spam dmesg with sppp messages, instead use log(9).Claudio Jeker
2008-06-02Fix synproxy breakage introduced with the state table reorganization.Ryan Thomas McBride
2008-05-30trivial KNF before we go furtherHenning Brauer
2008-05-29Second half of PF state table rearrangement.Ryan Thomas McBride
2008-05-29rewrite the state table logic.Henning Brauer
2008-05-23Deal with the situation when TCP nfs mounts timeout and processesThordur I. Bjornsson
2008-05-21Only cancel (timeout_del()) the timeout if we're not going to delay itMichael Knudsen
2008-05-21Just clear the timeout since timeout_del() can cope withMichael Knudsen
2008-05-18KNFRyan Thomas McBride
2008-05-17Initialize the timeouts only once instead of everytime they are startedCan Erkin Acar
2008-05-15divert for ipv6; ok henning, pyrMarkus Friedl
2008-05-13Remove commented out NetBSD __KERNEL_RCSID macro usage.Brad Smith
2008-05-11Check to make sure pp_tlf is not NULL in sppp_keepalive() before calling it.Brad Smith
2008-05-11When passing opt[] array as an argument, use opt instead of &opt. WhileCan Erkin Acar
2008-05-10convert sdltosa to a real cast because I removed the silly makro last night.Claudio Jeker
2008-05-09replace rtrequest() with corresponding rtrequest1() replacement.Claudio Jeker
2008-05-09Add support to kill states by rule label or state id.Marco Pfatschbacher
2008-05-09there was a race between the addition of mpls and tx mitigation. this givesDavid Gwynne
2008-05-09Fix a logic botch around prioinv that resulted in wrong ordering of moreClaudio Jeker
2008-05-09when cloning, copy the priority from the parent to the cloned route,Henning Brauer
2008-05-09divert packets to local socket without modifying the ip header;Markus Friedl
2008-05-09A little bit of magic to make arp lookups work in MPLS as they should.Claudio Jeker
2008-05-08Add license and OpenBSD RCS Tag to the file, spotted by Dries Schellekens.Pierre-Yves Ritschard
2008-05-08reorder elements in pf_state_peer to avoid wasting memory. cvs blameTheo de Raadt
2008-05-08Start at making mpe tap to bpf. While there move if_start() call insidePierre-Yves Ritschard
2008-05-08Hook mpe(4) correctly into mpls so that it is possible to tunnel packets overClaudio Jeker
2008-05-08UP mpe interfaces.Esben Norby