summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2004-11-30missing $OpenBSDMarkus Friedl
2004-11-29tiny knf, no binary change.Hans-Joerg Hoexer
ok otto jsg henning pat markus deraadt fgs
2004-11-29plug memory leaks on errorPatrick Latifi
ok canacar markus millert
2004-11-29remove old header. everything should use net80211/ stuff.Federico G. Schwindt
as for the ports, i could only find one. if there are more, they will be fixed in the tree as discussed with peter. deraadt@ pvalchev@ ok.
2004-11-29put text after #endif in comment (compile w/ gcc3)Peter Valchev
2004-11-28In kernel pppoe client, a simple IPv4 only implementation.Can Erkin Acar
Initial porting from NetBSD by David Berghoff. Modified/simplified to match our sppp implementation. ok deraadt@
2004-11-26implement net.key.v2.sadb_dump.{unspec,esp,ah,...} sysctl subtreeMarkus Friedl
and use sysctl for 'ipsecadm show'; ok deraadt
2004-11-24fix a bug that leads to a crash when binat rules of the formDaniel Hartmeier
'binat from ... to ... -> (if)' are used, where the interface is dynamic. reported by kos(at)bastard(dot)net, analyzed by Pyun YongHyeon
2004-11-19remove superfluous m_tag_copy/m_tag_prepend, already covered by m_copym2()Daniel Hartmeier
reported by Joerg Sonnenberger, ok henning@
2004-11-19Plug memory leak. Found by pat@. Thanks!Hans-Joerg Hoexer
ok myself markus@
2004-11-18s/Access/Address/ at IFT_CARPMarco Pfatschbacher
2004-11-16Fix for PR3983Ryan Thomas McBride
- Add a new PFSTATE_STALE flag to uncompressed state updates sent as a result of a stale state being detected, and prevent updates with this flag from generating similar messages. - For the specific case where the state->src in the recieved update is ok but the state.dst is not, take the partial update, then "fail" to let the other peers pick up the better data that we have. From Chris Pascoe. ok dhartmei@
2004-11-12The flag to re-filter pf-generated packets was set wrong by synproxyDaniel Hartmeier
for ACKs. It should filter the ACK replayed to the server, instead of of the one to the client. Thanks to Daniel Polak for testing.
2004-11-11Check IFF_UP at tun_output().Marco Pfatschbacher
ok henning, markus.
2004-11-10Safer IF_INPUT_ENQUEUE macro.Alexander Yurchenko
ok millert@
2004-11-09big KNF spanking, no change in object file, ecstatic ok from claudioHenning Brauer
2004-11-09use NULL instead of 0 for poiter comparisions,Henning Brauer
from "Alexey E. Suslikov" <cruel@texnika.com.ua> with a little help from itojun
2004-11-07For RST generated due to state mismatch during handshake, don't setDaniel Hartmeier
th_flags TH_ACK and leave th_ack 0, just like the RST generated by the stack in this case. Fixes the Raptor workaround. ok beck@, markus@
2004-11-02added new commands to ifconfig used by net80211 interfaces:Reyk Floeter
mode (set mode for multi-mode interfaces) and chan (set the radio channel). some additional output will be printed by "ifconfig -m". ok deraadt@ millert@ damien@
2004-10-28media descriptions and such for carp, ryan daniel okHenning Brauer
2004-10-28define IFT_CARP, and set if_type to that on carp interfaces insteadHenning Brauer
of hiding under IFT_PROPVIRTUAL, ryan daniel ok
2004-10-17Replace ifdef NATM with if NATM > 0Alexander Yurchenko
ok millert@ miod@
2004-10-15correctly parse the anchor names to which tables refer.Jared Yanovich
now they abide to the same rules as anchor names referred to by rules: - initial slashes (/) are stripped - anchor names with characters after the terminating NUL byte are considered invalid ok dhartmei (and previously) beck henning
2004-10-14avoid stupid commonsMichael Shalayeff
2004-10-11ifgroups reqriteHenning Brauer
there is now a TAILQ with all interface groups as members, and in struct ofnet there is only a pointer to the group structure stored and not its name. mostly hacked at c2k4 and somewhere over the atlantic ocean ok markus mcbride
2004-10-09sizeof(struct ether_header) -> ETHER_HDR_LENBrad Smith
ok mcbride@
2004-10-07Add an Ethernet option bit for master mode (for 1000baseT, the linkBrad Smith
master provides the clock -- this is normally the switch, but if you are doing back-to-back NICs, you need to tell one side to be the master). ok mcbride@
2004-09-29reset anchor pointer to NULL when stepping back into the main ruleset,Daniel Hartmeier
fixes pflog attributing states wrongly to anchors and pfctl -vvsn/sr showing wrong state counters for anchor rules. found by camield@, ok henning@, -stable candidate
2004-09-23- remove EVFILT_WRITE in bpfkqfilter() switch case, handledBrad Smith
by default label. - fill in kn_data with the number of bytes available, same behavior as FreeBSD/NetBSD. ok tedu@
2004-09-21Implement "no scrub" to allow exclusion of specific traffic from scrub rules.Aaron Campbell
First match wins, just like "no {binat,nat,rdr}". henning@, dhartmei@ ok
2004-09-20pf_routable(), used for the no-route keyword, was a v4 only implementation,Henning Brauer
and behaved incorrectly when used with v6. impliment the v6 case too. ok canacar mcbride
2004-09-17Clean up reference counting wrt state creation and destruction. FixesRyan Thomas McBride
problems with adaptive timeouts, max-states limits, and rules not being freed from memory. Diff from Chris Pascoe. ok henning@ dhartmei@
2004-09-16handle route labels on RTM_CHANGE, ok mcbride, prodded my markus some time agoHenning Brauer
2004-09-16ewps, kill the src route prototypes. was sitting in my tree for ages butHenning Brauer
forgot to commit...
