summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2003-08-09This patch remove the restriction that tables cannot be used in routing orCedric Berger
2003-08-07make pf_match take u_int32_t instead of u_int16_tHenning Brauer
2003-07-31Make table tickets per-ruleset instead of global.Cedric Berger
2003-07-29avoid stack smash on FDDI case. found by kernel propolice.Jun-ichiro itojun Hagino
2003-07-29Set pf_state->rt_ifp when creating the state entry, instead of doing itDaniel Hartmeier
2003-07-29More aggressive and easier to understand skip steps for addresses.Cedric Berger
2003-07-28typo. from cedricJun-ichiro itojun Hagino
2003-07-25do not flip ip_len/ip_off. pechkin and henning okJun-ichiro itojun Hagino
2003-07-25%lu for u_long argJason Wright
2003-07-24conform to RFC2367 on SADB_xx naming (local name must be prefixed withJun-ichiro itojun Hagino
2003-07-24hmac-sha2-{256,384,512} support in AH/ESP auth. markus okJun-ichiro itojun Hagino
2003-07-23remove packets in queues (like ipintrq) with m->m_pkthdr.rcvif pointingJun-ichiro itojun Hagino
2003-07-19Simplify struct pf_pooladdr to include struct pf_addr_wrap directlyCedric Berger
2003-07-18add missing includesDavid Krause
2003-07-17fix scrub frag reassembly after the stack's ip_len/ip_off flip correctionMike Frantzen
2003-07-15Adjust pflog after recent byte order changes, fixes the 'truncated-ip'Daniel Hartmeier
2003-07-15no named args in prototypesJason Wright
2003-07-12Remove two htons(), which were meant as ntohs(), and are wrong sinceDaniel Hartmeier
2003-07-12Prevent u_int16_t variable from overflowing and get rid of the compilerDaniel Hartmeier
2003-07-10correct another incorrect comparison in ip6 normalization.Jun-ichiro itojun Hagino
2003-07-10wrong comparison of IPv6 packetsizeJun-ichiro itojun Hagino
2003-07-09check if m->m_pkthdr.len is too shortJun-ichiro itojun Hagino
2003-07-09don't check exact ip6_plen and m->m_pkthdr.len match, as ip6_input()Jun-ichiro itojun Hagino
2003-07-09do not flip ip_len/ip_off in netinet stack. deraadt ok.Jun-ichiro itojun Hagino
2003-07-09KNFDaniel Hartmeier
2003-07-05backout 1.29; problem reported by Rukh w/ userland ppp.Jun-ichiro itojun Hagino
2003-07-04cosmetic changes to keep the different code paths in sync; ok henningMarkus Friedl
2003-07-04-add a "natpass" field to pf_ruleHenning Brauer
2003-07-04bad redundant copy; ok danielMarkus Friedl
2003-07-03unused global. dhartmei okJun-ichiro itojun Hagino
2003-07-01wrap pf_normalize_ip6() by #ifdef INET6. pointed out by Wouter ClarieJun-ichiro itojun Hagino
2003-06-30change that queue ID allocator so it always has the queues sorted by ID.Henning Brauer
2003-06-30reset interface statistics when loginterface is changed, closes pr3332,Daniel Hartmeier
2003-06-30missing pf_tag_purge()Henning Brauer
2003-06-30move prototype for pf_tag_purge() to pfvar.hHenning Brauer
2003-06-29normalize IPv6 packet (no reass, but it is a start). dhartmei & henning okJun-ichiro itojun Hagino
2003-06-29unused global. dhartmei okJun-ichiro itojun Hagino
2003-06-28redundant (pfvar.h already have it)Jun-ichiro itojun Hagino
2003-06-28remove duplicated prototype (they are in pfvar.h). dhartmei okJun-ichiro itojun Hagino
2003-06-27protos for userland buildTheo de Raadt
2003-06-27do pf_tagname2tag() in DIOCCHANGERULE as well.Henning Brauer
2003-06-27move down pf_tag_unref() calls in pf_rm_rule() to after the check wetehr thereHenning Brauer
2003-06-25add a pf_tagname field to ifbrlreq and a pf_tag field to ifbrlnode.Henning Brauer
2003-06-24in the ipv6 case, allow route-to to route to link-local addressesHenning Brauer
2003-06-24KNFHenning Brauer
2003-06-24recover code that requires exact match on rtm_change/lock (lost in netbsd 1.16).Jun-ichiro itojun Hagino
2003-06-23Don't remove anchor too early in table code, it makes PF use freed memory.Cedric Berger
2003-06-21count packets and bidirectionally on state entries, allowing for fine-grainedDamien Miller
2003-06-20Add MSS support to the synproxy. The client's MSS is sent to the server,Daniel Hartmeier
2003-06-20Extend 'BAD ICMP' debug message, include icmp type/code and outer IP headerDaniel Hartmeier