| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2001-06-28 | forgot to init fr_timeout | Niels Provos | |
| 2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos | |
| okay dhartmei@, dugsong@ | |||
| 2001-06-28 | Disallow filter modification when the system is "highly secure". | Hugh Graham | |
| Passed by dhartmei. | |||
| 2001-06-27 | change pf_tree_key->addr[2] from u_int32_t to struct in_addr for Niels | Daniel Hartmeier | |
| 2001-06-27 | in rdr rules, let port 0 be the port wildcard; ok dhartmei@ | jasoni | |
| 2001-06-27 | change pf_tree_node->state to void *, so Niels can use a tree for fragment ↵ | Daniel Hartmeier | |
| handling | |||
| 2001-06-27 | use proper icmp define | Niels Provos | |
| 2001-06-27 | add -z flag for zeroing statistics. -s status no longer resets anything | Kjell Wooding | |
| 2001-06-27 | add microtime, which seems to have gotten lost. | Kjell Wooding | |
| 2001-06-27 | IPFILTER->NPF | Angelos D. Keromytis | |
| 2001-06-27 | introduce the ALTQ queue macros into sys/net files. | Kenjiro Cho | |
| the new model removes direct references to the fields in ifp->if_snd, and defines the following macros to manipulate ifp->if_snd. IFQ_ENQUEUE(ifq, m, pktattr, err) IFQ_DEQUEUE(ifq, m) IFQ_POLL(ifq, m) IFQ_PURGE(ifq) IFQ_IS_EMPTY(ifq) the new model also enforces some rules regarding how to use these macros. details are descrined in http://www.csl.sony.co.jp/~kjc/software/altq-new-design.txt | |||
| 2001-06-27 | ALTQ base modifications to the kernel. | Kenjiro Cho | |
| - ALTQ introduces a set of new queue macros that coexist with the traditional IF_XXX macros. - "struct ifaltq" replaces "struct ifqueue" in "struct ifnet". - assign cdev major 74 for i386 and 54 for alpha as ALTQ control interface. | |||
| 2001-06-27 | Don't bzero() after doing a TAILQ_INIT()... | Angelos D. Keromytis | |
| 2001-06-27 | Initialize acquire state list in newly allocated policy. | Angelos D. Keromytis | |
| 2001-06-27 | state counter changes | Theo de Raadt | |
| 2001-06-27 | big KNF | Theo de Raadt | |
| 2001-06-27 | remove unneccessary check in ioctl | Theo de Raadt | |
| 2001-06-27 | Get rid of M_COPY_* macros; either use M_MOVE_* or M_DUP_*, depending | Angelos D. Keromytis | |
| on how macros should be treated. Code by fgsch@, ok by me and itojun@ | |||
| 2001-06-27 | typo | Dug Song | |
| 2001-06-27 | for other protocols, keep correct track of match stats | Niels Provos | |
| 2001-06-27 | handle non-TCP/UDP/ICMP protocols | Dug Song | |
| 2001-06-27 | remove print_ip, its unused | Niels Provos | |
| 2001-06-27 | clean up TAILQ usage | Niels Provos | |
| 2001-06-27 | KNF | Niels Provos | |
| 2001-06-27 | KNF | Niels Provos | |
| 2001-06-27 | only set reason code match if there was a rule that we matched | Niels Provos | |
| 2001-06-27 | Don't cache packets that hit policies -- we'll do that at the PCB for | Angelos D. Keromytis | |
| local packets. | |||
| 2001-06-26 | update match counts | Niels Provos | |
| 2001-06-26 | name comparison operators | Dug Song | |
| 2001-06-26 | fix PFRES_MAX handling | Theo de Raadt | |
| 2001-06-26 | array of counters indexed by reason codes | Theo de Raadt | |
| 2001-06-26 | rules have numbers now, use them. add two spl locks. | Daniel Hartmeier | |
| 2001-06-26 | clean up copyright | Niels Provos | |
| 2001-06-26 | rule nr is in rule now | Niels Provos | |
| 2001-06-26 | add rule nr for Niels | Daniel Hartmeier | |
| 2001-06-26 | pass rule to logging for state matches | Niels Provos | |
| 2001-06-26 | log-all causes state matches to log packets to pflog | Niels Provos | |
| 2001-06-26 | add rule pointer and log option to states | Daniel Hartmeier | |
| 2001-06-26 | get rid of another printf | Niels Provos | |
| 2001-06-26 | use reasons in pull_hdr, default log if pull_hdr fails. okay deraadt@ | Niels Provos | |
| 2001-06-26 | Use pool(9) for IPsec policy structures. | Angelos D. Keromytis | |
| 2001-06-26 | Keep the PFKEY sequence number at the TDB, plus a little bit of KNF | Angelos D. Keromytis | |
| 2001-06-26 | no longer pass around **m | Theo de Raadt | |
| 2001-06-26 | deal with NULL rule being passed to logging | Niels Provos | |
| 2001-06-26 | fix logging. the ip header is contained in the first mbuf. itojun and me. | Niels Provos | |
| 2001-06-26 | forgot htons | Niels Provos | |
| 2001-06-26 | add a subreason to the link header to allow us to determine why a packet was | Niels Provos | |
| dropped or passed. from discussion with theo and me. | |||
| 2001-06-26 | allow 0.0.0.0/x in rules | Peter Stromberg | |
| 2001-06-26 | more suitable error values when DIOCSTART/STOP fail; peters@telia.net | Daniel Hartmeier | |
| 2001-06-26 | no // comments | Markus Friedl | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |