summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Collapse)Author
2004-06-27Media support for the 802.11 framework, missing in that commit the other day.Todd C. Miller
2004-06-26cleanup ioctl for ifgroups; ok pb@Markus Friedl
2004-06-26Add a table-driven implementation of ether_crc32_be().Christian Weisgerber
From Seishi Hiragushi via FreeBSD PR kern/49957. Also, while we're here, make the loop counter size_t. ok mcbride@
2004-06-25introduce "interface groups"Philipp Buehler
by "ifconfig fxp0 group foobar" "ifconfig xl0 group foobar" these two interfaces are in one group. Every interface has its if-family as default group. idea/design from henning@, based on some work/disucssion from Joris Vink. henning@, mcbride@ ok.
2004-06-25correct "scrub in" behavior for IPv6.Jun-ichiro itojun Hagino
remaining TODO: - "forward" case kernel behavior (IPv4 too), then pfctl syntax change - red-black tree
2004-06-25re-introduce PF_INOUT and move PF_FORWARD def to the end.Jun-ichiro itojun Hagino
pfctl is assuming that the keyword == 0 in its parser! (see decl for "dir").
2004-06-25Add tap aka layer 2 tunneling support to tun(4). It can be enabled by settingClaudio Jeker
the link0 flag via ifconfig(8). OK markus@, canacar@ also tested by ish@
2004-06-25Minor fixes suggested by nordin@ and henning@Thorsten Lockert
ok millert@
2004-06-25IPv6 reassembly on "scrub" directive.Jun-ichiro itojun Hagino
caveats: (to be addressed soon) - "scrub in" should queue fragments back into ip6intrq again, but somehow it does not happen - the packet is kept inside reass queue. need investigation - ip6_forwarding path is not tested - does not use red-black tree. somehow red-black tree behaved badly and was not robust. performance issue, the above one is more important. good things: - "scrub out" is perfectly ok - i think now we can inspect upper-layer protocol fields (tcp port) even if ip6 packet is fragmented. - reass queue will be cleaned up properly by timeout (60sec). we might want to impose pool limit as well
2004-06-24KNF, cleanup, readability fixes... this hurtHenning Brauer
ok itojun claudio
2004-06-24This moves access to wall and uptime variables in MI code,Thorsten Lockert
encapsulating all such access into wall-defined functions that makes sure locking is done as needed. It also cleans up some uses of wall time vs. uptime some places, but there is sure to be more of these needed as well, particularily in MD code. Also, many current calls to microtime() should probably be changed to getmicrotime(), or to the {,get}microuptime() versions. ok art@ deraadt@ aaron@ matthieu@ beck@ sturm@ millert@ others "Oh, that is not your problem!" from miod@
2004-06-23pfr_commit_ktable calls functions that can result in the currentRyan Thomas McBride
ktable being destroyed, which makes it unsafe in a SLIST_FOREACH. Fix from Chris Pascoe
2004-06-22Import current NetBSD/FreeBSD 802.11 framework.Todd C. Miller
Based in part on a diff from Matthew Gream.
2004-06-22Pull the plug on source-based routing until remaining bugs are eradicated.Cedric Berger
No need to reconfig kernel or rebuild userland stuff. requested deraadt@, help beck@
2004-06-22Unbreak previous commit ok markus@Can Erkin Acar
2004-06-22Add a new "filter drop" flag to bpf and related ioclts.Can Erkin Acar
When enabled, it notifies the calling interface that the packet matches a bpf filter and should be dropped. ok henning@ markus@ frantzen@
2004-06-22Don't use time-based random number generationThorsten Lockert
ok millert@ deraadt@
2004-06-21First step towards more sane time handling in the kernel -- this changesThorsten Lockert
things such that code that only need a second-resolution uptime or wall time, and used to get that from time.tv_secs or mono_time.tv_secs now get this from separate time_t globals time_second and time_uptime. ok art@ niklas@ nordin@
2004-06-21don't accept SADB_X_EXT_UDPENCAP if encapsulation is disabled; ok ho@Markus Friedl
2004-06-21move the IFF_UP check to bpfwrite; ok canacar@Markus Friedl
2004-06-21make it possble to use IPsec over link-local address (policy table usesJun-ichiro itojun Hagino
sin6_scope_id, IPsec porion uses embedded form). beck ok
2004-06-21Get rid of pf_test_eh() wrapper.Ryan Thomas McBride
ok cedric@ henning@
2004-06-21Don't use time for random starting value... "love it" deraadt@Thorsten Lockert
2004-06-20undo mbuf cluster breakage that causes free'ed packets to show up on theBob Beck
