summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2001-12-18NRL license cleaningTheo de Raadt
2001-12-18Update rt_ifp in DIOCCHANGERULE.jasoni
2001-12-15add support for creating span ports so that one can snoop a bridgeJason Wright
2001-12-13remove redundant #if NPF. ok jason@jasoni
2001-12-12Remember to add the current time...problem noticed by ho@Angelos D. Keromytis
2001-12-11Use queue.h macros.Jason Wright
2001-12-11- Log packet while mbuf is still valid.jasoni
2001-12-10Add an ioctl to add state entries (DIOCADDSTATE) for proxies.Daniel Hartmeier
2001-12-10Add stateful filtering for other (non-TCP/UDP/ICMP) protocol, based onDaniel Hartmeier
2001-12-10use queue.h macros for TAILQ operationsJason Wright
2001-12-10update ip stats when dropping an ip packetjasoni
2001-12-09Use queue.h TAILQ macros instead of accessing members directly.Jason Wright
2001-12-09Don't access the tq members directly, use the queue.h macros. Also,Jason Wright
2001-12-08mflags and len were uninitialized in bridge_broadcast (source of someJason Wright
2001-12-06Use hzto() to handle overflow of (hz * timeout) cases --- when usingAngelos D. Keromytis
2001-12-03reason int -> u_short. From Mike Pechkin.Daniel Hartmeier
2001-12-03Don't reset pf_status.debug and .since on DIOCCLRSTATUS.Daniel Hartmeier
2001-12-01217 lines of diff for KNF, dhartmei, you are evilTheo de Raadt
2001-11-30only make a copy of the mbuf if the route rule is dup-tojasoni
2001-11-30unifdef OLDIP6OUTPUTJun-ichiro itojun Hagino
2001-11-27typo - use correct mbufjasoni
2001-11-27do pf_route() before logging in case the logging created a bogus ruleMike Frantzen
2001-11-26add fastroute options similar to what is found in ipfjasoni
2001-11-21Use pf_pull_hdr() instead of manual mbuf traversal. Fixes potential crashesDaniel Hartmeier
2001-11-20don't allow CHANGEBINAT ioctl in securelevel > 1Mike Pechkin
2001-11-16yes, signed substraction does not work because of underflows, revert the prev...Michael Shalayeff
2001-11-14use substract when comparing keys, for ip addrs as well.Michael Shalayeff
2001-11-13fix pf from going off into the weeds on an ipv6 icmp packet with certain optionMike Frantzen
2001-11-08fix the endif commentMichael Shalayeff
2001-11-07enc and pflog were using iana space, move and update w/ iana current list; ni...Michael Shalayeff
2001-11-06Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary.Miod Vallat
2001-11-06Use #defines for skip step values. From dgregor@net.ohio-state.edu.Daniel Hartmeier
2001-10-24Reset states counter when clearing states.Daniel Hartmeier
2001-10-17make sure we use same key for removal (AF_INET was missing), ok deraadt@, dha...Markus Friedl
2001-10-15Add 'allow-opts' to rules. Packets with IP options will be blocked byDaniel Hartmeier
2001-10-13Patch from Ryan McBride, fixes IPv6 return-rst problem, found byDaniel Hartmeier
2001-10-07fixes pr/2105Niels Provos
2001-10-05Fix bug in if_vlan which could cause crashes in timeouts and 'ifconfig -a'Dale Rahn
2001-10-03M_WAIT in ether_output is wrong. Fix APPLETALK stuff.Artur Grabowski
2001-10-02change timeval to bpf_timeval; 32 bit in size, permitting much greater portab...Theo de Raadt
2001-10-02Convert ip_off of the inner IP header to host order in pf_test_state_icmp().Daniel Hartmeier
2001-10-01Make number of vlan interfaces configurable from UKC.Niklas Hallqvist
2001-09-30Tune TCP fsm (99.7% - 99.9% accuracy over 1e6 connections)Mike Frantzen
2001-09-27The skip steps array was one element short (since adding steps for af).Daniel Hartmeier
2001-09-27switch without break. This caused the 'ICMP too short' messages, sinceDaniel Hartmeier
2001-09-27Fix th_ack calculation in pf_send_reset(). return-rst didn't work sinceDaniel Hartmeier
2001-09-23ipxintr was missingMichael Shalayeff
2001-09-23Bump up the tcp half closed timeout (single FIN) to an hourMike Frantzen
2001-09-21Fix natlook (broke ftp-proxy) and a memory leak.Daniel Hartmeier
2001-09-20document why we use random()Theo de Raadt