summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2003-03-05Small fixes after code review, mostly on error path.Cedric Berger
2003-03-04(really) support user/group rules with 'inet6'Philipp Buehler
2003-03-03Make "pfctl -ss" output easier to parse. NO TRAFFIC -> NO_TRAFFIC.Cedric Berger
2003-03-02Use priority queue for TCP ACKs that have no payload. Very useful onDaniel Hartmeier
2003-02-28splsoftnet() around rn_lookup() which is not thread-safe.Cedric Berger
2003-02-27make packet classification for altq work in the IPv6 caseHenning Brauer
2003-02-27Repair IPv6 support for tables.Cedric Berger
2003-02-25- Handle src and dst comparisons correctly for binat so that it worksRyan Thomas McBride
2003-02-24SADB_X_CALG_MAX is supposed to be the highest numbered supported algorithmJason Wright
2003-02-23typo in export_auth; ok ho@Markus Friedl
2003-02-21Plug two mbuf leak on error bugs, one from dhartmei one from me.Jason Wright
2003-02-18Enforce min-ttl and random-id on inbound scrub as well as outbound.Camiel Dobbelaar
2003-02-17enqueue the copy that was just made, not the original (probably fixes kernel/...Jason Wright
2003-02-16KNFTheo de Raadt
2003-02-16KNFJason Wright
2003-02-15skeleton support for LZS compressionJason Wright
2003-02-15s/LSZ/LZS (consistent with linux and isakmpd *.cst)Jason Wright
2003-02-12Address the NFS problems recently discussed in various threads.Daniel Hartmeier
2003-02-12Labels should be followed by statements (fix gcc3 warning).Henric Jungheim
2003-02-12Remove commons; inspired by netbsd.Jason Wright
2003-02-12Make r.rpool.proxy_port[] a consistent byte order to match cleanup inRyan Thomas McBride
2003-02-12Fix a bunch of pf_route() bugs:Ryan Thomas McBride
2003-02-09Slightly less noisy debug printf from pf_map_addr(), ok mcbride@Daniel Hartmeier
2003-02-08Add scrub option 'random-id', which replaces IP IDs with random valuesDaniel Hartmeier
2003-02-05Remove the confusing and more-or-less unnecessary temporaryRyan Thomas McBride
2003-02-01Make it build without INET6 again.Daniel Hartmeier
2003-02-01from Chris Pascoe <c.pascoe@itee.uq.edu.au>:Chris Cappuccio
2003-01-31The fix introduced with 1.294 to solve issues with route-to inDaniel Hartmeier
2003-01-31Check protocol (TCP/UDP/ICMP/ICMP6) checksums of all incoming packets,Daniel Hartmeier
2003-01-31Send a RST when an invalid packet matches a TCP state during theDaniel Hartmeier
2003-01-25Fix the behaviour of rdr rules which redirect to a range of ports;Ryan Thomas McBride
2003-01-25Fix a bug that potentially caused fragments to be dropped when theDaniel Hartmeier
2003-01-24Sigh, pf_pull_hdr (aka pf_pull_hair) doesn't do an m_pullup, it merelyDaniel Hartmeier
2003-01-24Move the mbuf pullup for TCP options to the beginning of TCP handling,Daniel Hartmeier
2003-01-24Fix wscale support, the first version didn't really work right.Daniel Hartmeier
2003-01-23Fix a bug where the kernel crashes when translating IPv6 ICMP packets.Daniel Hartmeier
2003-01-21Support for TCP window scaling (RFC 1323). ok frantzen@Daniel Hartmeier
2003-01-20It's difficult to create a table by changing its flags.Cedric Berger
2003-01-20just for safety. from http://templeofhate.com/tglaser/pub/obsd.diffJun-ichiro itojun Hagino
2003-01-19format string fixesHenning Brauer
2003-01-18Argh! KNF.Ryan Thomas McBride
2003-01-18Make nat behave the way it used to by copying back the random source portRyan Thomas McBride
2003-01-17typo: bandwith -> bandwidthCamiel Dobbelaar
2003-01-15Fix another buglet with inactive sets.Cedric Berger
2003-01-15Fix a buglet when one "creates" a table which is already in theCedric Berger
2003-01-15Cleanup NULL tests in and around pfr_destroy_ktable().Cedric Berger
2003-01-15Kill stupid leaks when using FLAG_DUMMY option.Cedric Berger
2003-01-13Improve robustness & error handling. More thorough checks of user data.Cedric Berger
2003-01-10Fix adding and deleting addresses in a table when there is a conflict withCedric Berger
2003-01-10Cosmetic change, makes code a bit easier to understand.Cedric Berger