input queues when using dhcp and hostap wi, or xl, or fxp.... ok art@
2004-06-19require RTF_MPATH to enter a multipath route with RTM_ADD.Cedric Berger
route(8) takes a new -mpath modifier to enter a multipath route. requested deraadt@, ok itojun@ mcbride@ millert@
2004-06-19starting TDM T1->E3->whatever media interface model we will attemptTheo de Raadt
to program to over the next week; thanks for feedback in developing this from cedric, claudio, chris, alex
2004-06-14Remove DIOCBEGINRULES, DIOCCOMMITRULES, DIOCBEGINALTQS, DIOCCOMMITALTQS,Cedric Berger
DIOCRINABEGIN, DIOCRINACOMMIT ioctls. Use DIOCXBEGIN/DIOCXCOMMIT/DIOCXROLLBACK instead. ok beck@ dhartmei@ henning@
2004-06-14de-__PTheo de Raadt
2004-06-13debranch SMP, have funNiklas Hallqvist
2004-06-11Eliminate a dereference after pool_put when an inactive/no-longer referencedRyan Thomas McBride
table is destroyed in pfr_setflags_ktable. Fix from Chris Pascoe
2004-06-10rename struct pf_rule_addr member 'not' to 'neg', as 'not' is a reservedDaniel Hartmeier
keyword in C++. ok henning@, cedric@
2004-06-07Make deletion of a few addresses much faster on big tables. ok claudio@Cedric Berger
2004-06-06extend routing table to be able to match and route packets based onCedric Berger
their *source* IP address in addition to their destination address. routing table "destination" now contains a "struct sockaddr_rtin" for IPv4 instead of a "struct sockaddr_in". the routing socket has been extended in a backward-compatible way. todo: PMTU enhancements, IPv6. ok deraadt@ mcbride@
2004-06-04Remove the multicast address when we unconfigure the syncif.Ryan Thomas McBride
2004-06-02tables like to allocate lots of memory at once. use the previousTed Unangst
pool allocator, _nointr. testing/ok beck@ cedric@
2004-05-31thinko, reported by Fernando BragaDaniel Hartmeier
2004-05-31remove the broken auto-append-'0' code; ok canacar, deraadt, thierryMarkus Friedl
2004-05-29introduce SIOCSIFDESCR and SIOCGIFDESCR to maintain interfacejoshua stein
descriptions, configurable with ifconfig help from various, ok deraadt@
2004-05-28bpf device cloning.Alexander Yurchenko
Now to have more bpf devices just add device nodes in /dev, no need to recompile kernel anymore. Code from form@pdp-11.org.ru, some help from markus@. ok markus@ canacar@ deraadt@
2004-05-25Return buffered packets when reading from a bpf descriptor and theCan Erkin Acar
interface is detached, and wakeup any polling processes when the bpf descriptor is closed. ok henning@, tedu@
2004-05-21Use '/' instead of ':' as separator for anchor path components. Note thatDaniel Hartmeier
the parser now needs quotes around paths containing separators. ok mcbride@
2004-05-21copy out relative anchor paths correctlyDaniel Hartmeier
2004-05-19Allow recursive anchors (anchors within anchors, up to 64Daniel Hartmeier
levels deep). More work required, but this is already functional. authpf users will need to adjust their anchor calls, but this will change again soon. ok beck@, cedric@, henning@, mcbride@
2004-05-18if_ether.hBrad Smith
add ETHER_MAX_LEN_JUMBO, ETHER_VLAN_ENCAP_LEN, ETHER_ALIGN, and ETHERMTU_JUMBO constants. if.h add a few more interface capabilities flags. Some from NetBSD, some from FreeBSD. ok markus@
2004-05-18In DIOCCHANGERULE, move ticket increment above code that might freeDaniel Hartmeier
the ruleset and invalidate the pointer. ok cedric@
2004-05-17fix uninitialized var; found by millert@Michael Shalayeff
2004-05-16add DLT_PPP_ETHER DLT typeBrad Smith
From NetBSD ok deraadt@
2004-05-12Rework a block readded by the multipath commit that should ensure thatClaudio Jeker
RTM_CHANGE/LOCK only work on perfect matching routes. ppp and bgpd got broken because of this. Most of the code in the "grotty" block is already done by rn_lookup() only host routes need some special treatment. OK cedric@
2004-05-11pf_cksum_fixup() was called without last argument from normalization,Daniel Hartmeier
also fixup checksum when random-id modifies ip_id. This would previously lead to incorrect checksums for packets modified by scrub random-id. From Pyun YongHyeon. ok cedric@
2004-05-11change pf_route() loop detection: introduce a counter (number of timesDaniel Hartmeier
a packet is routed already) in the mbuf tag, allow at most four times. Fixes some legitimate cases broken by the previous change. ok cedric@