summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2005-04-05Return EINVAL in SIOCSIFLLADDR if new lladdr is a multicast address.Claudio Jeker
OK derradt@ tedu@
2005-04-04Add sysctl for dumping the SPDHans-Joerg Hoexer
ok deraadt, ok markus some time ago
2005-04-01do not mess with lcp if we are in cisco modeCan Erkin Acar
2005-03-30add lladdr command to ifconfig to set MAC address. diffs from freebsd viaTed Unangst
Kyunghwan KIM (prs 2117 and 2118) and Fredrik Widlund. ok deraadt
2005-03-25increment the right counter on error.Brad Smith
2005-03-24Unbreak tree, mono_time may no longer be used because of timecounters.Claudio Jeker
Use getmicrouptime() instead. Found by grange@ and henning@. OK henning@
2005-03-23Merge some sppp improvements from NetBSD:Can Erkin Acar
1. better timeout and keepalive handling 2. fix some memory leaks on error paths. 3. use arc4random instead of random 4. always send keepalives in cHDLC mode, from claudio@ Tested by Greg Mortensen (san) and jmc@ (pppoe), ok claudio@
2005-03-23Follow RFC and do not reset timeouts everytime sppp_cp_change_state()Can Erkin Acar
is called. Makes two sppp instances to handshake against each other. Tested by Greg Mortensen, ok claudio@
2005-03-15byte order of mss, only affects synproxy code path, from John L. ScarfoneDaniel Hartmeier
2005-03-04add state's tag for IPv6, too. spotted by markus@Daniel Hartmeier
2005-03-03when tagging, apply the same tag to all packets matching a state entryDaniel Hartmeier
(not just to the initial packet). note: kernel/userland abi change (rebuild pfctl). ok henning@
2005-02-27support 'tagged' in translation rules, non-delayed tag lookupDaniel Hartmeier
ok henning@, deraadt@
2005-02-20Avoid use after free when purging states.Ryan Thomas McBride
ok henning@ dhartmei@ claudio@
2005-02-20ifmedia_set() should not panic, nor can it really fail. So if there isBrad Smith
some problem setting the media to the requested value (usually IFM_AUTO), we now force the media selection to IFM_NONE. From NetBSD
2005-02-15rev 1.19Brad Smith
Avoid DoS attack by setting ifm->ifm_media to a high number and running the kernel out of memory. From NetBSD Fixes panic mentioned in PR 4088. ok krw@ mcbride@ dhartmei@
2005-02-15Fix scoping error which could cause some states with an empty ifname to beAaron Campbell
purged errneously. mpf@ ok
2005-02-07Add new function if_link_state_change() to take care of sending messagesRyan Thomas McBride
on the routing socket and notifying carp() of link changes. ok brad@ mpf@
2005-01-30Add some more reason counters and use them instead of overloading theDaniel Hartmeier
'memory' one, which helps debugging. Alters the kernel/userland ABI, rebuild pfctl and tcpdump. ok henning@
2005-01-20Use the packet's address family instead of the rule's when selecting aDaniel Hartmeier
replacement address for an rdr rule. Some rdr rules have no address family (when the replacement is a table and no other criterion implies one AF). In this case, pf would fail to select a replacement address and drop the packet due to translation failure. Found by Gustavo A. Baratto. ok mcbride@, henning@, markus@
2005-01-20sc->sc_sync_ifp = NULL if we fail to attach the multicast group.Ryan Thomas McBride
ok mpf@
2005-01-20Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreqRyan Thomas McBride
in kernel code to match. Brings pfsync in line with carp, vlan and pppoe devices. Old syncif and -syncif options still work, will be removed later. ok markus@
2005-01-18Rewriting the lladdr can now be done without using mbuf tags.Marco Pfatschbacher
Advertisements run through the carp interface first. So we just take the address from ifp0. While we're there, also remove carp_macmatch6, which isn't used anymore. Proposed by mcbride@ ok mcbride@, pascoe@
2005-01-18If there is no match in ifaof_ifpforaddr() return the first match -- mainClaudio Jeker
interface address -- and not the last one -- some alias. Also handle point to point networks a bit more special. With some input from markus@ OK markus@ henning@ fgsch@
2005-01-14First step in Bluetooth protocol stack support.Alexander Yurchenko
The code is adopted from the FreeBSD netgraph-based Bluetooth implementation by Maksim Yevmenkin <m_evmenkin@yahoo.com> but all netgraph glue was replaced with usual BSD network stack hooks. This is a work in progress. Only HCI layer works for now, L2CAP and RFCOMM are on the way. Help in testing from many, ok markus@.
