summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2004-05-09Don't dereference scrub pointer when it's NULL, fix PR 3775, fromDaniel Hartmeier
2004-05-08reference count bpf descriptors to protect against disappearing interfacesCan Erkin Acar
2004-05-07Replace RSA-derived md5 code with code derived from Colin Plumb's PD version.Todd C. Miller
2004-05-05Use RFC1323 PAWS timestamps as a logical extension to the conventional TCPMike Frantzen
2004-05-04The tcp specific routing metrics are almost never used so reduce the routingClaudio Jeker
2004-05-04Apply bridge filter rules to incoming packets destined to the local machine.Can Erkin Acar
2004-05-04Remove useless ``elm'' argument from the SIMPLEQ_REMOVE_HEAD macro.Alexander Yurchenko
2004-05-03fix a stupid mistake in my previous commit.Kenjiro Cho
2004-04-30Unbreak building pfsync without carp. Found by marc@Ryan Thomas McBride
2004-04-28gcc3 shut up (from naddy@)Philipp Buehler
2004-04-28do not return herePhilipp Buehler
2004-04-28make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@Cedric Berger
2004-04-28Dont step into INET6 code, just because af != AF_INETPhilipp Buehler
2004-04-28spacingTheo de Raadt
2004-04-28pfsync stats fixups:Ryan Thomas McBride
2004-04-28Make carp(4) aware of its physical interface:Ryan Thomas McBride
2004-04-28point out that pfsync_send_bus and pfsync_sendout must be called in splnet()Philipp Buehler
2004-04-27validate the sequence numbers on TCP resets are an exact match. check is onlyMike Frantzen
2004-04-27make separate functions to enable/disable altq, and call them when weKenjiro Cho
2004-04-26- make the k field in struct bpf_insn unsigned, as promised in theOtto Moerbeek
2004-04-26Before enqueueing the packet, copy the contents of incoming clustersRyan Thomas McBride
2004-04-26Prevent biases in arc4random() from disclosing the byte order of the firewall.Ryan Thomas McBride
2004-04-26The rule_number parameter for pf_get_pool() needs to be 32 bits, not 8 -Ryan Thomas McBride
2004-04-26anchor refcounting. ok dhartmei@ mcbride@Cedric Berger
2004-04-25permit multiple default route. from kameJun-ichiro itojun Hagino
2004-04-25check for input queue congestion on those as well and call if_congestion whenHenning Brauer
2004-04-25prevent an endless loop with route-to lo0, fixes PR 3736,Daniel Hartmeier
2004-04-25get rid of a complete state tree walk at state expire while in splnet()Philipp Buehler
2004-04-25dont splx across functionsPhilipp Buehler
2004-04-25radix tree with multipath support. from kame. deraadt okJun-ichiro itojun Hagino
2004-04-25sync 'other' in test6, too.Philipp Buehler
2004-04-25sync with NetBSD, mostly a Lite2 merge.Brad Smith
2004-04-25don't add PF_GENERATED tag to synproxy generated packets for the secondDaniel Hartmeier
2004-04-25undo "oops" commit on 1.14 (radix_mpath).Jun-ichiro itojun Hagino
2004-04-25indentation fixJun-ichiro itojun Hagino
2004-04-24Add "probability xxx" rule modifier. ok deraadt@Cedric Berger
2004-04-24be careful about option lengths. ok henning@ mcbride@Mike Frantzen
2004-04-17unbreakHenning Brauer
2004-04-17when the input queue congestion flag is set stop evaluating the rulesetHenning Brauer
2004-04-17add a congestion indicator to if_queue. It is set when the input queueHenning Brauer
2004-04-09move some of the non-interrupt pools from the small kmem_map to the muchMike Frantzen
2004-04-05make pftag ** (pass pointer by reference), otherwise it's never updated.Daniel Hartmeier
2004-04-05Prevent stale states (states older than the local version) from overwritingRyan Thomas McBride
2004-03-31in the tcp md5sig case allow empty (wildcard) src or dstHenning Brauer
2004-03-28Check variables in incoming packets which can cause problems if they're setRyan Thomas McBride
2004-03-27wrap if_down() in splimp; tholo ran into splassert, miod tholo okTheo de Raadt
2004-03-26Properly m_copyback() modified TCP sequence number after demodulationDaniel Hartmeier
2004-03-25Fix icmp checksum when sequence number modlation is being used.Ryan Thomas McBride
2004-03-23Hold off for 1 second before beginning bulk transfer. Avoids loopingRyan Thomas McBride
2004-03-22Support for best effort bulk transfers of states when pfsync syncif isRyan Thomas McBride