summaryrefslogtreecommitdiff
path: root/sys/net
AgeCommit message (Expand)Author
2003-06-29normalize IPv6 packet (no reass, but it is a start). dhartmei & henning okJun-ichiro itojun Hagino
2003-06-29unused global. dhartmei okJun-ichiro itojun Hagino
2003-06-28redundant (pfvar.h already have it)Jun-ichiro itojun Hagino
2003-06-28remove duplicated prototype (they are in pfvar.h). dhartmei okJun-ichiro itojun Hagino
2003-06-27protos for userland buildTheo de Raadt
2003-06-27do pf_tagname2tag() in DIOCCHANGERULE as well.Henning Brauer
2003-06-27move down pf_tag_unref() calls in pf_rm_rule() to after the check wetehr thereHenning Brauer
2003-06-25add a pf_tagname field to ifbrlreq and a pf_tag field to ifbrlnode.Henning Brauer
2003-06-24in the ipv6 case, allow route-to to route to link-local addressesHenning Brauer
2003-06-24KNFHenning Brauer
2003-06-24recover code that requires exact match on rtm_change/lock (lost in netbsd 1.16).Jun-ichiro itojun Hagino
2003-06-23Don't remove anchor too early in table code, it makes PF use freed memory.Cedric Berger
2003-06-21count packets and bidirectionally on state entries, allowing for fine-grainedDamien Miller
2003-06-20Add MSS support to the synproxy. The client's MSS is sent to the server,Daniel Hartmeier
2003-06-20Extend 'BAD ICMP' debug message, include icmp type/code and outer IP headerDaniel Hartmeier
2003-06-18Do not panic on no memory available when allocating bufs, pass ENOBUFSHenning Brauer
2003-06-14Use source's window scaling factor (instead of destination's) whenDaniel Hartmeier
2003-06-12in FIONREAD and FREAD, use IFQ_POLL instead of looking at if_snd.ifq_len /Henning Brauer
2003-06-10It would kind of help if the flags member was initialized, otherwise randomDaniel Hartmeier
2003-06-09Attempt to resolve byte order confusion in nat code once and for all.Ryan Thomas McBride
2003-06-08Returns the correct array size.Cedric Berger
2003-06-08A table in an anchor creates a real anchor: pfctl -sA works.Cedric Berger
2003-06-03move some prototypes to pfvar.h. needed soon.Henning Brauer
2003-06-03provide pf_tag2tagname which is the reverse of pf_tagname2tag. needed soon.Henning Brauer
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
2003-06-02nuke clause 3 & 4Jason Wright
2003-05-30KNF & ANSI, jason agreesHenning Brauer
2003-05-30o the timeout is int, not u_int32_tHenning Brauer
2003-05-24Unused variable.Cedric Berger
2003-05-18speed hack: delay fetching the mbuf tag until we really need it (hit aHenning Brauer
2003-05-18Merge pf_send_ack() and _send_syn() into a generic _send_tcp().Daniel Hartmeier
2003-05-17Correct two comment typos.Daniel Hartmeier
2003-05-17With rdr we want the source IP from the packet, not the source IP fromRyan Thomas McBride
2003-05-17allow inverse matching on tagsHenning Brauer
2003-05-17Add an 'action' code that allows the SYN proxy to swallow/drop a packetDaniel Hartmeier
2003-05-16TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can useDaniel Hartmeier
2003-05-14- modulate TCP Timestamps so they can't be used to detect NAT and to precludeMike Frantzen
2003-05-14tag on each matching rule, not just the last one.Henning Brauer
2003-05-14unifdef __FreeBSD__ and stuff. markus okJun-ichiro itojun Hagino
2003-05-14Use official (from pcap people) link type for pflog.Can Erkin Acar
2003-05-142 lines of code bring us tags on nat rulesHenning Brauer
2003-05-14move ETHERTYPE_xx declarations to <net/ethertypes.h>. meets netbsd practice.Jun-ichiro itojun Hagino
2003-05-14fix use after free race when purging the new PF tagsMike Frantzen
2003-05-13add support for tagging packets with arbitary tags and filtering based onHenning Brauer
2003-05-13back out. these changes were not tested. it might come as a surpriseTheo de Raadt
2003-05-13move ethernet protocol type defs into sys/net/, as it is not just for ethernetJun-ichiro itojun Hagino
2003-05-13Kill a bunch more commons (very few left =)Jason Wright
2003-05-13nuke common: ifnet_addrsJason Wright
2003-05-12- TCP window scaling is not applied to the SYNs' window so we must retract theMike Frantzen
2003-05-12Add comment about special (non-index) PFTM_* values.Daniel Hartmeier