2005-01-14remove old ifgroups ioctlsHenning Brauer
the old ifgroups haven't been in use ever really, and the new implementation is 3 months old today. theo ok (3 months ago)
2005-01-13protect pfkeyv2_dump_walker with spltdb(). Noticed by mpech@, thanks!Hans-Joerg Hoexer
ok ho@ markus@
2005-01-08Unslack and increase AUTHNAMELEN, since some ISP's prefer long usernames.Can Erkin Acar
Reported long time ago by Marc Huber and more recently by Steffen Schutz.
2005-01-07Make carp(4) traffic always appear on the physical (carpdev) interfaceRyan Thomas McBride
from pf's perspective. ok pascoe@ dhartmei@ henning@
2005-01-07add support for BIOCGDLTLIST and BIOCSDLT, see bpf(4)Reyk Floeter
ok canacar@, fgsch@, tested by some other people
2005-01-05- Use defines from pfvar.h for timeoutsRyan Thomas McBride
- instead of erroring on an attempt to set hostid to 0, just set it with arc4random() ok henning@ dhartmei@
2005-01-05Define defaults for the timeouts ensure consistency between kernelRyan Thomas McBride
and userland. ok henning@ dhartmei@
2005-01-01Disable timeout before destroying a pppoe interfaceCan Erkin Acar
ok deraadt@, henning@, krw@
2004-12-23Simplify hashtable (de)allocation by moving it into the clone functions.Camiel Dobbelaar
ok mickey@ henning@, "looks good" markus@ jason@
2004-12-22Introduce 'set skip on <ifspec>' to support a list of interfaces where noDaniel Hartmeier
packet filtering should occur (like loopback, for instance). Code from Max Laier, with minor improvements based on feedback from deraadt@. ok mcbride@, henning@
2004-12-20Enforce an ordering on ifnet such that CARP interfaces appear later in theChristopher Pascoe
list than physical interfaces. This makes ifa_ifwith* prefer a physical interface over a CARP one. This addresses the problem where a CARP interface in BACKUP state is selected after a route change, resulting in a loss of communications despite there being another interface available which is perfectly usable. ok mcbride@ mpf@
2004-12-19Make it possible for carp to work on fddi and token ring again.Ryan Thomas McBride
ok pascoe@ mpf@
2004-12-17ICMP state entries use the ICMP ID as port for the unique state key. WhenDaniel Hartmeier
checking for a usable key, construct the key in the same way. Otherwise, a colliding key might be missed or a state insertion might be refused even though it could be inserted. The second case triggers the endless loop fixed by 1.474, possibly allowing a NATed LAN client to lock up the kernel. Report and test data by Srebrenko Sehic.
2004-12-17knf cleanup, convert old k&r-style functions to ansi-style for aReyk Floeter
consistent style in sys/net/bpf.c. ok henning@, "looks fine" canacar@
2004-12-17Reorder code in the ethernet output path, and enhance unicast addressChristopher Pascoe
matching in the bridge receive path to make CARP operate correctly on physical interfaces that are participating in a bridge. ok mcbride@ henning@ dlg@
2004-12-16Clean up handling of sync_flags.Ryan Thomas McBride
ok pascoe@
2004-12-14move the ioctls w/ all the other ifaces; mcbride@ okMichael Shalayeff
2004-12-14Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN,Ryan Thomas McBride
prevents a possible endless loop in pf_get_sport() with 'static-port' Reported by adm at celeritystorm dot com in FreeBSD PR74930, debugging by dhartmei@ ok dhartmei@
2004-12-13move splsoftnet() below ACCEPT_FLAGS(), which contains a potential return.Daniel Hartmeier
from Max Laier.
2004-12-13Set creation timestamps correctly on states learnt by pfsync that areChristopher Pascoe
more than a second old. ok mcbride@ henning@
2004-12-11SADB_X_EXT_LIFETIME_LASTUSE is always definedMarkus Friedl
2004-12-11pass out the correct lifetime type on expireMarkus Friedl
2004-12-11count SADB_REGISTER only once per socketMarkus Friedl
2004-12-11Handle errors in pf_route{,6} more gracefully.Marco Pfatschbacher
Proposed by mcbride. ok henning@, mcbride@
2004-12-10Rename carp_output() to carp_fix_lladdr().Ryan Thomas McBride
2004-12-10allow pf to filter on route labelsHenning Brauer
pass in from route dtag keep state queue reallyslow tested by Gabriel Kihlman <gk@stacken.kth.se> and Michael Knudsen <e@molioner.dk> and ryan ok ryan
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-15 11:32:58 +0000