Age | Commit message (Expand) | Author |
2009-03-15 | Introduce splsoftassert(), similar to splassert() but for soft interrupt | Miod Vallat |
2009-03-14 | Some ICMP types that also have icmp_id, pointed out by markus@ | Ryan Thomas McBride |
2009-03-09 | Make the DIOCSETIFFLAG, DIOCSETLIMIT, and DIOCSETTIMEOUT ioctls | Ryan Thomas McBride |
2009-03-07 | Make sure pd2 has a pointer to the icmp header in the payload; fixes | Ryan Thomas McBride |
2009-03-05 | Fix a panic in ether_output() when attempting to send multicast traffic on | Michele Marchetto |
2009-03-05 | Stricter state checking for ICMP and ICMPv6 packets: include the ICMP type | Ryan Thomas McBride |
2009-03-02 | Make sure rt_gateway is not NULL in rt_mpath_matchgate(). It is possible to | Claudio Jeker |
2009-03-01 | rework serialisation of messages slightly. | David Gwynne |
2009-03-01 | check pfsyncs IFF_RUNNING flag before doing stuff. should save time for | David Gwynne |
2009-03-01 | i can't see a reason that we'd need to go to splnet to call ip_output. | David Gwynne |
2009-02-27 | Do not check the link state when installing a route. This bit was missing in | Claudio Jeker |
2009-02-27 | fix quick reuse of tcp states. | Henning Brauer |
2009-02-27 | fix mbuf problems and simplify code, well spotted and input by | Joerg Goltermann |
2009-02-26 | bulk updates are sent from a timeout which walks over the state tree and | David Gwynne |
2009-02-24 | restore the parsing of incoming tdb update messages. this was disabled | David Gwynne |
2009-02-24 | Disable rt_if_track() for now. This causes the rtfree panic seen in PR6043 | Claudio Jeker |
2009-02-24 | request a bulk update when the pfsync if configuration is changed via an | David Gwynne |
2009-02-23 | dont put pfsync packets on the wire if no syncdev is specified. issues | David Gwynne |
2009-02-20 | Ensure that bpf_mtap() is always called at the same interrupt priority | Joel Sing |
2009-02-18 | bring back the NAT NOP fix, but this time right. | Henning Brauer |
2009-02-18 | if a peer requests a state that is marked as NOSYNC, then skip it. | David Gwynne |
2009-02-18 | Free authentication data when detaching sppp from interface. | Can Erkin Acar |
2009-02-17 | // style comments shouldnt be in the tree. | David Gwynne |
2009-02-17 | assert copyright over the changes i made. | David Gwynne |
2009-02-17 | init the tdb tailq. hopefully this fixes sthens crash. | David Gwynne |
2009-02-17 | fix uninitialized variable. | Charles Longeau |
2009-02-16 | allocate the large structures instead of putting them on the stack, and | Theo de Raadt |
2009-02-16 | Allow username and password to be up to 255 characters in length. | Can Erkin Acar |
2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
2009-02-15 | Revert previous. | Marc Balmer |
2009-02-15 | Fix compilation of kernels that have pf, but not pfsync. | Marc Balmer |
2009-02-12 | revert pf.c r1.629 (which moved to this file) which was causing | Stuart Henderson |
2009-02-06 | Remove bogus casts of integer constants SPPPIO[GS]DEFS to caddr_t | Alexander Yurchenko |
2009-02-03 | Use our own flags to set the operations and not RTF_PROTOX. | Michele Marchetto |
2009-01-31 | u_char is not compatible with default argument promotion type thus | Alexander Yurchenko |
2009-01-31 | No need to invent another _offset, just use the one from param.h. | Alexander Yurchenko |
2009-01-31 | unbreak ! INET6 case by sprinking #ifdef INET6 | Henning Brauer |
2009-01-30 | sync the part copied from ip_output: always initialize IP checksum | Christian Weisgerber |
2009-01-30 | sprinkle splassert(IPL_SOFTNET) around the code that inserts, unlinks, and | David Gwynne |
2009-01-29 | Split the address selection from pools away from pf.c and put it in | Pierre-Yves Ritschard |
2009-01-29 | move some code around in preparation for future work: | Henning Brauer |
2009-01-29 | Fix a crash found by bluhm@ in rn_mpath_reprio(). The rn_mklist handling was | Claudio Jeker |
2009-01-28 | Get rid of the ugly rtentry hack. | Michele Marchetto |
2009-01-28 | Implement basic routing socket filtering. It is possible to give a list -- | Claudio Jeker |
2009-01-27 | If a packet translation was a NOP, undo separate NAT key and | Marco Pfatschbacher |
2009-01-27 | handle HW VLAN tags being passed down; from Brad | Christian Weisgerber |
2009-01-27 | include the VLAN priority for hardware tagging, too; ok claudio@ | Christian Weisgerber |
2009-01-27 | make the hardware/no hardware tag stripping cases consistent and don't | Christian Weisgerber |
2009-01-27 | make drivers tell the mclgeti allocator what their maximum ring size is | David Gwynne |
2009-01-16 | In pf_test_rule(), if we don't create a state, free any state keys that | David Krause |