2004-09-15Kill more netiso ghosts.Alexander Yurchenko
ok millert@
2004-09-14remove remaining unused traces from src routeHenning Brauer
2004-09-12Return the most common data link type instead of the first match for anClaudio Jeker
interface. Where the most common DLT is the one with the smallest id. This fixes tcpdump for atw(4) that attaches multiple bpf hooks. Tested: millert@, Sigfred Haversen, otto@, mcbride@, sturm@, krw@, Steve Shockley OK millert@ deraadt@
2004-09-09Copy out anchors with relative paths and wildcards correctly,Daniel Hartmeier
from jaredy@, ok henning@, mcbride@, deraadt@
2004-08-30Increment the states reference counter in the rule attached to the stateRyan Thomas McBride
being inserted, so that the counter does not wrap back when the state is removed. This fixes pfsync setups with adaptive timeouts. From Chris Pascoe ok canacar@ dhartmei@ henning@ deraadt@
2004-08-18fix bad packets passed to bpf from the gre(4) interface.Can Erkin Acar
reported by Robert Stone ( robert at arbor net ) via PR 3852 This is a different fix since gre(4) may carry non-ip packets. tested by Robert Stone and markus@ ok markus@ deraadt@
2004-08-18skip splx() for skiplookup; report Vafa D. Izadinia; ok henning, canacarMarkus Friedl
2004-08-15undo last commit, skipping over ifaddrs without IFA_ROUTE has unwantedHenning Brauer
sideffects in IPv6 land, noticed by Johan Fredin <griffin@legonet.org>
2004-08-11skip over interface addresses without IFA_ROUTE, fixes some issue with pppdHenning Brauer
from Max Laier <max@love2party.net>
2004-08-10Add SADB_X_EXT_LIFETIME_LASTUSE for use with isakmpd/DPD, adding thisHakan Olsson
extends the bitmap to 64bits. Also repair SADB_GET. hshoexer@ ok.
2004-08-10when inserting a dynamic group entry into the pfi_ifs tree, don't incorrectlyDavid Gwynne
create an interface entry with the same name. Prevents panics due to subsequent invalid refcounting. from Chris Pascoe ok dhartmei@ henning@
2004-08-09Change static functions to be non-static, for better backtraces.Otto Moerbeek
ok krw@ henning@
2004-08-08Zero route info structure in rtredirect(), avoiding a panic on labelOtto Moerbeek
copy. ok millert@ deraadt@ henning@
2004-08-03the rest of the '#if DIAGNOSTIC' -> '#ifdef DIAGNOSTIC' in the kernel; ok miod@Todd T. Fries
2004-08-03introduce route labels, allowing for up to 32 bytes of info to be attachedHenning Brauer
to a route. the label is sent over the routing socket wrapped into a new struct sockaddr_rtlabel, allowing for handling it like any other sockaddr. struct rtentry only contains a (16 bit) label-ID, with the actual labels kept outside the routing table. ID allocator code inspired by my own code for altq and pf tags. mostly hacked at the c2k4 hackathon, markus ok
2004-08-03Allow a unicast ip address to be specified for pfsync to send it's stateRyan Thomas McBride
updates to; this allows pairs of pfsync firewalls to protect the traffic with IPSec.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-27 04:00:23 +0000