Age | Commit message (Expand) | Author |
2004-05-09 | Don't dereference scrub pointer when it's NULL, fix PR 3775, from | Daniel Hartmeier |
2004-05-08 | reference count bpf descriptors to protect against disappearing interfaces | Can Erkin Acar |
2004-05-07 | Replace RSA-derived md5 code with code derived from Colin Plumb's PD version. | Todd C. Miller |
2004-05-05 | Use RFC1323 PAWS timestamps as a logical extension to the conventional TCP | Mike Frantzen |
2004-05-04 | The tcp specific routing metrics are almost never used so reduce the routing | Claudio Jeker |
2004-05-04 | Apply bridge filter rules to incoming packets destined to the local machine. | Can Erkin Acar |
2004-05-04 | Remove useless ``elm'' argument from the SIMPLEQ_REMOVE_HEAD macro. | Alexander Yurchenko |
2004-05-03 | fix a stupid mistake in my previous commit. | Kenjiro Cho |
2004-04-30 | Unbreak building pfsync without carp. Found by marc@ | Ryan Thomas McBride |
2004-04-28 | gcc3 shut up (from naddy@) | Philipp Buehler |
2004-04-28 | do not return here | Philipp Buehler |
2004-04-28 | make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@ | Cedric Berger |
2004-04-28 | Dont step into INET6 code, just because af != AF_INET | Philipp Buehler |
2004-04-28 | spacing | Theo de Raadt |
2004-04-28 | pfsync stats fixups: | Ryan Thomas McBride |
2004-04-28 | Make carp(4) aware of its physical interface: | Ryan Thomas McBride |
2004-04-28 | point out that pfsync_send_bus and pfsync_sendout must be called in splnet() | Philipp Buehler |
2004-04-27 | validate the sequence numbers on TCP resets are an exact match. check is only | Mike Frantzen |
2004-04-27 | make separate functions to enable/disable altq, and call them when we | Kenjiro Cho |
2004-04-26 | - make the k field in struct bpf_insn unsigned, as promised in the | Otto Moerbeek |
2004-04-26 | Before enqueueing the packet, copy the contents of incoming clusters | Ryan Thomas McBride |
2004-04-26 | Prevent biases in arc4random() from disclosing the byte order of the firewall. | Ryan Thomas McBride |
2004-04-26 | The rule_number parameter for pf_get_pool() needs to be 32 bits, not 8 - | Ryan Thomas McBride |
2004-04-26 | anchor refcounting. ok dhartmei@ mcbride@ | Cedric Berger |
2004-04-25 | permit multiple default route. from kame | Jun-ichiro itojun Hagino |
2004-04-25 | check for input queue congestion on those as well and call if_congestion when | Henning Brauer |
2004-04-25 | prevent an endless loop with route-to lo0, fixes PR 3736, | Daniel Hartmeier |
2004-04-25 | get rid of a complete state tree walk at state expire while in splnet() | Philipp Buehler |
2004-04-25 | dont splx across functions | Philipp Buehler |
2004-04-25 | radix tree with multipath support. from kame. deraadt ok | Jun-ichiro itojun Hagino |
2004-04-25 | sync 'other' in test6, too. | Philipp Buehler |
2004-04-25 | sync with NetBSD, mostly a Lite2 merge. | Brad Smith |
2004-04-25 | don't add PF_GENERATED tag to synproxy generated packets for the second | Daniel Hartmeier |
2004-04-25 | undo "oops" commit on 1.14 (radix_mpath). | Jun-ichiro itojun Hagino |
2004-04-25 | indentation fix | Jun-ichiro itojun Hagino |
2004-04-24 | Add "probability xxx" rule modifier. ok deraadt@ | Cedric Berger |
2004-04-24 | be careful about option lengths. ok henning@ mcbride@ | Mike Frantzen |
2004-04-17 | unbreak | Henning Brauer |
2004-04-17 | when the input queue congestion flag is set stop evaluating the ruleset | Henning Brauer |
2004-04-17 | add a congestion indicator to if_queue. It is set when the input queue | Henning Brauer |
2004-04-09 | move some of the non-interrupt pools from the small kmem_map to the much | Mike Frantzen |
2004-04-05 | make pftag ** (pass pointer by reference), otherwise it's never updated. | Daniel Hartmeier |
2004-04-05 | Prevent stale states (states older than the local version) from overwriting | Ryan Thomas McBride |
2004-03-31 | in the tcp md5sig case allow empty (wildcard) src or dst | Henning Brauer |
2004-03-28 | Check variables in incoming packets which can cause problems if they're set | Ryan Thomas McBride |
2004-03-27 | wrap if_down() in splimp; tholo ran into splassert, miod tholo ok | Theo de Raadt |
2004-03-26 | Properly m_copyback() modified TCP sequence number after demodulation | Daniel Hartmeier |
2004-03-25 | Fix icmp checksum when sequence number modlation is being used. | Ryan Thomas McBride |
2004-03-23 | Hold off for 1 second before beginning bulk transfer. Avoids looping | Ryan Thomas McBride |
2004-03-22 | Support for best effort bulk transfers of states when pfsync syncif is | Ryan Thomas McBride |